
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/192e98a6-e3d8-46af-9a2f-dfc1a6dc5004.roa
File: 192e98a6-e3d8-46af-9a2f-dfc1a6dc5004.roa (raw, json)
Hash identifier: AqnR/ZbKB8ciMcHo7f6HircEc2fjKlJJzO1LKibhiDc=
Subject key identifier: 10:C6:E6:20:0B:42:4B:09:61:2B:FB:FB:E6:FF:80:A6:FD:A8:84:F5
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 537495B664E15D5CE774ED22767CB65EC8E9BE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/192e98a6-e3d8-46af-9a2f-dfc1a6dc5004.roa
Signing time: Tue 17 Feb 2026 01:51:00 +0000
ROA not before: Tue 17 Feb 2026 01:51:00 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.168.0.0/13 maxlen: 13
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:74:95:b6:64:e1:5d:5c:e7:74:ed:22:76:7c:b6:5e:c8:e9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 17 01:51:00 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=57cab9e224478ff322d99d7169e913eebaa9fdeb23f938fc40682255ed5d9f0d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:81:16:87:95:b5:e2:bd:b0:02:d1:3c:a8:
72:5e:59:27:ad:49:69:31:67:fb:6a:46:70:b0:e1:
c3:38:5c:c9:a3:9c:65:ec:44:cb:22:8c:e3:4a:6c:
c7:1d:6a:5d:7a:05:6a:f4:5f:6a:8f:a8:8a:73:0c:
4f:7b:91:0a:09:1d:61:4f:5d:92:3b:00:a8:f3:72:
4e:52:0b:b4:29:9c:61:cb:5b:2e:71:8e:05:25:f5:
d8:57:f5:62:82:d4:62:28:3e:76:47:d7:9a:85:4a:
17:74:ba:26:aa:e2:b0:15:d3:36:43:9e:5e:8b:3e:
b6:2e:92:46:76:02:6d:fd:7b:a7:34:47:bc:1d:de:
23:b2:14:12:4a:5f:f8:5e:6f:1c:93:44:00:c3:a2:
30:25:47:c1:69:97:07:a0:b1:80:29:4f:a0:1c:e5:
18:ee:14:13:66:41:69:c9:36:18:a6:2f:c9:2d:09:
4f:ec:23:dd:fd:d9:53:f9:e4:86:47:27:35:0b:a8:
da:06:00:86:35:b4:d2:00:23:5a:ec:fb:f5:7d:03:
8c:3e:00:16:84:d6:90:d5:2c:b7:eb:7e:d8:cf:42:
bd:a6:0d:36:13:1b:80:9d:03:af:a8:6d:a1:34:7a:
7b:b3:5c:1b:6b:00:1e:66:13:a3:95:5c:01:ff:bb:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C6:E6:20:0B:42:4B:09:61:2B:FB:FB:E6:FF:80:A6:FD:A8:84:F5
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/192e98a6-e3d8-46af-9a2f-dfc1a6dc5004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.168.0.0/13
Signature Algorithm: sha256WithRSAEncryption
3d:a6:b6:d8:96:0a:4b:b6:55:a7:72:79:41:79:c4:48:af:b5:
b1:af:b8:9c:0b:58:36:c0:d6:43:0b:40:de:7c:0e:70:f2:5e:
b6:69:86:34:ef:1a:c0:4e:66:2a:fd:1c:fa:3d:2c:1d:d6:1d:
bb:07:7e:76:b4:d3:b8:30:22:b4:eb:4c:22:a6:95:4c:64:22:
bb:8d:71:57:63:4f:6c:d3:00:26:ba:28:87:a6:41:45:c1:99:
36:60:86:f2:cb:bb:2b:fc:91:db:a9:a0:90:42:1d:53:35:9d:
e4:88:a0:cc:0e:13:79:41:53:77:b2:18:08:89:e2:ba:01:04:
83:72:d1:cb:2b:d2:15:d2:bb:72:6f:52:41:b4:8b:10:18:31:
4e:13:b7:3b:cf:1a:db:ca:17:17:be:53:07:3b:f9:0f:b1:5a:
bd:c5:de:7d:d2:1f:41:de:b8:07:87:bc:f1:0d:25:4f:5c:a6:
39:23:41:3c:38:fb:3a:56:11:57:9e:f5:c0:8c:93:d9:db:f6:
6b:bd:51:7c:d7:de:f8:10:f6:68:c0:c7:80:5c:1e:08:53:54:
db:10:57:cd:7d:1f:a1:52:95:a7:b2:a6:fe:f5:ea:aa:3e:ad:
75:46:40:54:1a:7b:11:6d:aa:0b:19:d2:81:71:8f:d0:59:2e:
83:9f:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 02:09:50 2026 by rpki-client