
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c4fd174-71e1-4aa8-aa79-4ce7b2b2bf2a.roa
File: 0c4fd174-71e1-4aa8-aa79-4ce7b2b2bf2a.roa (raw, json)
Hash identifier: LjSSf67TskfPFXq1UPSABO1M/yyfJPh+p/5hxQHnNPs=
Subject key identifier: C0:A7:30:5E:DB:51:80:CD:1F:EE:B1:E8:A6:E2:EA:A0:4A:9A:19:E8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0ACA0C649F92710F7BCADD3C0769B9998926619A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c4fd174-71e1-4aa8-aa79-4ce7b2b2bf2a.roa
Signing time: Thu 15 Oct 2026 02:20:51 +0000
ROA not before: Thu 15 Oct 2026 02:20:51 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 52.216.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ca:0c:64:9f:92:71:0f:7b:ca:dd:3c:07:69:b9:99:89:26:61:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 15 02:20:51 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=80b5369fa486631d5dd74c79c6c952667c8e101e5b0b41f99e2ce816462492f5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:fe:e6:04:3a:c5:91:d7:48:a1:7e:99:0d:
1e:b0:d1:0a:dc:f5:f8:b8:81:5e:a7:e7:5a:f2:6d:
82:f3:14:cd:77:95:39:c5:4e:4d:aa:79:1b:97:78:
78:a0:39:be:7e:a4:94:31:b9:fa:ec:e9:56:0f:ae:
a1:3f:7d:7e:ac:78:d9:95:85:89:c9:19:94:f5:cd:
8b:ea:49:fc:bc:a1:76:66:cf:b0:a0:37:e0:58:61:
c9:b1:a9:03:e8:11:1c:be:ae:85:62:f8:59:e1:cf:
0f:83:2d:6b:a1:83:35:5e:19:0f:f9:be:6a:f2:18:
0d:f8:90:66:f7:30:d8:ef:94:a5:c0:52:44:35:29:
83:49:2c:4e:d5:94:ae:e1:b2:c3:c8:f8:9f:9c:c8:
16:26:ad:6b:ed:f9:2a:15:d0:a8:d6:9b:3e:f4:8d:
97:1d:4e:b3:a0:67:8b:d3:4b:43:9d:63:af:4c:89:
e3:99:03:60:35:26:af:82:86:88:f2:fd:d6:23:05:
53:9a:79:33:60:9a:ef:e9:0f:d1:48:60:f5:ce:c8:
65:b2:6b:2b:8e:74:4b:16:ed:2d:fc:d0:05:87:86:
60:c9:cd:4d:76:46:0a:e6:33:62:47:6d:cb:0a:85:
ef:a8:c3:8e:5d:e3:f3:e9:79:80:61:c5:dd:78:32:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A7:30:5E:DB:51:80:CD:1F:EE:B1:E8:A6:E2:EA:A0:4A:9A:19:E8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c4fd174-71e1-4aa8-aa79-4ce7b2b2bf2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.216.0.0/14
Signature Algorithm: sha256WithRSAEncryption
5c:19:52:04:68:01:d4:51:9a:f3:6e:11:26:7f:a4:15:9d:35:
a0:f5:35:ec:c5:79:8d:84:2c:18:aa:67:db:f2:df:11:d5:65:
59:cc:34:ac:e3:ed:85:2c:5d:f5:cf:15:47:12:b7:45:0e:f7:
f9:c3:17:d1:76:91:60:f0:71:da:b2:f8:69:8c:80:98:d0:32:
a0:7d:cb:31:22:ee:5f:9a:19:ec:73:4f:b3:35:81:55:d2:1a:
3f:0e:3a:ca:48:c1:b0:3d:33:7a:40:9d:cd:21:52:90:3f:27:
2b:5b:0f:ac:9b:32:44:e2:66:10:61:70:88:23:61:03:f8:7a:
48:45:48:5b:5f:53:77:e4:95:fe:fc:00:d7:83:cc:26:d4:29:
01:d9:fe:f0:6f:b8:a0:d4:1c:78:44:a1:69:84:62:2d:19:a3:
74:97:35:cc:5f:25:12:68:bb:63:77:f3:40:9c:d1:98:b0:6d:
b4:60:5f:2e:d8:8d:69:0c:af:dd:46:57:45:8c:12:1b:1e:fb:
6c:bc:c5:db:cb:17:0c:e3:13:3d:50:2c:04:65:55:ca:a5:45:
c9:70:cb:30:5a:ae:d8:39:54:1d:84:6a:9f:99:bf:07:b4:e4:
4a:6b:cf:a5:9b:48:ba:3f:0b:aa:de:d6:35:bb:81:40:93:da:
50:54:4f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:35:55 2026 by rpki-client