
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/405b820b-b215-481d-b277-af3bc2649f64.roa
File: 405b820b-b215-481d-b277-af3bc2649f64.roa (raw, json)
Hash identifier: baCU4Q5MCXpmmix2Ed+yuNKhj2xTA2QIRwp/Z5HxCig=
Subject key identifier: 6A:97:67:DD:02:B2:2F:D8:60:FF:FE:A4:72:7D:35:5D:FD:32:51:7C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 376EA9DC8B96ED4634113C0773148D5FF715BB96
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/405b820b-b215-481d-b277-af3bc2649f64.roa
Signing time: Mon 27 Jul 2026 01:11:20 +0000
ROA not before: Mon 27 Jul 2026 01:11:20 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.215.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:6e:a9:dc:8b:96:ed:46:34:11:3c:07:73:14:8d:5f:f7:15:bb:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 01:11:20 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=26c5cdac4df76869516190ef95ba909e77b5a9ae50e6f8d2f54fe9e84aa5c694, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d2:c2:13:77:4d:fc:56:b2:89:c4:d0:9d:74:
f0:ff:ca:5f:cc:f4:86:1e:fb:c1:e9:9a:dd:8d:ed:
c6:4b:32:e4:19:25:3a:1b:2d:e2:84:6e:2a:88:72:
95:c2:17:91:f3:77:f8:a1:35:c2:96:51:3c:a9:d2:
14:b0:4a:da:95:25:f5:e2:30:b1:ff:a3:8e:ba:41:
88:e6:f7:04:c5:68:fd:88:42:38:39:93:df:9a:95:
bb:5a:39:b0:70:3c:1e:92:ff:1c:b1:6f:75:c9:17:
05:8c:ec:b6:97:0e:e1:84:6d:ab:57:d1:f1:38:6b:
48:cc:83:ea:9e:f9:c2:1d:f0:6e:50:6b:d7:35:77:
e2:35:ae:94:6e:ca:a7:d9:7e:48:13:ba:18:21:f1:
2c:45:53:af:9c:56:29:6e:83:cb:30:89:d0:a5:45:
38:49:1e:42:5f:fb:85:56:dd:1b:4a:6c:20:90:36:
fb:35:b5:f4:0c:1f:55:fc:02:38:d9:0f:4d:94:f2:
88:eb:e9:9e:6d:fa:a7:d0:4c:45:ec:49:bf:87:17:
e3:e5:d9:e6:6c:6f:75:9b:51:e8:a2:b8:ca:fb:c8:
cd:e0:53:ce:df:ab:9f:6e:6a:cc:32:73:a9:7e:79:
ad:1b:f3:e2:14:18:8c:a7:2f:dd:6f:20:30:96:bb:
c6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:97:67:DD:02:B2:2F:D8:60:FF:FE:A4:72:7D:35:5D:FD:32:51:7C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/405b820b-b215-481d-b277-af3bc2649f64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.215.32.0/19
Signature Algorithm: sha256WithRSAEncryption
7c:8b:0b:26:2a:a3:22:69:b0:00:83:16:bb:d8:5d:27:c8:26:
5b:84:33:6d:0f:99:a8:8a:3c:a6:c8:05:c9:3b:fd:c7:4b:a9:
54:ca:70:8b:a1:6b:a1:ba:2e:07:61:33:ee:5a:98:3c:f0:71:
77:08:c4:9d:83:17:e0:cb:05:3d:d8:c9:75:1b:c0:2b:83:24:
95:68:61:eb:42:9c:b6:3a:87:93:f6:a7:97:ab:d2:df:cb:01:
e3:91:8d:2e:3a:42:4f:04:e8:4c:13:c7:cd:31:ee:ea:b1:26:
c2:c9:de:fa:f7:0d:64:d1:2e:6b:be:f7:6e:68:f4:88:b0:86:
ea:c2:47:f2:5f:83:b5:7a:96:33:a9:6f:e2:b5:c3:d1:9b:81:
36:47:7e:87:26:3e:61:e0:fe:b3:b2:d3:b0:92:c9:fb:54:fd:
a8:c6:ac:df:2b:da:5b:0c:5f:61:e2:14:ac:01:b5:d1:ae:5a:
6f:a1:4e:5a:f0:36:7d:8f:b4:c1:bf:d3:8e:b0:8a:43:60:a9:
74:ef:37:a8:50:37:fb:b2:44:c9:47:57:e3:b4:9b:49:f3:19:
fb:f4:32:87:61:61:a9:9b:7f:4c:09:f5:42:3d:30:5f:6a:05:
d8:7e:0d:b4:a5:8e:93:6c:ae:f7:d9:40:88:4f:3e:51:7c:a0:
77:7b:8c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 13:00:24 2026 by rpki-client