
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07ce438e-9a5c-4059-8bef-1381a60bba9b.roa
File: 07ce438e-9a5c-4059-8bef-1381a60bba9b.roa (raw, json)
Hash identifier: LaaLS3EYvTrFu63LsmcZouB/Bh0/AWw1lt8JHYWsjA0=
Subject key identifier: 0D:4F:BE:4F:3F:28:83:87:34:C1:45:D6:AC:3D:33:95:8A:9A:B3:2D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 47E5386A81CAACAD9B17CA5CF73742EA60FF267D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07ce438e-9a5c-4059-8bef-1381a60bba9b.roa
Signing time: Thu 15 Oct 2026 01:06:43 +0000
ROA not before: Thu 15 Oct 2026 01:06:43 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 52.79.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e5:38:6a:81:ca:ac:ad:9b:17:ca:5c:f7:37:42:ea:60:ff:26:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 15 01:06:43 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=548bb1152856fcd2f14748486805c7807fa9e1cbdb08a4648a7d5ab5773eda45, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:87:c1:74:5f:e6:df:57:db:d4:af:09:0f:0e:
a9:40:cc:34:ae:9a:e6:53:57:6f:c6:62:0b:5e:e0:
32:6a:4b:67:1a:ba:8c:a4:a5:ea:ad:81:f3:6d:e6:
19:ef:41:57:2f:3d:e1:08:15:b5:c4:c8:69:ca:1a:
71:13:67:38:ce:9a:69:42:4f:31:fd:c6:a3:1f:a8:
21:31:02:fb:90:55:15:a2:ad:62:8d:b0:ac:bc:82:
7a:2e:8b:89:6b:d0:dd:4b:f7:6c:e6:83:ad:f8:69:
57:70:61:81:d9:25:25:2c:41:03:5f:76:ab:d1:c7:
2b:62:4f:19:7d:07:37:50:21:22:91:eb:1d:a8:26:
2f:a8:3c:85:b1:d0:59:ed:0a:c4:13:e9:57:29:b4:
8c:55:de:96:ea:b4:b9:82:6f:c9:f6:e6:23:0f:f9:
09:75:2f:82:07:55:0b:9b:9c:05:f4:20:88:24:68:
93:6b:ae:e6:c3:d9:d3:87:4c:da:1f:00:33:75:b3:
c0:82:79:cb:73:89:6e:71:c0:b2:bd:de:2f:f7:90:
bc:04:41:9e:95:50:db:bf:7b:eb:4c:d7:a2:42:8c:
c3:6b:36:7f:51:60:ac:db:63:e5:3b:d3:f8:d4:d6:
9f:80:be:fc:99:55:f3:13:e9:17:92:ca:dc:ef:a6:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4F:BE:4F:3F:28:83:87:34:C1:45:D6:AC:3D:33:95:8A:9A:B3:2D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07ce438e-9a5c-4059-8bef-1381a60bba9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.79.128.0/17
Signature Algorithm: sha256WithRSAEncryption
06:dc:c9:6e:ed:f5:d1:90:b3:5e:89:04:2e:25:df:73:98:5b:
92:ba:56:71:1f:cd:d8:31:ee:01:ed:d7:d2:a2:39:2e:ff:2b:
eb:be:29:74:eb:8e:9d:a5:c7:d6:7f:84:ab:41:08:5f:c8:15:
cc:98:92:e2:5f:cc:cc:87:1f:f4:1a:66:a7:af:c5:b8:19:f2:
fe:44:67:2a:9e:89:03:31:4f:3a:2e:b9:ea:2e:34:32:72:85:
62:77:2d:79:ee:c6:b4:e9:0e:02:8b:f3:46:47:c3:6c:08:2b:
dd:95:80:96:58:61:5b:f1:2b:9d:1b:ec:b0:0c:42:34:a1:55:
9a:16:47:a2:9b:44:7e:1a:9e:f5:12:92:6b:3d:1b:08:0f:6f:
b7:b0:fe:3c:be:e2:8a:49:cb:45:c9:ca:06:af:7e:6a:1e:9e:
10:1d:c9:ca:b6:69:58:fa:70:c9:15:13:75:b4:2f:b4:dc:c7:
76:44:e4:ac:fa:7f:38:5a:f2:d0:86:ad:74:c6:a7:e7:9a:a1:
2c:e5:da:7a:92:b3:f8:ad:8a:c2:ce:ba:da:53:be:ab:68:4a:
39:e1:d8:4b:1c:30:19:57:53:85:dd:cc:2d:5c:72:d6:73:b7:
39:8e:6e:1b:83:7b:d2:fe:76:46:40:e9:82:0e:b8:1a:e5:b8:
cc:c5:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 01:50:42 2026 by rpki-client