
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2b8f6073-4c7d-4f55-8c77-17c7bda25179.roa
File: 2b8f6073-4c7d-4f55-8c77-17c7bda25179.roa (raw, json)
Hash identifier: upvrpdd2DvpRQryFRr2AUlQk6OuCR4raMAZiCoLZxVk=
Subject key identifier: F0:B5:31:29:C4:68:32:72:36:BA:26:22:9B:38:20:8E:F0:04:BD:5C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 151B412E3B67C0D46AE86219180C0EF197C62E13
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2b8f6073-4c7d-4f55-8c77-17c7bda25179.roa
Signing time: Thu 15 Oct 2026 01:10:05 +0000
ROA not before: Thu 15 Oct 2026 01:10:05 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 35.181.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:1b:41:2e:3b:67:c0:d4:6a:e8:62:19:18:0c:0e:f1:97:c6:2e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 15 01:10:05 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=5ab3f8d4d1e64e34c1f23f67fb9c262da69174b520f5dcf3e06c071f8735b950, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:d9:36:95:8c:94:51:e9:13:de:0f:1d:a8:
0c:64:53:65:c8:bc:d6:4c:44:f1:94:16:a0:06:d0:
3f:33:e0:17:33:ab:d0:5e:6d:a8:31:37:d5:fa:22:
3f:77:2f:8b:8c:f8:22:3c:a6:7f:d2:ce:22:20:0f:
36:be:ba:ce:54:d1:22:9e:22:25:53:31:a2:a0:1f:
18:d9:4c:18:2b:7f:31:1d:07:9b:13:d9:53:8b:de:
34:ec:e4:cb:3f:13:da:47:07:b9:61:ad:12:22:47:
9e:ff:7d:9e:b7:b7:fc:17:6d:bc:4b:23:b0:3e:d6:
c9:2e:c0:75:93:ae:3e:06:b9:08:88:ed:56:3d:04:
74:7f:0a:55:cb:e3:d4:02:81:fc:95:51:b2:1b:b4:
87:5f:c9:9a:61:0c:40:77:aa:e3:c6:82:b6:67:aa:
05:35:cf:3c:80:6b:47:a2:e2:ef:2f:cb:04:f4:6a:
70:6d:d6:b0:06:ab:02:78:64:54:71:c5:9f:ad:a5:
07:e5:ce:f2:53:47:cd:0f:c9:f3:f4:01:ed:1f:6b:
df:62:f9:d9:a1:46:43:a7:f3:ba:63:c9:8e:0a:96:
a3:ce:21:27:0e:b6:4e:4a:57:74:9c:cf:50:1b:cf:
d3:00:86:e1:a9:4d:2e:52:5a:7a:02:6b:cc:24:73:
36:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B5:31:29:C4:68:32:72:36:BA:26:22:9B:38:20:8E:F0:04:BD:5C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2b8f6073-4c7d-4f55-8c77-17c7bda25179.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.181.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:95:f1:cd:2f:b4:32:57:b3:0c:9d:dc:0a:a1:3c:0b:bb:74:
4f:80:72:b7:a8:3d:ce:e0:4d:39:d4:78:60:6c:42:db:c2:57:
92:de:77:b4:ff:49:a9:64:2b:cc:59:ab:0e:2c:d6:76:ab:d5:
b6:ff:8a:6f:97:2a:31:93:78:17:81:3c:4f:6d:04:3a:21:e1:
f3:47:3f:be:93:cb:9a:6a:9f:1f:0b:e3:f6:01:27:e6:98:db:
e7:0c:a8:36:72:76:44:79:67:eb:53:c4:a5:75:50:5b:ac:4e:
21:c5:49:95:31:b3:c1:ec:57:ec:cd:4e:a5:15:b6:5a:0a:7b:
8c:5d:36:88:86:8a:d7:b1:0f:8d:a5:d2:85:39:6f:93:58:0d:
39:fb:e3:74:61:cf:16:c4:1b:8c:7e:9c:7d:aa:47:a4:24:1e:
76:74:f5:d0:2a:17:bb:d4:f3:62:ea:0e:4c:c8:0b:16:50:4f:
84:fc:0d:cb:a3:04:27:3c:4c:f5:23:69:f9:87:53:10:cc:82:
e4:8a:57:c1:ed:34:95:ac:ff:b3:f6:f9:f8:f8:ee:04:d0:48:
0b:eb:b4:53:2b:e5:da:61:83:48:04:27:b1:ca:1c:4a:e6:b1:
da:58:2a:39:86:46:3c:24:80:44:0a:99:dd:42:fb:6c:b1:87:
f6:93:be:b1
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUFRtBLjtnwNRq6GIZGAwO8ZfGLhMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDExMDA1WhcNMjcwMTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1YWIzZjhkNGQxZTY0ZTM0YzFmMjNmNjdmYjljMjYyZGE2
OTE3NGI1MjBmNWRjZjNlMDZjMDcxZjg3MzViOTUwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDTJ9k2lYyUUekT3g8dqAxkU2XIvNZMRPGUFqAG0D8z4Bcz
q9BebagxN9X6Ij93L4uM+CI8pn/SziIgDza+us5U0SKeIiVTMaKgHxjZTBgrfzEd
B5sT2VOL3jTs5Ms/E9pHB7lhrRIiR57/fZ63t/wXbbxLI7A+1skuwHWTrj4GuQiI
7VY9BHR/ClXL49QCgfyVUbIbtIdfyZphDEB3quPGgrZnqgU1zzyAa0ei4u8vywT0
anBt1rAGqwJ4ZFRxxZ+tpQflzvJTR80PyfP0Ae0fa99i+dmhRkOn87pjyY4KlqPO
IScOtk5KV3Scz1Abz9MAhuGpTS5SWnoCa8wkczbDAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU8LUxKcRoMnI2uiYimzggjvAEvVwwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzJiOGY2MDczLTRjN2QtNGY1NS04Yzc3LTE3YzdiZGEyNTE3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAjtTANBgkqhkiG9w0BAQsFAAOCAQEAoZXxzS+0MlezDJ3cCqE8C7t0T4By
t6g9zuBNOdR4YGxC28JXkt53tP9JqWQrzFmrDizWdqvVtv+Kb5cqMZN4F4E8T20E
OiHh80c/vpPLmmqfHwvj9gEn5pjb5wyoNnJ2RHln61PEpXVQW6xOIcVJlTGzwexX
7M1OpRW2Wgp7jF02iIaK17EPjaXShTlvk1gNOfvjdGHPFsQbjH6cfapHpCQednT1
0CoXu9TzYuoOTMgLFlBPhPwNy6MEJzxM9SNp+YdTEMyC5IpXwe00laz/s/b5+Pju
BNBIC+u0Uyvl2mGDSAQnscocSuax2lgqOYZGPCSARAqZ3UL7bLGH9pO+sQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 16:14:19 2026 by rpki-client