
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3fe7b547-84a9-488c-8d6b-3c05cf783187.roa
File: 3fe7b547-84a9-488c-8d6b-3c05cf783187.roa (raw, json)
Hash identifier: PXlWcNyQLHOcS35gbrz42cwHvRRwsHcvvfyCVKNHHV4=
Subject key identifier: 5D:6F:00:32:BA:14:62:4A:9D:76:96:63:B8:6D:E1:26:F1:06:1E:C7
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 43AA8B5077C88AB5A0BF2A0D6159EDF0AD7D680C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3fe7b547-84a9-488c-8d6b-3c05cf783187.roa
Signing time: Wed 05 Aug 2026 01:31:09 +0000
ROA not before: Wed 05 Aug 2026 01:31:09 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.240.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:aa:8b:50:77:c8:8a:b5:a0:bf:2a:0d:61:59:ed:f0:ad:7d:68:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 5 01:31:09 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=f82d45073908cfecbbc433e1345c764c9ace0a62c3bb82994d3c5b35c16e7eff, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:ea:9b:32:06:1c:18:e5:67:ef:52:0f:ac:
0e:4f:c1:6b:22:45:67:6d:01:7e:b9:fc:6e:d2:4d:
82:ce:19:7e:d2:de:8e:4f:5e:67:f6:e7:14:a3:eb:
cb:3b:3d:b7:02:6b:8b:6b:14:e5:28:cd:9f:cf:b6:
73:71:d2:c5:5d:e7:b1:7c:0b:48:4c:d6:09:6c:dc:
a2:e3:3d:40:a0:b4:06:ba:cb:9e:d9:97:8e:1b:bf:
ab:fa:93:c1:11:3e:b7:db:93:c3:e1:5d:99:b5:ff:
a0:93:2a:90:ec:ad:4f:6a:b8:85:f7:24:8c:fe:27:
d3:de:07:48:23:ea:94:f8:7f:53:5b:67:1d:31:58:
7f:dc:02:53:9d:c2:5e:d2:d9:7f:0e:5a:33:b8:26:
e8:73:25:5a:55:4b:03:55:86:61:4c:e8:de:fa:07:
dd:41:db:76:5e:57:d1:5c:f6:9a:7c:91:e9:b7:7a:
ec:05:aa:1f:50:88:d2:ef:5a:a4:b4:22:5a:f7:95:
2b:43:84:75:d4:f3:f0:e0:68:f5:17:98:99:56:b4:
da:bc:11:69:8e:ec:ac:49:8b:78:09:f7:27:7e:0e:
7f:76:e5:40:99:29:c7:a5:ca:b6:5d:b0:6c:5b:6c:
c7:f5:19:fa:0f:3a:00:bf:2b:93:24:da:4f:2c:20:
61:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6F:00:32:BA:14:62:4A:9D:76:96:63:B8:6D:E1:26:F1:06:1E:C7
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3fe7b547-84a9-488c-8d6b-3c05cf783187.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.240.110.0/24
Signature Algorithm: sha256WithRSAEncryption
87:86:8a:ba:6e:13:a8:31:22:b7:e0:f0:56:7a:d7:7f:90:81:
a1:38:46:fb:ef:9a:81:79:6f:75:73:c3:c6:e8:57:a0:91:81:
d3:df:f6:54:69:f2:78:62:4a:b8:e1:98:7c:c2:d6:16:cc:6b:
af:af:be:22:30:0f:7d:bb:56:b1:01:c0:e6:62:0c:8e:3a:89:
2c:51:9e:21:fb:56:d2:c0:5b:85:7b:fa:d8:83:a3:33:ec:e0:
39:2a:e9:22:c4:ac:06:18:19:83:e8:79:70:eb:07:3c:40:8b:
bf:d1:0f:d3:c1:e2:c6:5d:82:2d:24:44:fc:f0:96:d1:23:01:
ec:d8:2d:80:57:a7:ea:5a:5f:b3:7e:01:36:b7:95:ae:b6:97:
f1:52:db:3a:2f:b6:e9:03:86:3b:09:ef:3d:82:9f:6f:cb:2a:
e4:7e:9b:5e:67:2c:9e:67:6f:b1:fa:4e:26:db:9b:3c:f0:7d:
98:8e:1b:00:d5:05:a7:2f:07:ad:d8:da:48:96:91:4f:87:89:
82:83:f3:5b:0c:63:81:5e:32:33:af:06:32:21:9e:5a:fa:b3:
51:e2:d9:56:dd:e0:43:b8:10:95:0d:fc:7e:c4:97:5a:fa:71:
b2:31:02:b5:37:af:c4:c9:10:d5:d6:fc:0f:37:49:d8:05:d8:
8d:e7:a9:ff
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQ6qLUHfIirWgvyoNYVnt8K19aAwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA1MDEzMTA5WhcNMjYxMTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BmODJkNDUwNzM5MDhjZmVjYmJjNDMzZTEzNDVjNzY0Yzlh
Y2UwYTYyYzNiYjgyOTk0ZDNjNWIzNWMxNmU3ZWZmMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwjOqbMgYcGOVn71IPrA5PwWsiRWdtAX65/G7STYLOGX7S
3o5PXmf25xSj68s7PbcCa4trFOUozZ/PtnNx0sVd57F8C0hM1gls3KLjPUCgtAa6
y57Zl44bv6v6k8ERPrfbk8PhXZm1/6CTKpDsrU9quIX3JIz+J9PeB0gj6pT4f1Nb
Zx0xWH/cAlOdwl7S2X8OWjO4JuhzJVpVSwNVhmFM6N76B91B23ZeV9Fc9pp8kem3
euwFqh9QiNLvWqS0Ilr3lStDhHXU8/DgaPUXmJlWtNq8EWmO7KxJi3gJ9yd+Dn92
5UCZKcelyrZdsGxbbMf1GfoPOgC/K5Mk2k8sIGFBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXW8AMroUYkqddpZjuG3hJvEGHscwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzNmZTdiNTQ3LTg0YTktNDg4Yy04ZDZiLTNjMDVjZjc4MzE4Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA28G4wDQYJKoZIhvcNAQELBQADggEBAIeGirpuE6gxIrfg8FZ613+QgaE4
RvvvmoF5b3Vzw8boV6CRgdPf9lRp8nhiSrjhmHzC1hbMa6+vviIwD327VrEBwOZi
DI46iSxRniH7VtLAW4V7+tiDozPs4Dkq6SLErAYYGYPoeXDrBzxAi7/RD9PB4sZd
gi0kRPzwltEjAezYLYBXp+paX7N+ATa3la62l/FS2zovtukDhjsJ7z2Cn2/LKuR+
m15nLJ5nb7H6TibbmzzwfZiOGwDVBacvB63Y2kiWkU+HiYKD81sMY4FeMjOvBjIh
nlr6s1Hi2Vbd4EO4EJUN/H7El1r6cbIxArU3r8TJENXW/A83SdgF2I3nqf8=
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:42:16 2026 by rpki-client