
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0caa2b45-bcfe-4826-bf5e-f4d106e4a41e.roa
File: 0caa2b45-bcfe-4826-bf5e-f4d106e4a41e.roa (raw, json)
Hash identifier: HkUgUdOOnwp39ZFLZAahNT+s4ZsZtBX7hxpH1BVn7MI=
Subject key identifier: 1C:A8:95:39:11:30:F6:12:28:88:EE:E9:DA:9F:01:EA:F2:C0:B0:6C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 586917E4195D5DFD0D4198456400DD259E82B3F1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0caa2b45-bcfe-4826-bf5e-f4d106e4a41e.roa
Signing time: Fri 07 Aug 2026 02:11:06 +0000
ROA not before: Fri 07 Aug 2026 02:11:06 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.119.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:69:17:e4:19:5d:5d:fd:0d:41:98:45:64:00:dd:25:9e:82:b3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 02:11:06 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=c4f7bfdf66b1a71454e00c4742a3202d7783b9773663a1be21268f60264c8aa6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:ba:11:db:0f:4e:69:5d:45:34:f3:ba:cf:
44:b0:ca:3b:cb:8b:33:b9:69:f0:e4:fc:e9:9a:00:
1e:44:52:f8:70:96:75:a2:ba:c3:73:8e:67:a8:2a:
e1:18:56:df:20:e1:a5:68:b0:06:59:cb:ea:f6:e9:
27:a6:e9:4c:92:31:d7:9c:f0:63:e4:6f:ee:bc:c6:
98:69:21:a1:24:6b:d1:2c:26:32:63:37:aa:58:7e:
87:e2:39:b2:ad:cf:89:c3:c8:b3:0e:40:a2:8a:55:
6f:4e:04:a7:e1:93:2b:b2:9f:bd:eb:17:92:92:64:
f2:27:0e:a0:25:96:c4:02:fc:54:2a:08:a5:4e:5c:
15:cd:4b:dc:03:31:20:28:04:22:2d:31:b5:0f:6d:
5e:46:9d:37:c7:20:a3:d6:ba:27:fb:96:b4:9b:e6:
f4:c3:0c:bf:fb:19:e9:a9:c9:f6:c4:bd:46:36:9d:
97:ac:db:79:20:44:78:37:be:46:ac:a7:4e:df:b0:
e4:f9:46:53:7c:1f:24:76:84:72:c9:41:51:ce:85:
51:57:ab:19:1c:b4:53:6d:0d:69:87:76:ec:84:d3:
03:cf:69:94:65:e1:79:89:06:3a:04:bc:9a:b5:ab:
75:c4:55:c3:8a:fd:9e:8f:5d:af:68:3d:f9:8a:86:
89:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A8:95:39:11:30:F6:12:28:88:EE:E9:DA:9F:01:EA:F2:C0:B0:6C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0caa2b45-bcfe-4826-bf5e-f4d106e4a41e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.119.196.0/22
Signature Algorithm: sha256WithRSAEncryption
06:52:30:7b:e3:a5:a8:93:a4:ed:f8:e0:fa:c9:54:32:a2:d1:
e3:7c:aa:59:a2:28:ff:c9:93:a2:f4:ab:c6:54:e7:49:c2:71:
50:03:70:fa:0b:88:cd:ec:b4:d8:b1:87:19:f6:e9:1a:5a:ba:
eb:7a:d5:ff:5d:9a:0f:d7:be:7d:fc:68:65:85:c9:62:5b:d8:
c0:d8:27:42:1d:7c:60:62:68:60:8e:c6:fb:d6:96:4b:35:77:
cf:0b:98:45:bf:74:b8:40:75:8f:59:87:49:e6:a5:4f:66:b2:
ce:c5:1e:40:d8:cc:13:82:5f:0a:27:fb:37:bd:30:09:d1:af:
f6:d5:c9:1c:a3:f1:d3:5e:86:c1:df:b4:6d:74:5c:f9:10:af:
20:14:a2:f0:15:e5:e2:2d:65:42:71:cd:69:58:b4:5f:a4:cb:
61:06:71:5a:63:41:c3:5d:3b:36:9a:73:6e:94:0a:bc:aa:b8:
b2:58:28:c5:a2:3f:a1:55:68:0d:5c:f2:dd:9c:35:ee:1d:78:
92:3e:45:d7:8c:ee:b8:66:00:40:70:d7:98:cd:e2:d0:7a:13:
56:f5:fa:5a:cf:14:9b:fb:09:dd:64:aa:de:66:3d:63:ed:0a:
1c:55:b8:04:7d:c1:a7:69:f0:83:5c:91:b1:15:04:04:8d:be:
45:d3:da:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 08:41:39 2026 by rpki-client