
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11945389-cb8d-4ce5-b182-8c948fa9f46f.roa
File: 11945389-cb8d-4ce5-b182-8c948fa9f46f.roa (raw, json)
Hash identifier: 7XzLk0sN6e9lOI/aO9oiAQLhJGIjFUlpoppSAJO8K6k=
Subject key identifier: 19:FA:4D:13:71:44:8F:DE:D1:17:42:12:18:17:E1:68:6A:8A:F8:45
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0870D90FC3C5BC58BA57F0224964F5C789120047
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11945389-cb8d-4ce5-b182-8c948fa9f46f.roa
Signing time: Fri 07 Aug 2026 02:00:07 +0000
ROA not before: Fri 07 Aug 2026 02:00:07 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.234.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:70:d9:0f:c3:c5:bc:58:ba:57:f0:22:49:64:f5:c7:89:12:00:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 02:00:07 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=15f377e8a74dd47c55f5cdf92ee8a85080ad966dcbba6761a67a26f9f98dbaf1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3e:46:7c:92:32:95:5f:8f:0c:74:de:f5:19:
48:86:8d:eb:3f:d1:6f:8c:9b:b1:db:97:a6:90:2f:
d1:8f:92:0f:1c:87:c3:59:fc:c9:98:b5:35:e9:34:
5c:09:68:6b:76:70:ed:2e:a1:a8:0b:e0:23:f5:0c:
d0:f8:43:26:b0:11:3c:3f:d7:f2:ae:b6:50:f3:28:
1e:52:73:25:a4:b5:38:0e:74:af:4e:c6:02:51:cb:
45:c8:0e:37:4e:d7:33:1f:f2:86:b8:61:b0:ea:cd:
c1:66:cd:be:cc:cf:8e:00:33:8c:9a:df:ab:04:70:
aa:5b:95:8d:bd:ec:34:16:bd:64:f5:82:10:cd:ec:
77:48:7f:7d:f4:29:df:58:f7:6b:a7:f6:17:bd:25:
5e:4c:06:3d:b5:86:a7:86:03:b9:66:81:b4:81:45:
be:19:ed:92:f7:f3:90:6e:99:3b:1a:d0:ba:29:fc:
f6:a2:82:63:46:f4:bc:9d:16:fe:9e:0a:de:16:74:
8e:0c:ac:da:09:87:ba:8a:cb:14:d5:a2:4a:e9:49:
78:75:0b:5a:da:5e:69:92:d1:9e:42:3c:0f:95:34:
e0:51:76:2c:99:77:7b:f1:24:0f:a4:dc:98:10:02:
f0:5f:f2:46:1a:8b:ff:8b:dc:8b:ec:1d:9b:ea:30:
a2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FA:4D:13:71:44:8F:DE:D1:17:42:12:18:17:E1:68:6A:8A:F8:45
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11945389-cb8d-4ce5-b182-8c948fa9f46f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.234.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:2b:c3:ec:2e:d8:a5:7c:73:7e:65:8f:fe:fe:f4:0c:8f:2d:
70:c6:68:21:06:28:59:93:d8:06:2c:f3:bc:b0:40:33:32:0a:
58:06:35:a4:fe:6c:58:62:66:5a:83:fc:b9:7c:a7:94:a1:1b:
ae:d4:1b:de:85:95:9e:86:be:93:f1:66:fe:a4:d8:39:e6:74:
2d:c4:02:23:a9:07:33:d7:fe:8f:81:de:72:4a:06:19:68:27:
3a:e2:74:b0:6b:d9:2a:db:48:e8:77:50:50:8a:4d:84:50:8c:
fe:5d:52:4d:00:93:11:8c:eb:7c:79:93:e2:e4:c5:b9:2a:f8:
80:b1:81:3b:3c:36:0a:9d:26:69:12:e2:f8:9d:20:da:af:54:
fb:1d:20:5f:ef:96:87:52:12:4c:d4:fc:bd:53:bc:a1:a1:41:
d1:a5:05:19:6b:f2:57:7a:6b:e1:b9:02:1b:bb:4f:e7:14:15:
9c:dc:c1:60:a7:f0:75:14:3f:2e:2a:03:7f:6a:44:d8:de:12:
87:9e:c9:f3:27:d1:5e:68:e0:2e:8e:44:7c:88:7b:46:b1:54:
d5:4a:58:43:95:a2:57:ff:f2:7e:d0:e3:16:a5:bf:c5:4c:d6:
24:12:b0:63:1a:fd:95:d0:11:50:bc:e6:bd:e2:32:f5:6e:1c:
80:26:c2:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:43:43 2026 by rpki-client