
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42d4e0f9-643f-403e-ad5c-970a88292360.roa
File: 42d4e0f9-643f-403e-ad5c-970a88292360.roa (raw, json)
Hash identifier: PFzddLhwgEVIgEKprZGYnOv5lB0pP1tryc0X8/Lt+Q4=
Subject key identifier: 6C:64:6C:EE:48:C2:E3:73:43:6C:68:7F:F7:5D:1B:6B:49:1D:7A:36
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 34638B51A718FABB98D5DDD83423D4026AF0CAFE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42d4e0f9-643f-403e-ad5c-970a88292360.roa
Signing time: Mon 27 Jul 2026 02:10:10 +0000
ROA not before: Mon 27 Jul 2026 02:10:10 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.217.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:63:8b:51:a7:18:fa:bb:98:d5:dd:d8:34:23:d4:02:6a:f0:ca:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 02:10:10 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=5b11b0822f08b4ee3dbc5482f30c211f75fd4ad532fd0ce11d575129f804a5ec, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:c2:db:66:55:17:19:16:2e:4b:dd:1e:ff:
13:a5:72:ac:ba:9f:53:82:73:20:ce:45:38:fc:d9:
0f:f4:0a:f3:ac:a3:1b:15:e4:9c:d9:c5:52:b9:db:
e1:97:b9:1d:24:b0:bf:a1:d3:e6:69:4f:b6:6c:11:
65:04:f3:3a:9e:1c:99:c1:06:5e:eb:a2:08:52:fa:
ea:46:27:51:76:0b:eb:05:f0:b2:14:86:72:70:52:
20:8c:af:6e:e8:82:7d:36:c2:fe:ed:06:a5:32:12:
94:cf:3d:51:bc:2f:83:e3:72:13:e5:e9:4e:15:23:
ed:fd:7b:b5:2c:e3:a3:6c:7c:95:6a:53:68:ad:c7:
3c:25:6e:7f:51:b1:be:fa:eb:b3:ca:33:56:ef:5b:
71:24:d2:19:ed:ce:08:70:0f:77:d1:7d:04:1d:72:
2c:7c:54:95:4d:48:e0:42:2d:44:ab:68:61:49:96:
1a:94:31:35:35:9f:6c:3b:62:6f:58:95:e2:fb:ee:
51:f9:37:db:e8:c8:ee:1e:44:13:34:b2:bf:aa:f4:
f0:8a:17:1e:2e:1f:6f:53:f6:c5:4d:e9:a5:15:7e:
f7:a4:1e:92:16:74:64:9a:04:0c:dd:7d:17:22:28:
54:59:fa:99:c9:fd:4e:54:74:be:15:9a:67:ea:da:
7d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:64:6C:EE:48:C2:E3:73:43:6C:68:7F:F7:5D:1B:6B:49:1D:7A:36
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/42d4e0f9-643f-403e-ad5c-970a88292360.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.217.224.0/19
Signature Algorithm: sha256WithRSAEncryption
8b:06:f0:86:f4:02:b0:1d:b5:09:0e:fe:76:ab:3f:ea:34:3c:
06:74:07:45:a0:60:cd:af:84:32:e6:7a:32:bd:15:de:ec:e2:
a7:13:98:d5:56:d8:c8:c2:41:11:db:52:9d:61:68:1b:0d:18:
69:3b:30:51:b4:5f:79:85:88:0a:b3:02:02:f6:cf:e5:4c:28:
6c:64:c8:3b:c6:85:68:a0:52:f6:ee:af:11:70:3c:3f:f3:e1:
bc:c9:c3:b4:d8:ee:09:58:6c:a4:be:cf:d5:68:f0:83:43:d2:
25:d5:0f:63:ad:57:2c:7a:52:8a:c1:f5:b1:95:9e:71:fb:98:
a7:d0:b4:85:53:c3:4e:58:a2:6c:8b:0b:68:80:d3:79:a0:24:
86:ef:b2:61:57:62:88:2a:8a:02:37:9f:73:35:7c:76:a7:20:
f5:ef:26:9e:4d:51:c2:cc:3b:93:b7:d9:93:71:cc:50:96:e9:
3c:5a:e4:64:8a:02:e5:81:2a:19:9c:fe:b3:55:ef:4d:11:fa:
ea:a1:c1:62:c7:d8:8d:92:54:3d:c7:32:f7:b0:fc:32:9d:37:
a2:c0:c2:ab:fb:7f:66:1c:0a:2b:dc:3e:09:4c:44:e7:88:af:
66:49:f6:3b:4b:4d:5f:e5:b7:82:24:17:30:b8:6b:b6:c8:d6:
a1:9e:5f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 08:41:30 2026 by rpki-client