
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29e02ab7-bd82-472f-8b7f-770a4796eff5.roa
File: 29e02ab7-bd82-472f-8b7f-770a4796eff5.roa (raw, json)
Hash identifier: nzK8abn1tHsTct0CizNRlGTvGNIJ4ZsbL4At+qg5SBo=
Subject key identifier: A8:88:FC:C4:FB:13:9E:2C:0E:8B:6F:B3:DC:6F:0C:31:B5:CD:FC:97
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 326A5B6349FBDB16B7D4F8E78163760AD0C89492
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29e02ab7-bd82-472f-8b7f-770a4796eff5.roa
Signing time: Thu 15 Oct 2026 01:31:09 +0000
ROA not before: Thu 15 Oct 2026 01:31:09 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 15.177.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:6a:5b:63:49:fb:db:16:b7:d4:f8:e7:81:63:76:0a:d0:c8:94:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 15 01:31:09 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=294690576592d64389dcef195a78eda76d8f3fff87422487ed984fbeb96c0e99, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ff:d6:c5:42:b3:f1:c6:ae:93:d1:5a:eb:a0:
d6:fb:08:51:2c:ae:de:2a:7f:a7:b6:46:46:a2:3d:
a6:7b:9d:91:2a:00:72:9b:f5:4c:00:41:a6:b1:d7:
37:a0:6c:cc:d3:bd:cb:c9:b7:ed:33:fa:05:1a:bf:
fc:16:a6:e2:6b:3f:6c:00:02:1e:01:e1:00:42:3a:
54:a7:3f:26:b6:f0:4f:f9:1c:c1:05:84:84:66:30:
9c:a1:42:a1:35:ed:49:2d:10:64:59:30:0c:16:6d:
30:db:fb:cd:ed:5a:d6:18:74:9e:a9:c8:1c:a5:fa:
13:40:a6:a7:46:d7:b7:43:4c:80:6f:24:5f:2b:1a:
00:00:53:a0:a2:92:a0:f7:2c:65:84:1a:42:73:a7:
17:43:d0:1e:2e:15:94:79:33:86:15:be:55:01:b5:
f8:d7:e2:7d:1a:e4:26:72:c1:1a:45:f7:98:69:62:
2f:82:61:bd:ef:3e:93:e7:14:1a:3c:95:b0:b8:99:
74:d0:ba:03:21:ad:cc:f4:e2:c9:5a:80:6a:9f:f9:
10:44:de:a5:33:41:8e:b0:ab:e9:0e:47:42:46:e7:
3d:43:3b:86:79:d7:41:fc:6f:ae:0c:34:36:30:f0:
36:6f:40:19:57:64:4d:a5:29:be:9f:a3:ce:33:10:
31:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:88:FC:C4:FB:13:9E:2C:0E:8B:6F:B3:DC:6F:0C:31:B5:CD:FC:97
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29e02ab7-bd82-472f-8b7f-770a4796eff5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.177.77.0/24
Signature Algorithm: sha256WithRSAEncryption
60:67:c5:ca:fc:60:3c:68:90:b2:52:c6:3f:c3:05:6f:4a:85:
d4:6b:15:9a:70:73:eb:76:ff:75:c5:f5:19:42:27:f0:c7:bf:
51:34:c3:8e:31:26:ca:42:51:4b:a0:eb:a2:0c:52:f4:7d:a1:
19:f5:e8:3b:a3:b4:2c:ed:e5:c0:79:c4:52:db:27:e1:e2:fd:
3c:97:32:c1:27:73:8b:83:5b:b0:97:ab:dd:d8:8c:0e:a0:9d:
e0:29:d1:77:95:48:d7:d5:ff:fc:a9:db:70:3f:1a:69:7f:ca:
d4:04:18:3a:97:28:96:ab:cf:da:05:53:88:b0:d3:d3:06:8c:
05:6a:23:c6:59:82:9e:da:2d:ac:cd:a7:e0:00:5f:2f:c3:f1:
0f:0e:c8:9c:4d:bf:24:b0:b7:6d:a9:0e:02:af:c0:82:e9:f1:
ba:27:7c:a0:18:88:87:e2:b2:a9:90:c6:a2:55:a2:2e:91:7c:
eb:36:37:7e:9e:41:a2:96:e9:89:cc:c7:d3:08:6e:18:21:29:
aa:72:02:58:0c:f2:4f:d3:6a:21:73:45:29:8b:1f:f2:81:07:
9c:8b:f0:b0:04:40:3b:7e:66:9a:85:cf:61:58:92:7e:c7:6a:
a3:2d:a2:01:2e:63:15:2b:4a:42:2e:89:71:bb:31:d5:0b:a2:
2c:7e:a7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:52:18 2026 by rpki-client