
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4b9ab535-4671-41fc-8374-d554bd9b6205.roa
File: 4b9ab535-4671-41fc-8374-d554bd9b6205.roa (raw, json)
Hash identifier: psmGDH9JnfZ+HvDzmArYq02mO6AXnM9yyiDjM0HsqEQ=
Subject key identifier: 85:F9:46:65:2D:10:18:FD:B9:8F:5A:C5:C3:59:3F:D7:DB:04:DB:72
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0BAC4533366F9DB624E2EA97FF83289C41BC4EAB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4b9ab535-4671-41fc-8374-d554bd9b6205.roa
Signing time: Fri 07 Aug 2026 01:51:10 +0000
ROA not before: Fri 07 Aug 2026 01:51:10 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 3356
IP address blocks: 161.188.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ac:45:33:36:6f:9d:b6:24:e2:ea:97:ff:83:28:9c:41:bc:4e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 01:51:10 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=5fd17bf3df24f816cfc25158bb30ded5dfda49ce0a3522ec2488d50f67b5d787, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e1:a7:51:50:57:38:33:60:6f:0c:c5:87:4e:
6a:61:1f:48:eb:68:82:85:e9:a9:0d:64:b2:f1:fa:
e3:c6:90:8d:36:2e:8f:60:6a:1a:36:b4:59:1f:e5:
b9:0c:01:bf:39:e8:7b:9e:95:46:ba:a0:cd:c9:d8:
7e:2e:9b:0f:67:6d:16:78:43:e3:ee:4f:c7:8d:7f:
ba:7d:91:86:07:9c:ae:91:00:60:c6:9c:33:d0:56:
0d:c7:0b:0f:8c:bd:1a:ec:08:13:1a:f5:26:ff:c6:
26:d3:f2:a6:e9:87:0d:cc:cd:9f:b2:f8:0f:37:a3:
7d:98:3a:b7:20:de:31:2d:c5:30:35:30:3a:29:9f:
00:38:71:78:cc:a5:0d:bd:f8:6e:93:94:87:22:f4:
19:a8:62:7e:d3:8b:04:da:ad:95:a2:30:ef:81:3f:
30:15:3c:88:88:4c:64:37:2d:bb:2d:86:2b:9a:1e:
aa:e6:60:fd:67:cf:b6:fe:91:ba:63:c1:fc:c6:f3:
1b:7e:02:f7:3a:7b:92:2b:c9:9e:3c:0e:43:b0:09:
ac:f6:bb:43:9c:69:19:c5:ba:24:b0:dd:e5:8a:38:
d3:f1:2f:64:4d:2b:32:12:04:27:d1:84:21:f0:ec:
57:5a:a1:c0:60:bf:c4:c8:d0:1d:b0:0c:0b:87:7f:
0e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F9:46:65:2D:10:18:FD:B9:8F:5A:C5:C3:59:3F:D7:DB:04:DB:72
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4b9ab535-4671-41fc-8374-d554bd9b6205.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.188.216.0/21
Signature Algorithm: sha256WithRSAEncryption
75:0e:66:6c:15:36:de:07:65:f5:51:d1:80:6d:2c:cb:1c:de:
d9:a7:10:e1:f3:fc:ff:50:37:58:09:d5:93:cc:48:05:78:27:
ad:b7:5c:83:ba:01:71:7e:34:fa:2d:db:ab:e9:79:b3:90:88:
fd:90:2a:b8:db:be:41:93:a5:67:23:36:05:a7:7a:5b:9d:f0:
54:c4:40:32:51:61:6b:a3:7a:6a:d4:0c:d5:ad:f1:62:14:d1:
5f:fe:45:45:00:63:81:e3:9b:1b:b2:98:58:f3:4c:08:97:45:
04:3b:dd:55:be:a6:eb:07:da:60:64:ed:e2:aa:13:65:cd:cb:
c1:6c:8c:19:c3:6e:89:51:39:b5:9f:93:84:f3:2b:41:f3:f9:
0a:f4:6a:6c:a1:9d:aa:73:29:6b:66:21:ac:39:8c:c9:13:95:
e7:e5:8d:b2:b3:e1:04:a7:56:f1:46:08:48:54:c4:f2:1e:52:
bb:39:38:23:bc:68:97:b1:07:9a:0d:71:ef:97:2a:fc:01:b3:
ec:8e:d5:91:19:4d:8c:b3:2f:22:e7:9a:fa:d3:ed:70:f1:98:
af:ec:df:c9:4e:61:16:1d:ef:76:dd:eb:da:e0:79:dc:1d:26:
0a:dc:e4:7e:b4:e5:3e:15:29:35:46:10:a4:d5:34:1c:a9:50:
80:7a:8a:df
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUC6xFMzZvnbYk4uqX/4MonEG8TqswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDE1MTEwWhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZmQxN2JmM2RmMjRmODE2Y2ZjMjUxNThiYjMwZGVkNWRm
ZGE0OWNlMGEzNTIyZWMyNDg4ZDUwZjY3YjVkNzg3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDa4adRUFc4M2BvDMWHTmphH0jraIKF6akNZLLx+uPGkI02
Lo9gaho2tFkf5bkMAb856HuelUa6oM3J2H4umw9nbRZ4Q+PuT8eNf7p9kYYHnK6R
AGDGnDPQVg3HCw+MvRrsCBMa9Sb/xibT8qbphw3MzZ+y+A83o32YOrcg3jEtxTA1
MDopnwA4cXjMpQ29+G6TlIci9BmoYn7TiwTarZWiMO+BPzAVPIiITGQ3Lbsthiua
HqrmYP1nz7b+kbpjwfzG8xt+Avc6e5IryZ48DkOwCaz2u0OcaRnFuiSw3eWKONPx
L2RNKzISBCfRhCHw7FdaocBgv8TI0B2wDAuHfw4zAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhflGZS0QGP25j1rFw1k/19sE23IwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzRiOWFiNTM1LTQ2NzEtNDFmYy04Mzc0LWQ1NTRiZDliNjIwNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAOhvNgwDQYJKoZIhvcNAQELBQADggEBAHUOZmwVNt4HZfVR0YBtLMsc3tmn
EOHz/P9QN1gJ1ZPMSAV4J623XIO6AXF+NPot26vpebOQiP2QKrjbvkGTpWcjNgWn
elud8FTEQDJRYWujemrUDNWt8WIU0V/+RUUAY4HjmxuymFjzTAiXRQQ73VW+pusH
2mBk7eKqE2XNy8FsjBnDbolRObWfk4TzK0Hz+Qr0amyhnapzKWtmIaw5jMkTlefl
jbKz4QSnVvFGCEhUxPIeUrs5OCO8aJexB5oNce+XKvwBs+yO1ZEZTYyzLyLnmvrT
7XDxmK/s38lOYRYd73bd69rgedwdJgrc5H605T4VKTVGEKTVNBypUIB6it8=
-----END CERTIFICATE-----
Generated at Sat Aug 8 07:02:44 2026 by rpki-client