
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05f7ae11-eebf-438e-aacf-884f5703260b.roa
File: 05f7ae11-eebf-438e-aacf-884f5703260b.roa (raw, json)
Hash identifier: Uzi1F+xc0Ekg7HwX+NMAWDRHBJ0e1F6eWcV5vdYOq3A=
Subject key identifier: 1D:41:65:7D:C3:0C:53:E1:4C:7B:AA:68:41:A2:B0:15:57:CA:5D:A0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 47FDE48D16F28DB28815D2FAAED8DA59CB2524A6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05f7ae11-eebf-438e-aacf-884f5703260b.roa
Signing time: Tue 04 Aug 2026 00:50:06 +0000
ROA not before: Tue 04 Aug 2026 00:50:06 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.173.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:fd:e4:8d:16:f2:8d:b2:88:15:d2:fa:ae:d8:da:59:cb:25:24:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 4 00:50:06 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=792f8e99c2b33915ad39f41717e6f7f497f4d8a42045182a165ef640f22fd45d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:46:ae:3c:77:85:8a:ae:0e:5d:b6:d9:d9:
aa:27:4d:1d:c3:33:74:e6:76:85:7e:06:c6:bd:85:
33:f7:12:b8:b4:91:3c:56:5c:f1:1d:6d:00:5c:c7:
57:42:8b:d0:c1:df:92:91:82:7b:53:2a:e7:52:78:
03:d9:de:e2:fe:fb:49:ae:8b:5f:6b:55:fc:5b:12:
5b:96:bc:e4:80:f1:02:38:3d:98:ff:66:1c:43:fb:
68:fe:30:34:c3:57:b2:9f:0a:3f:b7:04:12:07:7b:
51:5a:fe:4f:79:d4:e8:10:c2:d1:73:92:18:ae:27:
91:8f:85:50:92:eb:d6:25:5a:26:d8:6d:2d:cc:dd:
99:6f:83:73:d2:83:87:38:01:0d:70:95:b8:f5:c7:
1f:20:05:87:53:f6:80:77:4c:6d:9d:81:37:71:de:
c5:4c:de:75:bb:6a:68:95:09:0d:f4:b6:11:84:a8:
b5:19:1f:60:89:0c:42:42:84:f4:35:0a:e5:6e:37:
97:b3:cb:18:30:a5:6a:75:46:81:64:53:d0:a9:bf:
6c:ce:6c:22:88:a5:61:af:e9:c3:f4:8e:0e:d5:03:
bb:66:8f:6a:d3:5f:13:16:90:b7:52:68:b7:f9:c7:
4f:8f:cd:bf:6a:2d:29:71:94:8c:1b:7a:68:60:d8:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:41:65:7D:C3:0C:53:E1:4C:7B:AA:68:41:A2:B0:15:57:CA:5D:A0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05f7ae11-eebf-438e-aacf-884f5703260b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.173.252.0/22
Signature Algorithm: sha256WithRSAEncryption
56:4d:ec:a6:5e:ff:48:5e:13:d4:28:4b:16:74:7d:dd:54:89:
1d:1f:bd:4f:ab:f5:56:f5:11:55:76:47:16:5d:63:89:df:63:
fd:39:52:c4:06:87:30:ff:4e:d9:26:3e:19:e7:68:61:9d:f3:
16:4d:08:c4:f3:74:1c:4d:6a:ce:fb:c1:98:1a:e8:85:bd:8a:
5a:15:7b:d3:51:80:5d:77:11:ea:89:23:a6:fd:68:09:96:4d:
dd:c3:0b:5f:c9:e9:ab:bd:40:3f:6f:6b:4d:77:e6:ce:e4:aa:
f1:e8:d3:ae:d6:8c:94:f2:92:39:ff:66:43:2a:ab:ef:60:c2:
05:43:38:93:62:15:ad:6e:74:1c:4e:42:1b:1e:f3:6a:09:b7:
1a:c5:5a:2d:d9:eb:b7:05:3e:e7:f3:f5:14:26:85:06:3b:b4:
b6:f8:df:93:59:48:0f:29:08:1b:2c:76:50:04:1a:6c:4f:99:
0d:88:69:c7:38:6a:f2:70:b2:4f:e2:44:a4:72:5f:cb:98:81:
b5:a1:cf:49:7e:e3:c6:90:9c:70:a8:7b:80:cb:71:ec:ad:c4:
20:3e:23:b3:0b:dd:51:10:65:77:99:6b:3d:ad:69:b3:4e:d0:
e3:b4:1d:47:22:4c:40:fc:a3:06:e9:08:fe:49:03:cb:72:9e:
75:bb:bc:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 09:30:09 2026 by rpki-client