
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06eeeda8-ef79-4845-b395-2e4a5da86198.roa
File: 06eeeda8-ef79-4845-b395-2e4a5da86198.roa (raw, json)
Hash identifier: Ex28bhMb0/U+FOBX8YaqOlfMQrPSXVaVlonYGMn9MjM=
Subject key identifier: 1A:E9:36:24:C4:61:87:BD:21:99:02:58:22:25:85:CC:82:8B:E9:EB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5188AB71880BD017168785160915176A1C0C33BA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06eeeda8-ef79-4845-b395-2e4a5da86198.roa
Signing time: Tue 19 May 2026 01:30:34 +0000
ROA not before: Tue 19 May 2026 01:30:34 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 52.93.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:88:ab:71:88:0b:d0:17:16:87:85:16:09:15:17:6a:1c:0c:33:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 19 01:30:34 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=9f8d83a137fbe8f4266acc8053b5cbb92244ade35e53a41d44adbf355bf6ee53, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:b2:bb:1d:28:e2:81:f4:4f:15:aa:fe:73:
5f:b4:e7:05:73:4e:81:c1:96:90:b9:97:02:e2:38:
bb:da:60:32:04:b5:7b:3b:ee:2b:70:f4:0d:84:62:
99:8b:fd:d4:62:bf:79:9c:1c:aa:88:6f:fe:62:27:
73:2e:05:23:85:9d:94:8b:3e:01:e5:5a:01:db:47:
c2:f8:c8:68:9a:32:3e:58:28:c6:ec:54:33:a6:0d:
46:52:74:78:f6:ec:25:c7:2d:df:0a:56:48:e0:11:
75:31:30:eb:fb:60:53:ac:13:f6:48:b5:a9:7e:56:
59:8e:9e:2a:9a:94:a8:79:74:e2:bf:5b:fc:09:2f:
3a:f4:58:d6:10:71:26:c2:99:38:ff:36:55:e4:10:
df:5c:98:63:31:22:ef:78:81:c2:a5:45:35:8e:dc:
d7:79:0b:aa:88:25:f4:37:22:a1:69:5f:90:e0:90:
06:b0:4f:98:1e:fd:b6:bf:99:94:02:85:d7:3d:2a:
b2:e5:f8:66:4a:c5:fa:15:a4:08:35:8d:f8:d9:06:
4a:31:cc:3b:a1:31:22:b4:57:67:ac:a9:97:ae:b0:
67:8e:ab:b9:88:34:74:39:46:bf:e6:ae:97:8b:17:
df:fd:65:f0:03:cb:d2:15:5c:29:a6:36:61:5f:86:
c9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:E9:36:24:C4:61:87:BD:21:99:02:58:22:25:85:CC:82:8B:E9:EB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/06eeeda8-ef79-4845-b395-2e4a5da86198.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.93.97.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:8b:75:1a:0e:90:14:aa:f9:07:91:4a:cc:a2:9a:e9:7b:53:
c4:61:5a:01:ce:bc:4f:36:b1:1a:ba:83:6d:33:aa:37:2f:f4:
4e:40:40:3c:b9:04:be:a8:d7:c5:bd:8d:4f:a0:10:53:84:47:
3b:95:25:a3:bf:d4:52:1e:ae:e7:ef:72:fe:0e:b0:7c:36:1e:
68:c7:d9:1b:46:08:25:0d:d2:6e:93:c0:c5:c3:5f:d7:d1:71:
33:e8:4c:e4:37:ce:bf:46:f7:21:08:08:bb:ec:23:57:c6:7c:
ff:91:a7:e8:88:0d:1c:06:d7:66:b9:59:41:97:8b:85:c7:f4:
3a:a4:6c:ba:63:42:d1:c1:f5:0d:f7:aa:79:ad:7d:67:d9:66:
46:63:74:3d:fc:ae:55:9d:c2:9d:bf:d2:8b:4b:c8:e5:a8:6d:
66:f1:b0:9a:fb:91:11:ea:b0:5d:c0:9a:1f:0c:a1:a9:bc:9c:
a7:eb:66:ec:08:2c:22:f2:e9:d2:d0:54:93:b8:31:70:2d:62:
54:7a:12:67:c5:cc:b6:dd:40:35:ee:30:96:4a:c0:62:ed:e0:
84:12:91:8f:77:81:8a:82:b0:9f:a0:68:24:46:d4:ee:f3:ed:
dd:e0:d6:06:d1:14:56:30:55:76:50:28:6b:4b:86:84:7f:e4:
a4:37:cd:99
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUYircYgL0BcWh4UWCRUXahwMM7owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE5MDEzMDM0WhcNMjYwODE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZjhkODNhMTM3ZmJlOGY0MjY2YWNjODA1M2I1Y2JiOTIy
NDRhZGUzNWU1M2E0MWQ0NGFkYmYzNTViZjZlZTUzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCrw7K7HSjigfRPFar+c1+05wVzToHBlpC5lwLiOLvaYDIE
tXs77itw9A2EYpmL/dRiv3mcHKqIb/5iJ3MuBSOFnZSLPgHlWgHbR8L4yGiaMj5Y
KMbsVDOmDUZSdHj27CXHLd8KVkjgEXUxMOv7YFOsE/ZItal+VlmOniqalKh5dOK/
W/wJLzr0WNYQcSbCmTj/NlXkEN9cmGMxIu94gcKlRTWO3Nd5C6qIJfQ3IqFpX5Dg
kAawT5ge/ba/mZQChdc9KrLl+GZKxfoVpAg1jfjZBkoxzDuhMSK0V2esqZeusGeO
q7mINHQ5Rr/mrpeLF9/9ZfADy9IVXCmmNmFfhsntAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUGuk2JMRhh70hmQJYIiWFzIKL6eswHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzA2ZWVlZGE4LWVmNzktNDg0NS1iMzk1LTJlNGE1ZGE4NjE5OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0XWEwDQYJKoZIhvcNAQELBQADggEBAG+LdRoOkBSq+QeRSsyimul7U8Rh
WgHOvE82sRq6g20zqjcv9E5AQDy5BL6o18W9jU+gEFOERzuVJaO/1FIerufvcv4O
sHw2HmjH2RtGCCUN0m6TwMXDX9fRcTPoTOQ3zr9G9yEICLvsI1fGfP+Rp+iIDRwG
12a5WUGXi4XH9DqkbLpjQtHB9Q33qnmtfWfZZkZjdD38rlWdwp2/0otLyOWobWbx
sJr7kRHqsF3Amh8Moam8nKfrZuwILCLy6dLQVJO4MXAtYlR6EmfFzLbdQDXuMJZK
wGLt4IQSkY93gYqCsJ+gaCRG1O7z7d3g1gbRFFYwVXZQKGtLhoR/5KQ3zZk=
-----END CERTIFICATE-----
Generated at Sat Jun 13 04:48:31 2026 by rpki-client