
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29ea3365-d45f-449b-bb3e-b7c353eddd64.roa
File: 29ea3365-d45f-449b-bb3e-b7c353eddd64.roa (raw, json)
Hash identifier: IW40X7pvzjO/9kFb7CIkaU9gYRymavSA+n7MyfTNad8=
Subject key identifier: 41:F9:ED:96:EB:51:B1:3A:CC:68:81:4A:E7:12:8C:5C:19:CB:2D:4D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6EF57EF2AD4846119A6CCF59FBE65F72AC0C0683
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29ea3365-d45f-449b-bb3e-b7c353eddd64.roa
Signing time: Fri 07 Aug 2026 01:40:57 +0000
ROA not before: Fri 07 Aug 2026 01:40:57 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.95.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:f5:7e:f2:ad:48:46:11:9a:6c:cf:59:fb:e6:5f:72:ac:0c:06:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 01:40:57 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=d4fed68aeb4ddb171151cdab310c4752b779da3db97dc63860b3e24155cf00a2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:88:d4:90:15:e1:d9:dc:39:6f:71:8e:c4:3d:
85:60:b7:a8:79:32:94:1c:51:9b:fc:39:b1:c3:b7:
26:f2:45:cf:27:6d:8c:1a:dc:ea:c5:82:b4:70:cb:
7a:d4:09:3b:c9:1a:79:0b:6a:40:23:40:3c:b5:8a:
b7:50:f5:fd:0c:99:a4:92:44:85:6c:94:19:6b:3b:
d6:3b:66:9b:84:88:97:0a:e6:1e:a4:36:c3:23:4c:
2e:24:32:cf:9e:a4:92:9b:85:f9:e1:5a:43:15:6e:
b6:c3:2e:28:6a:88:98:ca:c9:fd:25:c9:88:8e:8a:
fa:fc:1d:77:ee:19:e0:1d:6a:57:3d:42:c6:e7:19:
e5:ca:6d:82:8a:8a:34:c6:c9:39:b5:9a:2e:ae:ef:
99:f6:2c:d9:ce:b5:35:a8:50:ad:4e:65:b0:e5:08:
69:13:b7:a5:55:98:ad:c6:b7:59:09:61:7d:fd:c8:
31:10:c9:ff:ac:e2:a3:07:6d:51:9e:9d:5c:a2:5e:
b3:5f:c4:23:0e:51:80:cb:4a:4c:22:15:ca:4e:0a:
8c:4a:8c:f5:e5:93:6d:d1:61:fc:01:78:19:f1:00:
57:f2:13:de:d4:df:aa:32:38:ea:85:4d:0e:1e:44:
1b:f0:ff:4b:50:fd:64:e5:da:c9:0a:a6:ed:68:b4:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F9:ED:96:EB:51:B1:3A:CC:68:81:4A:E7:12:8C:5C:19:CB:2D:4D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/29ea3365-d45f-449b-bb3e-b7c353eddd64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.95.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:c6:46:48:e0:c8:bc:92:73:84:62:0d:08:48:3a:5f:dd:ec:
b6:23:f5:cf:d1:54:3d:9d:44:fc:fe:a6:2f:f5:fb:e3:e3:3d:
92:d4:79:f6:3a:aa:b9:3f:96:58:7d:c0:e1:54:8a:02:c1:e6:
31:a7:84:84:af:9b:a9:06:7a:6d:8f:ce:e8:d3:b2:c2:b0:c6:
b9:e7:86:0c:56:9f:5c:7d:f1:8b:ea:a5:28:c8:28:e5:f1:d9:
8f:6f:71:c1:ee:3e:b3:33:76:8c:db:fa:b0:ac:02:71:9a:95:
c2:b4:1d:94:23:1d:a7:fe:1c:12:07:c7:08:c6:d0:80:38:4e:
b6:8f:be:30:53:6c:0c:6f:09:ce:c7:a9:8a:bd:9c:d5:a0:80:
ea:75:28:f5:cd:98:b2:df:b4:2f:c0:ed:50:ec:04:a9:cf:fd:
a3:51:7f:59:35:19:d2:fe:f8:8e:56:24:1e:f9:01:df:0b:02:
fe:eb:38:81:be:95:00:c5:dd:e9:27:ec:d6:e5:18:7d:94:15:
c3:b1:f4:19:31:8d:e8:0c:e0:85:63:da:4f:ad:b4:de:02:86:
d1:65:02:a2:38:7f:5e:c1:48:f9:91:2c:f4:de:84:fa:15:33:
23:75:70:56:2f:21:f2:2b:c5:19:9a:d7:40:e0:54:01:63:f3:
a7:52:d5:f1
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUbvV+8q1IRhGabM9Z++ZfcqwMBoMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDE0MDU3WhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNGZlZDY4YWViNGRkYjE3MTE1MWNkYWIzMTBjNDc1MmI3
NzlkYTNkYjk3ZGM2Mzg2MGIzZTI0MTU1Y2YwMGEyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDxiNSQFeHZ3DlvcY7EPYVgt6h5MpQcUZv8ObHDtybyRc8n
bYwa3OrFgrRwy3rUCTvJGnkLakAjQDy1irdQ9f0MmaSSRIVslBlrO9Y7ZpuEiJcK
5h6kNsMjTC4kMs+epJKbhfnhWkMVbrbDLihqiJjKyf0lyYiOivr8HXfuGeAdalc9
QsbnGeXKbYKKijTGyTm1mi6u75n2LNnOtTWoUK1OZbDlCGkTt6VVmK3Gt1kJYX39
yDEQyf+s4qMHbVGenVyiXrNfxCMOUYDLSkwiFcpOCoxKjPXlk23RYfwBeBnxAFfy
E97U36oyOOqFTQ4eRBvw/0tQ/WTl2skKpu1otK4XAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUQfntlutRsTrMaIFK5xKMXBnLLU0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzI5ZWEzMzY1LWQ0NWYtNDQ5Yi1iYjNlLWI3YzM1M2VkZGQ2NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwASXzANBgkqhkiG9w0BAQsFAAOCAQEAGsZGSODIvJJzhGINCEg6X93stiP1
z9FUPZ1E/P6mL/X74+M9ktR59jqquT+WWH3A4VSKAsHmMaeEhK+bqQZ6bY/O6NOy
wrDGueeGDFafXH3xi+qlKMgo5fHZj29xwe4+szN2jNv6sKwCcZqVwrQdlCMdp/4c
EgfHCMbQgDhOto++MFNsDG8Jzsepir2c1aCA6nUo9c2Yst+0L8DtUOwEqc/9o1F/
WTUZ0v74jlYkHvkB3wsC/us4gb6VAMXd6Sfs1uUYfZQVw7H0GTGN6AzghWPaT620
3gKG0WUCojh/XsFI+ZEs9N6E+hUzI3VwVi8h8ivFGZrXQOBUAWPzp1LV8Q==
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:40:35 2026 by rpki-client