
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c877458-c897-4b03-b426-e7eb7a82dc3a.roa
File: 2c877458-c897-4b03-b426-e7eb7a82dc3a.roa (raw, json)
Hash identifier: YM8sbfIhtOdZYVX39Fr4G5F38D0iMCFMXTHCGFU08Hw=
Subject key identifier: FE:D5:60:87:C2:28:2E:97:9C:CB:48:F4:18:16:01:04:6C:37:83:D8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1F1CAA875A023B8B0A772995BD186DB76F5E17D2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c877458-c897-4b03-b426-e7eb7a82dc3a.roa
Signing time: Sat 01 Aug 2026 01:01:09 +0000
ROA not before: Sat 01 Aug 2026 01:01:09 +0000
ROA not after: Fri 30 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 144.220.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1c:aa:87:5a:02:3b:8b:0a:77:29:95:bd:18:6d:b7:6f:5e:17:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 1 01:01:09 2026 GMT
Not After : Oct 30 23:59:59 2026 GMT
Subject: serialNumber=ab0b42b3ef5efaae9090b1bfbaef4aad39ab97915269a16fd9c11e993be92714, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:70:c6:91:a5:46:aa:08:a7:77:11:a5:c3:e0:
15:9d:98:cb:00:6e:26:44:6b:7b:e2:e1:34:a8:12:
b1:93:01:3a:f8:48:7e:d7:dd:09:94:f4:1b:bb:88:
07:f4:8e:e4:4b:4e:e7:04:12:6f:e8:48:e5:8e:c8:
0b:83:b0:d1:61:60:59:ee:db:8c:bf:0f:59:9c:87:
f1:b8:95:31:6e:21:c7:11:ff:e3:b6:0e:84:27:2f:
81:8e:12:e0:ff:10:9a:c6:15:c8:1d:ee:f4:a6:71:
ce:79:4d:ea:aa:db:71:7c:8f:7c:d1:b8:0a:be:81:
dc:01:d2:19:c1:ff:c4:17:87:b7:53:d6:d7:87:10:
f5:b4:2e:33:0d:75:c0:20:2e:3b:87:5d:1a:94:b3:
5b:8e:5a:0b:69:97:ab:2c:6b:9f:0a:ed:40:cf:7b:
74:b2:9c:45:16:b6:08:4c:5c:a9:51:67:d7:ee:95:
27:ec:bd:b3:74:9f:32:37:d4:e0:a8:c2:0c:64:e3:
6a:22:fa:99:1a:06:25:6e:62:c0:fe:c0:6a:bb:0b:
c7:4e:df:a1:23:38:a5:b8:79:79:54:3c:e2:3c:23:
98:d6:77:68:7c:3f:0b:24:de:27:0d:96:72:6a:bd:
f0:8f:a4:1e:d0:f6:c4:62:8c:23:29:c3:c4:83:ff:
b2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D5:60:87:C2:28:2E:97:9C:CB:48:F4:18:16:01:04:6C:37:83:D8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2c877458-c897-4b03-b426-e7eb7a82dc3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.220.65.0/24
Signature Algorithm: sha256WithRSAEncryption
99:0b:02:54:ce:c4:8f:40:9c:53:57:df:1e:ea:86:94:bd:4c:
dc:14:2b:44:3d:4a:23:f2:34:8b:86:8c:bc:c8:a4:4f:de:fb:
cc:dc:93:23:a3:b8:b7:d2:d1:9b:ff:b5:4c:d5:de:12:eb:42:
35:4b:d3:ab:6b:e9:ca:55:e7:70:bf:ae:81:e8:f6:51:7d:2e:
06:c7:8d:15:77:3c:7f:84:ea:91:e4:bc:df:56:b2:f6:68:08:
2b:88:a2:38:a2:f8:05:79:48:40:f6:78:df:f2:f9:bf:12:2b:
b0:8a:f9:61:03:ce:62:ea:8c:03:b9:af:10:72:4c:bb:2b:7e:
68:d7:97:37:97:4a:58:e3:e9:46:1a:bb:d0:87:15:77:0a:c1:
74:29:61:30:90:e7:8c:e7:d4:d5:45:b9:44:db:c0:63:72:50:
60:4b:3d:ae:af:9e:50:83:4d:c7:ff:ef:f4:a3:af:35:30:26:
87:a1:b2:b5:27:a7:e5:5b:4c:57:98:2e:2c:72:99:1f:7c:77:
bf:5d:b1:3e:97:f7:56:c6:8e:dd:8a:3d:44:69:9d:21:1c:9f:
23:a6:da:55:73:c8:4c:36:18:04:f9:f6:a1:38:39:89:e7:88:
2b:fa:c4:cb:83:de:01:7f:3f:62:4b:4e:9a:bd:55:04:0b:8f:
8f:4f:bd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 08:40:26 2026 by rpki-client