
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1732c0be-f326-44e7-b97e-4bec3cd287fe.roa
File: 1732c0be-f326-44e7-b97e-4bec3cd287fe.roa (raw, json)
Hash identifier: HWyoqoR5gwFJggM1rQgnaFDebYJ3IPRiW5FjAU19u34=
Subject key identifier: 72:22:FA:D2:A5:94:CF:A7:C0:BA:1E:85:37:C2:F3:73:F7:D3:D8:62
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 408799A53EC12D436DF09BB23EEFA356A4ACF0CB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1732c0be-f326-44e7-b97e-4bec3cd287fe.roa
Signing time: Fri 15 May 2026 03:30:42 +0000
ROA not before: Fri 15 May 2026 03:30:42 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.225.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:87:99:a5:3e:c1:2d:43:6d:f0:9b:b2:3e:ef:a3:56:a4:ac:f0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 15 03:30:42 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=66e674f330213aeb369a5c3f26e8c1e20e16d42620782f42ed9b2fd67d287608, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:19:f7:d8:c4:4e:71:77:fc:ae:64:49:99:ab:
74:80:30:cd:26:64:1c:9a:d9:8e:7d:17:f1:e3:10:
0c:72:da:da:91:62:60:6c:ca:c6:86:59:03:23:23:
21:90:d4:c5:d4:97:bb:d4:83:9d:3a:f7:0d:25:b0:
e9:b7:d5:c0:1e:e3:80:5e:72:1b:9f:e2:f4:dc:39:
48:fe:60:9b:d6:77:c5:10:19:f4:a3:ba:c9:77:8e:
0a:ca:3f:e9:fc:86:9c:2d:82:76:c1:68:b7:20:95:
2c:03:4b:da:8b:d5:0f:70:ec:7d:ce:4a:25:fb:6b:
78:ee:03:4b:6f:38:3f:98:4c:a8:f6:3e:e6:18:f9:
18:ff:66:37:9b:41:70:78:8d:d6:69:a2:a5:3a:80:
64:cb:2f:39:ac:a2:fd:3d:ae:96:0a:3c:e8:0d:9a:
2b:97:07:40:e3:91:f2:6a:be:29:b4:1f:b0:43:0c:
82:d8:6e:11:88:c6:e4:f6:07:57:2f:4c:a9:51:d0:
88:21:0c:7e:53:e1:5d:06:1e:79:79:65:ee:c1:b9:
ad:50:63:37:84:17:00:a1:a9:4c:5f:ed:fc:67:0f:
52:7e:2f:41:78:90:83:5a:7f:dd:87:7c:07:a6:00:
d7:e6:45:26:5a:81:41:12:81:76:20:4e:16:e7:85:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:22:FA:D2:A5:94:CF:A7:C0:BA:1E:85:37:C2:F3:73:F7:D3:D8:62
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1732c0be-f326-44e7-b97e-4bec3cd287fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.225.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9a:c3:69:c0:f5:23:7b:47:14:50:fc:57:81:5b:15:30:6d:48:
f6:d1:d8:c6:71:91:a8:72:12:ef:3f:c0:9c:c6:64:8b:a2:bf:
b1:df:cd:85:9c:82:35:15:ba:1e:a5:70:15:41:d1:95:51:ab:
0c:e4:cd:b9:a8:35:2b:d2:b7:d4:81:2b:40:cf:a7:e0:dc:15:
96:f6:4e:3d:e9:13:19:7c:f7:2c:0e:ab:d6:90:5a:d2:9a:b9:
02:1f:72:41:17:b8:a4:fa:be:cd:b7:cc:b4:7b:a3:9f:e1:5c:
e4:6f:d0:e4:97:3d:db:c9:42:a2:3b:20:b1:0a:73:4e:fc:c8:
3d:6d:b6:79:b2:ed:eb:3f:38:91:83:ad:49:26:12:73:af:3b:
d4:b2:55:96:31:ce:d0:5f:0c:71:e7:01:b6:cb:9a:cd:13:ac:
f8:17:9d:67:1a:4c:ed:e2:60:70:12:89:1b:c6:5d:0a:29:03:
78:c1:b7:78:b0:44:55:91:18:4c:7d:51:01:4c:ed:1a:55:78:
c6:9f:37:92:58:62:d8:2b:a6:9c:bc:c9:71:0c:e9:20:7d:f8:
76:69:27:1a:db:b1:34:91:f3:06:d5:78:b6:b5:0b:e8:37:ad:
7b:20:02:ef:4e:76:20:1a:6e:64:76:63:cd:e6:57:42:fa:84:
2c:c1:2b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:51:17 2026 by rpki-client