
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0692c8de-d738-45f9-acd5-4946f21264df.roa
File: 0692c8de-d738-45f9-acd5-4946f21264df.roa (raw, json)
Hash identifier: MqRHjO7fkLaEAHKpUmwiZhYVXn4qMrS07hfTuyA6x68=
Subject key identifier: 55:C2:89:ED:A0:AA:7A:B5:8B:82:90:DB:0D:B6:1E:16:7C:6C:E3:5F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4ACEE82F5174CB0345985EE351B506BDD88EC739
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0692c8de-d738-45f9-acd5-4946f21264df.roa
Signing time: Fri 07 Aug 2026 03:20:34 +0000
ROA not before: Fri 07 Aug 2026 03:20:34 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 155.38.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ce:e8:2f:51:74:cb:03:45:98:5e:e3:51:b5:06:bd:d8:8e:c7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 03:20:34 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=a13ec1b7f2e95a42a7e5c112d3410ea14d969e6078f46b188f3155786b9dc211, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:df:1a:98:8a:05:bb:69:b7:81:a3:cd:13:de:
03:9e:90:d9:c1:e9:0f:2c:ed:0b:f5:0c:f4:ac:5c:
c9:94:7c:83:07:d1:7d:99:be:c0:64:b1:98:ea:8e:
e7:a5:87:52:00:1f:cc:cb:52:7a:02:e4:62:1b:28:
ca:27:a0:c7:e9:53:b9:b7:f7:76:13:ea:69:b5:ca:
3d:02:b3:00:2e:5f:35:0a:66:f3:27:e7:48:a8:11:
12:3f:62:63:fe:d4:9a:9c:cb:0b:ce:5f:f1:ca:28:
43:1b:1a:5a:2b:dd:cf:ec:2a:60:f2:0b:3d:81:ce:
dd:f6:9f:f8:45:09:22:7c:b6:a7:4e:d8:6f:b5:c6:
61:04:f1:36:6c:2b:2a:f0:a2:7f:73:54:32:24:6c:
88:50:45:59:6e:6f:d4:48:22:2f:f1:96:1c:02:fb:
a6:e4:7b:e7:89:c0:90:3c:40:ee:17:6e:4e:3b:dc:
dd:0a:5d:1a:60:55:fd:5c:48:d3:e6:87:de:ab:8a:
a8:7e:5f:ce:32:c9:52:6c:b6:bf:f9:63:a1:f8:75:
1a:9a:b1:0c:ec:bb:21:0a:d7:b2:fa:fc:85:ba:db:
b6:fe:29:69:ca:68:20:9a:3e:94:07:93:4c:6e:ec:
9a:5f:9e:8c:40:f7:f2:a4:10:43:5d:cc:ab:df:de:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C2:89:ED:A0:AA:7A:B5:8B:82:90:DB:0D:B6:1E:16:7C:6C:E3:5F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0692c8de-d738-45f9-acd5-4946f21264df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.38.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:ca:88:8f:87:4b:42:cd:56:8f:2e:fd:ad:b8:01:75:b3:fb:
e8:24:ec:ba:a3:13:a0:f1:59:61:99:15:68:d9:71:43:b4:24:
71:b6:65:78:50:fe:d1:59:f5:16:14:ed:ab:e6:bc:e3:a9:95:
fd:b4:73:cb:59:61:8c:9a:99:ca:83:d9:5b:6d:86:8d:ee:a9:
2c:e0:e0:20:99:5f:54:8b:a8:4a:bd:16:cb:47:e8:23:65:eb:
11:9c:35:4f:29:05:9f:40:7e:ec:af:b4:9b:f6:70:59:22:2c:
9d:d5:63:8a:c5:4e:6a:11:80:82:cd:a1:6b:a1:d8:32:e1:c7:
9c:82:12:45:16:d3:1b:a5:a5:a1:ff:47:5e:f3:a3:e5:9a:de:
20:be:b7:ec:62:11:43:68:2e:79:22:ba:65:55:8a:6b:99:c3:
bb:66:53:b1:33:5c:bb:7e:75:51:2b:e3:0e:17:28:7d:9b:98:
8e:05:3e:85:4b:dc:36:eb:a5:28:f7:53:40:bf:c8:40:40:74:
6c:33:66:09:26:79:fe:3e:61:81:17:00:01:cd:03:2c:17:c4:
6c:62:63:74:c2:10:5b:67:70:08:36:17:8b:72:ff:80:bc:9c:
8f:ce:88:d9:9c:26:d6:c4:a4:d0:a2:3e:82:e1:b0:e2:cc:a1:
91:c3:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 08:41:20 2026 by rpki-client