
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d6e608f-3b6a-4f1c-bae3-9c5e707f6d5a.roa
File: 1d6e608f-3b6a-4f1c-bae3-9c5e707f6d5a.roa (raw, json)
Hash identifier: XkmvokKq0WWTHE5u6gTDVNJqY4+6OQreC43yuN4CAfY=
Subject key identifier: 22:E8:8D:27:D5:E3:62:EE:CC:69:B6:08:F2:88:58:B7:6D:F7:49:56
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2DBF817D8479BD6154D4AD8CDDCC08461150EEDE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d6e608f-3b6a-4f1c-bae3-9c5e707f6d5a.roa
Signing time: Mon 12 Oct 2026 00:20:07 +0000
ROA not before: Mon 12 Oct 2026 00:20:07 +0000
ROA not after: Sun 10 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 13.55.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:bf:81:7d:84:79:bd:61:54:d4:ad:8c:dd:cc:08:46:11:50:ee:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 12 00:20:07 2026 GMT
Not After : Jan 10 23:59:59 2027 GMT
Subject: serialNumber=ff26b60eaeaa62da946fb332e88e04dc8ce264ef0dc7ed47af4f7b1284fc137c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:f0:19:5a:60:ea:67:c1:41:a6:f0:e3:af:
0f:4d:56:3e:43:76:f6:34:4d:ae:3e:3a:a9:99:59:
13:9f:16:a2:e7:fe:dd:5c:ee:f9:13:77:19:84:9d:
c3:8c:07:02:2d:54:84:8d:1e:6a:d5:91:e0:9e:81:
e7:60:af:e8:1e:84:be:b0:e1:de:7b:e4:d9:7a:68:
63:23:13:24:70:70:c5:c5:22:ca:41:a7:21:5c:55:
e5:5a:7d:dc:c0:f2:1c:48:22:5d:70:bf:8f:b6:a1:
92:6e:09:05:5b:fd:ab:f5:87:53:c6:da:13:23:fe:
96:5f:49:70:97:3b:2e:1c:6f:66:23:41:3a:34:22:
90:29:fc:46:0f:84:7a:1e:5d:7d:ab:56:7a:82:f3:
2c:5b:a1:a5:b8:8f:f6:55:8a:3c:8b:6e:77:bd:f8:
ab:69:84:0a:a4:47:ad:82:db:b7:ce:6f:11:0a:f4:
68:e8:9f:12:57:5f:bf:a9:1b:6f:26:71:aa:2a:28:
03:8d:e3:c3:70:40:28:49:c5:0a:7d:af:87:71:21:
7b:3c:e6:6d:46:7e:33:58:eb:06:4b:6d:76:5a:4e:
59:d4:e5:e4:d4:59:66:d3:c7:14:5c:94:10:59:43:
8c:9d:cc:74:1e:78:12:77:11:bb:76:1e:6b:76:a5:
2f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E8:8D:27:D5:E3:62:EE:CC:69:B6:08:F2:88:58:B7:6D:F7:49:56
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1d6e608f-3b6a-4f1c-bae3-9c5e707f6d5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.55.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3b:0d:44:36:f7:3b:0c:51:85:e6:2e:f0:28:a8:bb:4e:61:67:
05:7c:e2:e2:eb:01:d0:f3:22:66:fe:41:c5:6a:59:2e:fc:87:
d8:61:ed:77:28:e6:24:62:b3:f4:4f:04:cd:20:b2:00:43:e8:
c1:f7:35:d1:73:c2:52:4b:42:90:f6:fd:8b:ab:c2:85:0d:a1:
8c:6d:5f:1b:a7:96:0a:7d:b2:df:84:ca:7e:ff:35:96:82:61:
23:b0:51:40:39:ab:39:ac:a4:02:e4:9b:80:8c:16:7a:04:6e:
ec:f5:28:33:48:af:d4:57:08:a7:5c:c3:01:ea:49:5b:3a:a8:
1a:a6:b3:42:5f:f1:4d:34:1f:0a:c3:41:db:d4:0d:25:30:11:
2d:47:67:e0:6b:45:40:a7:28:12:7a:b1:59:cf:4d:0b:52:cf:
80:42:ba:4d:76:11:0d:4a:94:e4:77:f5:b7:88:d7:3e:4d:e7:
4d:ef:9a:ec:79:4b:63:be:e5:4e:ec:b2:03:59:3d:02:cf:e3:
96:db:09:9a:f3:20:29:e4:c2:9b:5d:39:8f:0b:b9:6b:63:71:
39:bd:78:e6:54:60:26:7b:53:6f:bf:16:be:d2:ce:1d:43:00:
f7:11:6a:00:54:33:76:c0:79:aa:47:a7:79:88:2a:d1:b7:b7:
01:a7:e5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 21:55:19 2026 by rpki-client