
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57523a93-aa16-4269-8d52-23c2a6bf5b81.roa
File: 57523a93-aa16-4269-8d52-23c2a6bf5b81.roa (raw, json)
Hash identifier: izX6+CUvwN0+9bfnscyoeU1kl9Ergwbck9Iu1sBVuAI=
Subject key identifier: 0A:90:D3:9F:9A:CB:7D:74:95:53:E7:F0:54:B6:1A:5A:0F:C7:1A:62
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 79B271B65157D5F914703AD80D80D2E9B66B5511
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57523a93-aa16-4269-8d52-23c2a6bf5b81.roa
Signing time: Tue 04 Aug 2026 02:40:37 +0000
ROA not before: Tue 04 Aug 2026 02:40:37 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.248.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:b2:71:b6:51:57:d5:f9:14:70:3a:d8:0d:80:d2:e9:b6:6b:55:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 4 02:40:37 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=fa037fb562f9f5defa4a722de59790529a1c2192a3e4ed6336878b44af203fbc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:02:77:83:1f:b5:70:54:f8:8b:b5:bb:c8:
e1:c0:0b:74:ac:a0:ad:fe:fa:d5:68:c0:20:7c:5f:
14:24:b0:df:72:b6:d6:9c:5e:6b:6c:89:34:5f:34:
fa:8c:7c:19:d5:b3:81:6d:b9:06:0a:2a:20:29:82:
55:0c:48:39:6e:ea:5a:26:a9:3f:ea:9d:88:b8:78:
51:43:e6:88:93:5d:ea:bf:cb:28:ed:13:b2:51:19:
5f:53:34:a6:7e:12:8f:34:5a:0b:4d:2a:a7:34:77:
16:d2:13:b8:41:b1:c8:a9:2e:5a:6a:15:b8:d4:2e:
ef:74:db:5a:3c:f0:af:7c:0d:fb:5f:49:41:83:a5:
08:46:5f:05:a1:eb:8e:ca:21:27:75:f6:29:5e:74:
e8:a3:53:95:f1:70:ca:0d:de:a6:3b:22:db:2c:2c:
7a:c4:e3:83:12:cf:78:07:de:96:35:bc:5b:a7:f1:
3e:3c:09:a4:34:d8:2b:fe:38:c7:1e:b9:69:a9:52:
d8:d9:b0:01:6d:74:89:16:79:d2:fd:c5:44:d3:0c:
46:02:25:bf:e6:59:5c:79:46:ce:04:eb:eb:88:c7:
71:18:df:35:e2:8a:89:84:fc:cb:7d:8d:35:e0:c9:
6b:f3:fe:c1:a1:77:ed:84:92:73:0d:75:3b:fb:43:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:90:D3:9F:9A:CB:7D:74:95:53:E7:F0:54:B6:1A:5A:0F:C7:1A:62
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/57523a93-aa16-4269-8d52-23c2a6bf5b81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.248.221.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f7:0b:35:3b:98:c3:d4:ae:5e:50:6e:2f:11:78:59:67:a6:
e6:e9:aa:00:00:d6:5c:1b:61:99:6b:93:70:cf:42:8a:f1:e6:
40:a9:65:c4:93:04:8b:5f:20:8d:7e:9f:0d:ae:bb:ef:94:56:
51:13:79:6f:09:c5:2f:dc:44:4a:cf:f3:a6:26:7d:6b:c6:0c:
97:2d:3f:8d:3f:07:f4:b8:82:ef:7d:46:62:5e:8b:f5:b2:df:
8c:4c:2f:2a:a0:c8:15:42:92:72:31:7d:31:d3:2d:25:84:99:
1b:6c:23:c2:93:52:9b:9f:48:3f:62:41:3a:ff:c9:65:fd:1c:
23:30:2f:06:b5:bf:be:00:4b:d7:81:3c:35:48:2f:37:46:55:
dd:ad:7a:62:84:a1:88:30:99:91:a6:2f:e7:2b:19:9a:73:85:
b0:f7:44:d1:4e:7e:63:ff:a2:0e:9a:a2:09:81:3a:b8:36:e4:
57:12:47:96:6d:b7:8b:f8:b3:94:e0:84:a7:fa:c0:8e:13:46:
85:2a:10:e6:2b:fe:64:cd:59:d5:95:78:82:d2:be:5b:f0:56:
36:f8:e7:2a:64:3f:f5:20:61:ea:e1:09:fe:68:a2:b3:09:b1:
a6:66:56:74:25:5f:1b:3b:50:fb:ae:ce:f4:b2:1d:25:e8:d7:
65:06:b2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 09:36:52 2026 by rpki-client