
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c474d9e-d017-4b10-8416-98cd563f111c.roa
File: 4c474d9e-d017-4b10-8416-98cd563f111c.roa (raw, json)
Hash identifier: acKNlY1Ntu/2/TF2r5CaJHMMECjgTJ52dHk9ucT32I4=
Subject key identifier: D7:AF:F2:4B:F2:EE:E6:C3:38:CD:3B:8A:C3:E7:CD:D4:75:A7:6B:26
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0E643050792FA496AF4F2E0DDBE8C0631DD64D78
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c474d9e-d017-4b10-8416-98cd563f111c.roa
Signing time: Tue 04 Aug 2026 02:50:02 +0000
ROA not before: Tue 04 Aug 2026 02:50:02 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.204.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:64:30:50:79:2f:a4:96:af:4f:2e:0d:db:e8:c0:63:1d:d6:4d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 4 02:50:02 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=a2efa2c37d79a36fce08b3b2be007f98d6819f85f038dacc2bc3d1489e29adb6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:26:5f:a1:2c:ea:5c:e0:eb:80:40:dd:82:cb:
7a:7a:6e:9b:42:7a:29:c2:38:3f:d8:31:61:0f:8a:
68:dc:09:ca:90:ab:9f:7e:59:63:32:73:ea:24:40:
42:91:15:50:c5:24:cf:cf:74:b2:4e:05:13:27:a3:
1c:02:0b:4d:38:b9:fa:95:51:56:14:f8:cd:8b:97:
78:25:05:96:58:64:e1:94:f9:b8:9b:f8:f0:12:da:
9c:e4:36:e5:d1:1e:ca:ca:b8:06:c9:9e:ff:84:e7:
3c:9a:8d:3b:57:20:15:2c:25:fd:fa:fe:f8:6e:a4:
6e:c0:8a:b9:bb:41:59:4b:b0:4c:f1:69:56:2d:f7:
c3:e0:fb:7f:35:89:38:6b:84:ff:f6:d4:eb:9f:88:
14:f3:b8:2d:98:25:26:5e:ff:1f:7d:2d:92:d8:67:
b7:04:c8:aa:b4:e8:0d:ba:b9:e9:70:1d:06:4b:a2:
31:3b:60:5f:17:8e:6c:21:bf:e2:9f:c7:90:ec:28:
01:48:62:ad:cf:31:f0:66:8a:3b:37:4b:f0:b9:a4:
bd:50:b0:ac:70:26:48:16:87:90:93:a1:90:19:f4:
20:9e:82:34:6b:db:fb:bc:c7:d6:25:a0:56:9f:e0:
6b:a0:c8:d6:19:65:90:a1:19:29:c3:5f:ad:59:84:
11:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AF:F2:4B:F2:EE:E6:C3:38:CD:3B:8A:C3:E7:CD:D4:75:A7:6B:26
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c474d9e-d017-4b10-8416-98cd563f111c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.204.128.0/17
Signature Algorithm: sha256WithRSAEncryption
2b:a5:cc:62:8e:9a:4b:80:65:8b:5f:8f:38:45:6c:1e:90:73:
ce:2b:c5:3e:02:09:f3:c8:80:95:6d:dc:48:27:64:9f:8b:f9:
fc:00:25:fa:fe:f8:9a:10:a1:c6:02:00:61:4d:41:b6:96:a7:
67:d0:00:fe:ca:76:2b:aa:b3:35:0d:0a:9c:de:e7:4b:0f:50:
c3:dc:00:d9:bc:42:10:38:e8:64:b7:fe:6e:96:e4:82:c6:27:
5d:6e:af:27:9b:d8:cc:53:c4:38:ec:d4:ce:2d:6a:be:2e:ad:
38:ac:00:91:6b:a2:1f:22:b5:ed:0a:26:77:fd:ac:10:9e:19:
ac:2d:c1:75:e4:98:88:b7:22:51:8b:fc:ee:30:5d:36:d7:b3:
6a:33:13:12:7f:8d:2f:54:33:92:47:ee:23:bb:b1:d1:f2:7d:
3f:eb:2c:79:94:8d:8c:67:3d:44:e8:bc:b9:50:81:71:13:5e:
8a:e5:22:a3:cd:e7:c8:ce:3c:3f:2b:4b:29:78:6e:fe:6a:60:
57:b4:1f:a0:e2:47:88:e7:fe:df:7d:b0:e5:26:2a:ef:ca:f2:
74:40:f3:d1:e6:15:a8:1e:26:f7:74:77:7c:29:49:84:84:62:
63:18:27:d8:0f:b9:13:a5:b3:f2:13:a4:36:9b:cf:4b:b6:a1:
90:a9:f7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:01:20 2026 by rpki-client