
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4be5bf81-7974-4cac-8621-0cce3471aa2b.roa
File: 4be5bf81-7974-4cac-8621-0cce3471aa2b.roa (raw, json)
Hash identifier: YovC1wxe7k+kMAQFqB05YZt5xFfImdgbBiuhfCanffM=
Subject key identifier: FB:19:3A:B9:E3:B6:79:7A:8B:45:2A:64:97:1A:E1:85:1A:88:91:E8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7C9856446B2ABB42A50710D89B502385D324AD4D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4be5bf81-7974-4cac-8621-0cce3471aa2b.roa
Signing time: Tue 04 Aug 2026 02:51:28 +0000
ROA not before: Tue 04 Aug 2026 02:51:28 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.245.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:98:56:44:6b:2a:bb:42:a5:07:10:d8:9b:50:23:85:d3:24:ad:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 4 02:51:28 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=9775c42808ef5ec07ddbd1c1a21ac99be64b1a2dce7eb8b828f7984c86527be3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:73:4a:98:4a:c8:47:b2:55:70:f2:98:3b:23:
92:64:bf:5f:ad:d5:67:01:48:b3:9b:2a:56:9f:85:
91:0e:ea:06:2f:06:97:b0:10:a3:37:12:ae:0f:63:
ca:01:aa:20:0c:00:8a:e8:2a:ed:da:5c:6e:ee:69:
15:ee:ab:86:ad:45:5e:33:a5:14:2b:90:87:e5:2f:
37:a0:07:36:e8:4f:af:07:9c:d6:e6:91:b7:57:09:
9d:2b:30:c8:3f:cf:09:34:2b:28:c3:9e:02:fc:0d:
26:ef:e0:ae:0a:17:a8:2a:f0:cf:78:ca:78:f4:7a:
d9:c5:7c:ce:cf:3f:23:ed:b0:a8:b5:4e:51:b8:cb:
64:49:65:c1:1f:a5:7b:ea:72:09:02:1c:51:e9:26:
10:a4:34:3a:0b:4f:ba:d4:3f:e6:90:a8:86:17:36:
12:44:74:d7:e6:ad:75:6d:e8:76:e1:42:09:d7:b9:
b3:c0:92:60:cf:3d:0a:db:f4:ed:02:28:d4:fb:cc:
96:a0:2f:29:79:2c:06:bb:c3:d8:71:60:42:00:9a:
ef:ef:12:5d:46:5a:61:f8:a7:4b:f8:6c:7b:11:09:
9d:e8:7f:85:50:8b:cb:83:c5:84:ec:9d:07:f7:e2:
51:a2:6a:e3:64:bb:40:50:8f:53:d7:7d:7c:4f:99:
48:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:19:3A:B9:E3:B6:79:7A:8B:45:2A:64:97:1A:E1:85:1A:88:91:E8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4be5bf81-7974-4cac-8621-0cce3471aa2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.245.160.0/21
Signature Algorithm: sha256WithRSAEncryption
87:c6:18:f4:5c:37:f5:5c:a8:6c:23:e2:66:dd:46:bd:37:f6:
b8:3d:3b:c8:3f:de:4f:1e:1d:5c:9d:c3:bf:0a:57:c5:70:53:
b6:24:5d:78:22:d6:b7:6e:5c:dd:53:69:70:c6:e2:90:5e:86:
2f:75:ed:12:ba:63:1a:66:e3:bf:c3:f7:72:aa:c8:d8:d3:0b:
a8:1a:4d:ba:28:02:bc:8b:ef:1c:be:10:b0:28:d5:93:21:30:
a0:88:ec:15:8b:bf:de:a1:de:7c:22:8d:71:e7:36:49:0e:74:
40:8d:74:88:c6:60:e0:0a:5c:2b:31:1e:7c:7b:ce:5e:3c:83:
8e:6a:4d:35:e6:1b:17:32:fb:ad:68:b0:3d:68:da:65:32:e4:
33:23:00:ce:85:d0:46:18:ae:24:bf:e7:33:7c:ce:e8:51:c7:
9d:8f:9d:84:56:ff:0d:44:e8:60:87:6b:28:71:be:86:70:b7:
53:02:ee:0b:72:14:dc:aa:03:43:fa:98:a6:34:66:3c:dc:08:
7b:4b:dc:92:45:f2:2d:43:2f:74:d4:55:96:3d:21:6d:af:34:
5b:0e:0d:3c:1c:a3:f8:62:70:fe:17:bf:be:83:12:54:0e:d1:
03:83:61:f7:8f:8e:a9:3c:81:15:c6:d1:a9:72:d7:67:a1:c9:
7e:1e:6a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 08:42:04 2026 by rpki-client