
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53eaccbd-d110-425d-abff-5d3b35eacb6e.roa
File: 53eaccbd-d110-425d-abff-5d3b35eacb6e.roa (raw, json)
Hash identifier: q2DDkf52tOIDn9S+vecfrkXdWIJXhBjbmO/YhARrcKc=
Subject key identifier: C8:D6:E8:9E:5A:28:57:12:EA:69:CD:94:66:6A:58:80:8D:FD:09:7E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 200695B4C7A8F576C9ED13C6D6705A555CA59D2A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53eaccbd-d110-425d-abff-5d3b35eacb6e.roa
Signing time: Sun 02 Aug 2026 01:10:34 +0000
ROA not before: Sun 02 Aug 2026 01:10:34 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.124.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:06:95:b4:c7:a8:f5:76:c9:ed:13:c6:d6:70:5a:55:5c:a5:9d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 2 01:10:34 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=64b6c6ad4b35e62f0d5da38b4c28b3e7b0184b0c54a70cc599769465835a8e47, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:34:55:9b:af:e8:a6:b0:0a:60:0c:ed:03:
7f:63:c1:e4:a2:24:6f:05:25:99:8c:96:fe:fa:21:
aa:ba:2c:fb:20:7f:a2:96:72:e5:ed:a9:6f:40:29:
9a:ec:ae:f8:38:3c:33:12:bc:8d:11:28:76:67:f8:
05:2c:4f:a7:5c:6c:62:a2:ba:65:a3:d3:39:96:ce:
e2:a5:2c:6a:1f:93:97:53:eb:76:04:fe:91:97:27:
cf:26:62:f3:e5:a4:8b:3e:24:19:ce:53:13:52:37:
73:ab:ac:51:f4:9f:1a:11:4e:b2:af:e3:e9:ce:6e:
ae:31:0e:4c:a5:d9:52:12:f6:7f:27:e3:ff:9d:10:
96:95:ef:87:c2:a0:aa:01:31:48:d1:88:54:e9:a4:
34:a8:3c:eb:7c:44:d5:ba:da:32:5b:0d:09:63:e1:
18:89:47:19:3f:9d:82:ad:d9:f2:fb:db:c6:98:1e:
a4:69:06:35:45:4a:cc:a3:31:a1:00:6f:ee:f5:b1:
7c:e2:51:f4:4d:16:29:8d:63:42:77:4d:f3:99:64:
a9:40:55:25:eb:26:ad:77:ed:e4:6f:19:cc:52:98:
73:98:8e:73:81:b2:7a:93:b0:c0:75:bc:ed:22:66:
40:58:11:e2:18:ed:87:68:78:58:72:c8:c2:d4:44:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D6:E8:9E:5A:28:57:12:EA:69:CD:94:66:6A:58:80:8D:FD:09:7E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/53eaccbd-d110-425d-abff-5d3b35eacb6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.124.154.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f4:2a:67:e6:20:83:be:ea:42:9e:31:a5:32:2c:9c:ab:e7:
f3:d9:fa:f5:ad:2c:06:3d:4c:60:73:e2:a2:f1:6c:77:e3:17:
e7:f9:d1:85:4b:8c:9a:1f:0e:4f:5f:b0:bd:29:ec:0c:dd:c3:
9e:8d:86:a8:75:73:99:9b:f3:d2:d5:45:be:48:f7:cc:d2:76:
a2:bb:2d:35:23:fa:0d:de:1b:8b:fe:83:43:72:cd:94:d8:9e:
20:f5:06:7b:67:da:2c:e3:ff:5a:86:b4:80:81:5a:93:be:ba:
9b:39:15:e9:2e:7d:98:04:ef:db:97:a6:08:55:86:82:1a:ef:
78:e8:eb:13:2e:82:99:e1:de:9c:fb:98:4d:8c:af:f8:9a:96:
09:d0:86:04:4c:ea:e5:df:d4:49:b3:47:1b:a8:f4:8f:99:64:
33:3c:d3:2c:3d:03:b3:81:b4:83:7c:23:78:db:b1:d5:3c:41:
01:22:ed:e0:d5:bb:72:d4:f8:ae:74:bc:4f:09:02:45:08:54:
63:63:4b:f2:3c:61:f6:26:d7:8c:b7:6b:53:62:88:00:52:95:
8b:8c:84:89:1e:81:d9:8a:e0:05:66:45:fd:b9:8f:f2:d4:b7:
79:0f:c7:c4:10:a8:34:b4:96:68:63:ff:62:27:86:a2:b1:47:
49:ba:ba:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:01:18 2026 by rpki-client