
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a5670e2-3a21-4962-958f-d6dba70b79be.roa
File: 4a5670e2-3a21-4962-958f-d6dba70b79be.roa (raw, json)
Hash identifier: YPwv+RSSYx/LCycSokTR7I4utqxRcS6jxScOGm4djn8=
Subject key identifier: BD:F3:75:E2:10:29:A6:74:8C:1C:AC:E0:67:4A:91:E5:F0:EC:AD:35
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 534DD5614F8327EAAEF3A3CD10124131C3DD14D6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a5670e2-3a21-4962-958f-d6dba70b79be.roa
Signing time: Thu 15 Oct 2026 02:41:23 +0000
ROA not before: Thu 15 Oct 2026 02:41:23 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 3.104.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:4d:d5:61:4f:83:27:ea:ae:f3:a3:cd:10:12:41:31:c3:dd:14:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 15 02:41:23 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=2fe9b146d5303fca4e756365cee744de4e1ecf035802be48b76093902564f4ef, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:6d:4f:7c:b5:a6:f5:9b:d2:f0:44:7c:10:
89:50:01:ac:b2:68:4d:c1:5c:74:8d:88:4d:37:02:
c0:f5:1e:76:2d:0f:c0:ed:c1:f1:2f:0e:96:d7:ea:
0c:11:56:a6:4d:37:3b:6a:cb:01:aa:f2:d3:8a:66:
8d:47:40:56:0a:e5:11:1b:2c:40:b5:55:c3:89:69:
39:7d:74:75:fc:2f:cc:58:4f:5d:a1:e5:ff:bb:f7:
18:c2:5e:04:bb:36:69:b5:a1:74:e0:dd:15:49:71:
d2:0a:1e:34:94:e9:ef:9a:22:89:66:92:8b:09:d7:
ab:9b:24:08:52:b6:e6:84:e4:08:a9:a5:74:0a:51:
7f:9b:87:5a:f4:c8:ab:63:f4:7f:26:03:32:f6:c0:
cb:b3:ca:01:2f:4a:27:ac:16:0f:18:99:a9:e7:ce:
08:79:73:4b:11:52:ab:80:35:74:fc:16:87:44:dd:
8b:2f:52:d3:25:2f:66:1b:0a:e5:19:43:82:8c:cd:
d3:25:1b:77:a1:11:e9:e9:02:6d:5a:26:4f:cb:50:
55:e6:ce:e6:c2:b1:e3:02:8b:41:6e:03:09:14:c0:
18:8d:9b:46:90:20:c9:0c:8c:f5:b5:cc:a3:47:f1:
8d:82:75:61:ff:28:bb:72:2e:8b:b5:67:68:ee:50:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F3:75:E2:10:29:A6:74:8C:1C:AC:E0:67:4A:91:E5:F0:EC:AD:35
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4a5670e2-3a21-4962-958f-d6dba70b79be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.104.82.0/23
Signature Algorithm: sha256WithRSAEncryption
85:a3:eb:95:92:7a:3e:5d:38:c1:0c:da:5e:9a:a5:51:73:ad:
79:af:f0:a5:62:96:67:ac:96:25:6a:6c:ac:1a:08:ed:28:c7:
24:8e:0e:11:ba:1b:3d:17:1f:8a:f0:b4:5e:54:83:ba:1f:91:
40:f4:35:af:7c:f3:d2:3f:2c:41:33:08:eb:b9:ff:f2:9f:2b:
9c:62:56:37:d6:f5:84:f7:29:4e:d4:2f:b7:e7:3d:37:7c:d5:
3d:ec:36:74:8e:2a:63:02:64:20:30:66:9c:e3:fe:36:a1:b9:
65:27:9a:90:da:34:ab:ca:38:db:ec:9f:bb:2a:6c:ab:8e:3f:
9f:6b:3a:4b:7e:2f:8c:52:d7:1a:21:0f:c6:3f:41:02:f3:97:
a9:46:56:c7:6e:70:6d:d7:a7:e6:00:d3:a1:03:bd:4e:28:dd:
41:69:23:4b:6a:30:03:84:06:65:14:84:db:9d:97:b2:08:4b:
6b:69:1b:f6:44:78:3f:c4:29:ba:89:3e:36:5c:a5:aa:78:3d:
a5:d7:6d:38:b6:04:da:17:97:85:1f:2d:fa:d6:5b:c4:fb:45:
a0:df:78:c2:59:e1:22:d9:9b:5d:e6:fa:3c:55:6f:96:13:ef:
1d:e6:cd:03:ed:03:8e:72:11:77:5b:36:f4:d8:8f:42:49:06:
43:e1:83:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:47:27 2026 by rpki-client