
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/333804f7-30dd-40d8-9a4c-f2613e674f35.roa
File: 333804f7-30dd-40d8-9a4c-f2613e674f35.roa (raw, json)
Hash identifier: eJzanBauibV2TFRWwKKvVGaPEMlvzvtyYjfMKhuH1ik=
Subject key identifier: 01:F1:8D:A0:55:E9:CF:30:18:26:74:C9:49:25:BB:6D:F7:61:24:C0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5CDB394E7E9CD63F6284315ECB5DFF3D8C6310C4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/333804f7-30dd-40d8-9a4c-f2613e674f35.roa
Signing time: Tue 24 Feb 2026 02:40:09 +0000
ROA not before: Tue 24 Feb 2026 02:40:09 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.82.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:db:39:4e:7e:9c:d6:3f:62:84:31:5e:cb:5d:ff:3d:8c:63:10:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 24 02:40:09 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=d1e3212ddeafee10994583b6a7329a6ee1584e6aabbd8eaa0dfe1170387f104b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:ac:9e:98:19:20:df:e6:6c:9e:79:9a:27:
26:2c:1a:26:8a:d2:92:f6:9c:0f:78:17:37:0e:10:
f8:b8:f5:08:f7:2d:22:35:3e:c7:37:00:8e:d0:12:
5c:c1:30:8f:6c:b3:c3:52:47:97:c9:81:60:fe:5e:
53:a5:fa:87:3f:d2:54:aa:8f:24:a1:35:9c:6e:3a:
f1:02:b1:90:e6:69:64:32:65:56:de:62:15:6e:c5:
4b:32:09:b0:d4:16:ce:59:7a:8b:7f:d8:c3:71:2d:
8d:c0:4b:5f:a4:9e:1f:09:33:9b:c8:c9:92:16:cd:
ad:bf:da:a4:9c:95:4e:19:22:52:06:93:f6:01:ed:
d3:4b:14:1d:18:4a:1c:71:83:1d:1e:f7:37:83:ed:
5f:73:a0:ab:ba:af:94:c7:f8:5f:d2:67:fb:d9:82:
1e:d9:7b:2a:b1:8c:7f:b2:7b:11:12:cf:f8:49:39:
08:53:d3:cf:59:73:1a:e7:8c:f1:51:ec:51:22:20:
e0:c4:50:d2:b1:89:71:09:4a:9d:68:dc:41:14:e5:
c3:37:74:4c:99:91:1d:51:4c:8c:3d:48:d6:32:09:
ed:15:9c:5c:d7:72:82:e4:12:a7:2d:56:08:6b:c3:
94:3e:4f:6f:c6:d2:c4:6e:57:6e:6d:ac:3e:b5:b7:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F1:8D:A0:55:E9:CF:30:18:26:74:C9:49:25:BB:6D:F7:61:24:C0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/333804f7-30dd-40d8-9a4c-f2613e674f35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.82.130.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:c6:84:61:7f:6e:82:40:17:b5:d7:2e:1f:56:96:0d:cf:de:
95:b5:05:2c:5c:a0:c0:e2:55:75:d5:5b:80:bc:cc:a9:22:ee:
ee:24:da:45:5c:04:5b:da:25:9d:1e:76:3e:7c:75:5c:d6:86:
8d:8b:01:a5:22:1a:dc:ac:ec:04:70:65:40:82:22:c6:f1:ed:
37:13:a7:a5:02:fc:b5:ac:56:d0:d2:17:92:ed:cb:40:6c:dd:
5a:c1:76:f0:5f:c4:06:b2:c8:b2:0c:8d:65:5c:1d:38:71:e9:
45:5a:a5:13:97:72:3b:dc:86:40:5d:f4:5e:6e:6c:3d:4c:57:
2a:01:a3:74:9f:59:b1:7c:e9:e0:35:60:f6:0b:93:13:07:7d:
00:4b:84:cc:71:80:6a:54:fc:f9:b4:3b:67:dd:69:a5:5e:92:
64:95:c3:b1:56:5d:52:4c:a2:48:3b:4d:65:eb:03:4a:3d:58:
31:8c:a0:00:eb:a2:24:81:5c:e9:ab:24:af:61:1e:ae:5d:0b:
fd:f0:44:f8:e0:ae:7e:76:61:e8:38:e9:6c:81:47:40:52:87:
3e:e1:42:16:b0:e4:ca:4e:ad:11:dc:59:ca:bf:45:4e:01:2f:
0f:e5:cd:9a:6d:81:fd:c5:95:c8:2f:35:8b:ab:73:61:06:11:
1b:27:6e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 02:09:40 2026 by rpki-client