
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/198b9983-37de-4318-8190-8930b94cb8e3.roa
File: 198b9983-37de-4318-8190-8930b94cb8e3.roa (raw, json)
Hash identifier: yCr/MRqVlVBKpvhoOfipehKSBkvF3DOt6aOyagWezxo=
Subject key identifier: 6C:B1:2A:87:EE:C0:C7:90:2D:C1:F0:78:00:10:9C:37:15:25:91:9E
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 7970BC2CB677667D3DF9F548B0B0C7C8E07F94D4
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/198b9983-37de-4318-8190-8930b94cb8e3.roa
Signing time: Fri 08 May 2026 03:00:11 +0000
ROA not before: Fri 08 May 2026 03:00:11 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 21664
IP address blocks: 2605:9cc0:c0d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:70:bc:2c:b6:77:66:7d:3d:f9:f5:48:b0:b0:c7:c8:e0:7f:94:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 8 03:00:11 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=2e6f15d5926c82d7c01b596ea88b584c67821a6df4c88f552b7fc449440aeb35, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:b8:46:2e:a9:4d:8e:de:e8:28:1f:b8:c3:
01:e0:ba:98:26:56:de:ba:80:6c:0e:f3:e0:59:a6:
9c:ce:87:48:ee:db:7d:e9:fd:6a:39:79:e6:3e:19:
59:2d:0d:e9:e4:b3:a4:e3:68:5b:76:60:0c:48:82:
af:58:1e:a7:2a:1f:8f:68:98:8b:ef:a5:de:02:65:
06:b1:70:68:0c:b1:8f:e3:75:ec:4f:cd:47:6a:79:
70:3c:3e:79:b2:59:14:70:16:f1:1b:85:5b:bd:6f:
a5:97:1c:3c:19:2e:7d:99:08:33:99:89:3a:76:4a:
4f:ed:79:d1:a6:a3:39:91:3b:d0:15:bb:4d:a0:3e:
bc:0a:16:31:07:53:59:64:65:9c:08:b6:d2:50:5e:
26:2e:f6:79:31:6c:5c:7a:82:13:92:aa:d7:45:0a:
40:a6:83:62:8a:c5:d1:d5:b7:75:38:52:57:0a:14:
76:42:8d:79:a5:7a:c7:8b:0f:b2:b8:04:98:c2:17:
a0:e9:e0:c3:99:78:02:05:21:7d:63:4b:30:4e:9b:
07:2b:44:b3:91:72:bf:79:e8:78:db:6d:d8:02:cc:
9d:54:6b:b3:e9:3e:8d:38:68:bf:31:6c:4b:5d:fd:
e6:48:a1:f5:48:39:54:9f:9d:ad:ba:57:e6:a5:ec:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B1:2A:87:EE:C0:C7:90:2D:C1:F0:78:00:10:9C:37:15:25:91:9E
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/198b9983-37de-4318-8190-8930b94cb8e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c0d::/48
Signature Algorithm: sha256WithRSAEncryption
82:70:5f:f7:80:d7:7e:2e:1c:63:6d:79:85:73:69:5e:1e:89:
70:50:f6:34:60:5c:18:a7:51:0e:c2:cb:3e:8e:23:8f:e9:3f:
51:99:21:73:65:8f:06:e4:4c:d5:87:f3:02:11:4d:a7:94:a6:
ec:48:ec:bc:5e:25:55:8a:2b:b4:59:92:21:16:a2:77:34:10:
3e:9d:2d:e9:35:50:bf:85:05:8f:53:c8:29:2a:5b:16:f3:4b:
76:3a:41:0a:5a:f4:6b:26:99:85:f4:72:bb:e8:f5:f9:a5:43:
c3:a1:9f:1f:62:91:c0:9c:99:56:b9:95:e0:f3:96:4c:93:65:
0d:78:c1:46:1d:96:9d:64:44:75:a2:9c:32:33:d9:d2:41:16:
b5:92:66:59:7f:10:77:ec:1b:2f:18:71:cd:d8:f9:e8:9a:1b:
58:c9:48:2b:a3:ac:ba:d1:60:68:fd:83:80:bb:63:fb:ef:4a:
6e:58:9d:0f:ea:d2:45:c0:5f:78:75:1c:03:2e:bf:fd:11:5b:
32:a3:8c:35:d3:b6:ec:d5:41:ce:8d:d6:74:9e:3b:80:d9:52:
b6:6f:96:3f:1b:ee:e7:5e:7b:f8:7e:52:cd:37:04:d3:04:a9:
e9:d2:6b:28:46:b6:bd:29:c3:5a:7e:dd:55:f9:52:84:eb:86:
20:6f:42:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 23:15:37 2026 by rpki-client