
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5933b4db-ccbb-47a3-a37b-fa7ff2d0ad09.roa
File: 5933b4db-ccbb-47a3-a37b-fa7ff2d0ad09.roa (raw, json)
Hash identifier: iIoXuk/j6pekLgmPxSRdod+k0efs51lzBsX3uD3QfRs=
Subject key identifier: 5C:C2:6F:D2:90:EA:B1:62:4F:B1:F3:52:38:55:DC:9E:DE:DD:2D:C4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 60DD9C1CE8C2BD39FB2823D957D62E4517F57199
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5933b4db-ccbb-47a3-a37b-fa7ff2d0ad09.roa
Signing time: Tue 19 May 2026 02:10:07 +0000
ROA not before: Tue 19 May 2026 02:10:07 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 159.209.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 21 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:dd:9c:1c:e8:c2:bd:39:fb:28:23:d9:57:d6:2e:45:17:f5:71:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 19 02:10:07 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=30d8ff47f84a0144b72beb8bc5cadcbda640d509348450fef226325a0da77adf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:18:19:5c:57:fe:d3:2e:31:e5:0e:1c:0c:
3d:c8:b2:40:ff:f2:99:2e:13:e4:ea:ce:ea:8d:ab:
a5:67:a7:4d:3d:df:bd:a7:cb:31:1c:73:d6:89:d4:
87:eb:39:ac:50:00:ff:03:d7:00:bc:c7:0f:31:26:
02:4b:b8:8d:68:c4:54:e5:61:3d:fa:af:06:f1:93:
82:61:3c:b3:d1:b5:90:a7:7d:f2:07:cc:3c:5f:f0:
fb:c1:dc:8d:25:3a:21:49:5a:cd:16:eb:13:f2:c5:
c9:ed:55:f1:82:64:d8:56:4b:5f:38:b3:87:6a:f1:
2e:23:54:3f:72:77:f7:27:6c:db:f7:5c:5b:3f:9b:
6a:e4:89:87:2d:66:9d:db:c6:bb:1a:45:28:fb:9d:
2b:13:e3:8d:8d:76:87:e9:1d:e4:ed:0a:3d:21:5c:
a9:c1:ae:1f:fc:04:2a:cf:c8:a8:24:ea:12:03:0b:
30:ac:5c:78:ba:29:cd:c3:00:3a:94:eb:1c:c5:9d:
dc:47:73:e1:6d:62:f3:ed:83:19:e7:1a:b6:e1:bd:
87:3a:2f:99:a8:f8:c4:ee:a2:97:78:8a:bd:16:08:
17:d5:e8:67:3f:c2:2c:54:b9:e3:87:9b:85:72:b8:
54:c6:b0:1a:58:0e:fd:c7:33:5f:ff:0b:64:92:76:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C2:6F:D2:90:EA:B1:62:4F:B1:F3:52:38:55:DC:9E:DE:DD:2D:C4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5933b4db-ccbb-47a3-a37b-fa7ff2d0ad09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.209.0.0/16
Signature Algorithm: sha256WithRSAEncryption
25:f6:8b:3c:33:1d:23:cc:a1:a5:f7:34:28:e1:8e:59:d5:23:
1f:fd:24:b0:07:79:f8:7b:eb:71:9e:9e:2b:20:83:7a:7e:c8:
2d:8e:a9:28:ab:61:ee:ee:99:81:86:52:b8:bf:0e:ed:f3:1e:
6c:9f:6d:aa:d3:e1:83:aa:83:f3:24:6c:12:81:05:ae:93:9e:
80:69:10:97:dd:03:4f:a7:10:0f:da:78:72:f7:03:e0:d5:09:
d3:fe:01:25:55:98:cb:53:bf:69:9d:47:4e:f8:7d:42:7c:7b:
ea:44:5b:d2:f2:e5:9c:de:20:d3:af:34:33:79:3e:49:98:29:
86:69:e1:21:0a:10:a9:c4:c6:b0:65:e2:25:2d:81:25:d3:36:
88:81:78:18:68:c2:42:91:77:9f:e8:d0:5d:76:0b:ed:15:3e:
a6:45:05:f4:86:d6:7a:30:bb:6e:9e:63:7e:0d:1f:13:75:27:
5c:6c:08:c4:07:5a:d2:76:e1:a3:42:bf:f2:96:12:95:a4:f5:
48:c9:42:34:d0:b2:7b:35:d9:88:7d:42:65:33:40:42:3d:b0:
bd:f4:78:5a:fc:36:78:6a:fa:83:bf:43:42:1c:82:bb:b0:5a:
1e:88:1a:aa:f2:a5:95:dd:da:0c:0f:81:cc:47:8c:b6:1e:1a:
1d:f5:07:08
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUYN2cHOjCvTn7KCPZV9YuRRf1cZkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE5MDIxMDA3WhcNMjYwODE3MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMGQ4ZmY0N2Y4NGEwMTQ0YjcyYmViOGJjNWNhZGNiZGE2
NDBkNTA5MzQ4NDUwZmVmMjI2MzI1YTBkYTc3YWRmMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCu/hgZXFf+0y4x5Q4cDD3IskD/8pkuE+TqzuqNq6Vnp009
372nyzEcc9aJ1IfrOaxQAP8D1wC8xw8xJgJLuI1oxFTlYT36rwbxk4JhPLPRtZCn
ffIHzDxf8PvB3I0lOiFJWs0W6xPyxcntVfGCZNhWS184s4dq8S4jVD9yd/cnbNv3
XFs/m2rkiYctZp3bxrsaRSj7nSsT442NdofpHeTtCj0hXKnBrh/8BCrPyKgk6hID
CzCsXHi6Kc3DADqU6xzFndxHc+FtYvPtgxnnGrbhvYc6L5mo+MTuopd4ir0WCBfV
6Gc/wixUueOHm4VyuFTGsBpYDv3HM1//C2SSdmW/AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUXMJv0pDqsWJPsfNSOFXcnt7dLcQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzU5MzNiNGRiLWNjYmItNDdhMy1hMzdiLWZhN2ZmMmQwYWQwOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCf0TANBgkqhkiG9w0BAQsFAAOCAQEAJfaLPDMdI8yhpfc0KOGOWdUjH/0k
sAd5+HvrcZ6eKyCDen7ILY6pKKth7u6ZgYZSuL8O7fMebJ9tqtPhg6qD8yRsEoEF
rpOegGkQl90DT6cQD9p4cvcD4NUJ0/4BJVWYy1O/aZ1HTvh9Qnx76kRb0vLlnN4g
0680M3k+SZgphmnhIQoQqcTGsGXiJS2BJdM2iIF4GGjCQpF3n+jQXXYL7RU+pkUF
9IbWejC7bp5jfg0fE3UnXGwIxAda0nbho0K/8pYSlaT1SMlCNNCyezXZiH1CZTNA
Qj2wvfR4Wvw2eGr6g79DQhyCu7BaHogaqvKlld3aDA+BzEeMth4aHfUHCA==
-----END CERTIFICATE-----
Generated at Wed May 20 09:28:02 2026 by rpki-client