
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33f8f44a-c0b6-4ee9-9e3e-e1493048e74c.roa
File: 33f8f44a-c0b6-4ee9-9e3e-e1493048e74c.roa (raw, json)
Hash identifier: VR5N+nIMWWU89NZr9KPKE4PqYB/804oP5AmGos0U8mo=
Subject key identifier: 38:47:B1:F1:35:6C:30:14:8E:BC:83:CF:EA:E3:4E:E1:53:51:2D:FA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5E4A6439A16DE56C514D4C7543122FB29A83E321
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33f8f44a-c0b6-4ee9-9e3e-e1493048e74c.roa
Signing time: Fri 07 Aug 2026 01:40:28 +0000
ROA not before: Fri 07 Aug 2026 01:40:28 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.75.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:4a:64:39:a1:6d:e5:6c:51:4d:4c:75:43:12:2f:b2:9a:83:e3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 01:40:28 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=946262bab16d0a9ba5fca51f393694d37303f3a94f699d579825cca217c66a24, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4f:3e:ca:6f:5f:02:91:d8:18:54:72:43:3b:
15:41:dd:ac:ed:15:22:8f:e5:b0:16:8e:ad:d2:4b:
42:e2:91:84:d5:cc:b4:6b:4a:0c:97:60:34:4e:54:
2a:7a:1c:bf:ad:33:40:23:9f:60:06:90:1e:e9:85:
be:ca:e0:7f:0d:8a:82:13:23:c8:50:67:7f:2e:70:
ff:af:c5:09:48:89:c1:8a:a9:51:3b:a2:7a:be:fa:
58:39:d9:75:a6:26:ef:46:98:1e:f2:b7:10:a7:4b:
15:8d:d7:b4:7d:ef:78:55:1c:b9:91:c3:64:cb:ee:
88:79:87:33:02:55:14:ea:7c:9d:9b:78:ed:08:52:
31:49:ac:3f:5d:ad:d2:18:cd:cc:4f:74:14:e1:36:
7f:47:b6:c3:1d:ed:c8:2f:73:b8:2a:5c:fb:24:ad:
0d:fe:f4:9b:3d:e7:77:c7:1c:f7:e3:f1:c8:08:d1:
69:45:45:87:d3:30:f4:f6:cd:52:11:b6:a6:4a:26:
8f:27:48:a4:84:7b:7f:d9:d3:08:d8:1e:62:4a:42:
64:6a:3d:70:a3:42:ef:4d:e6:1c:3f:8d:95:5e:79:
8b:a1:a9:5a:0b:af:c4:e9:6a:99:4a:89:d5:86:48:
3f:ee:46:aa:95:31:09:98:ec:fa:98:7b:80:a1:fb:
e3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:47:B1:F1:35:6C:30:14:8E:BC:83:CF:EA:E3:4E:E1:53:51:2D:FA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33f8f44a-c0b6-4ee9-9e3e-e1493048e74c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.75.192.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:50:c6:1e:9e:d0:fa:db:59:55:b4:8d:ba:9e:e9:8a:5a:65:
4f:15:95:23:20:29:cb:ea:f2:a8:2a:b1:03:fc:cc:f0:a6:b7:
e8:c8:c0:85:8f:5f:2c:6b:fc:a7:ac:8b:35:1d:38:a4:53:ed:
a5:aa:ed:5e:19:49:cf:e9:fa:f4:ab:63:3f:69:33:70:5e:1c:
83:55:d5:6f:45:2f:63:56:79:14:e8:53:77:7d:ca:9b:87:0d:
a6:41:8d:5c:8d:e4:8a:89:b9:d3:84:63:47:37:80:f9:6b:03:
2d:a3:3f:7d:67:6e:8f:97:51:db:ad:17:b7:ae:63:fa:2e:84:
ef:0a:2a:46:ac:d9:fa:24:43:1e:92:f2:9d:b9:3b:e0:07:71:
58:50:01:15:7c:07:31:b0:b7:1d:82:f5:95:b7:98:02:f7:d7:
da:3b:2b:c3:f9:ea:47:4e:19:f4:35:e4:5b:71:d0:68:b9:51:
fe:a1:8b:a7:41:eb:4a:72:17:a1:e7:a2:64:a5:2e:de:26:82:
22:05:54:e0:47:65:33:77:90:79:ba:9e:a8:c1:56:ca:4d:bd:
22:f8:a6:be:82:66:cc:47:1f:0e:64:5d:aa:28:83:ad:0c:0e:
df:30:79:1b:63:05:bb:d3:8e:e7:db:ab:83:d1:e0:8f:14:05:
0a:93:a1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 08:40:48 2026 by rpki-client