
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a8e9f4a-8040-45bf-8350-33fa02ee76d5.roa
File: 5a8e9f4a-8040-45bf-8350-33fa02ee76d5.roa (raw, json)
Hash identifier: rB8TZafcMb+kgluqO14PCi+YrtAX6t27KAj/3VwkAAc=
Subject key identifier: 54:AF:5C:9B:BE:66:65:35:77:52:E0:79:31:86:32:18:70:75:86:B5
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 76E5C3DEA0F6449C51E53BA2F3EA007AF95745F2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a8e9f4a-8040-45bf-8350-33fa02ee76d5.roa
Signing time: Thu 06 Aug 2026 00:00:34 +0000
ROA not before: Thu 06 Aug 2026 00:00:34 +0000
ROA not after: Wed 04 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.167.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e5:c3:de:a0:f6:44:9c:51:e5:3b:a2:f3:ea:00:7a:f9:57:45:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 6 00:00:34 2026 GMT
Not After : Nov 4 23:59:59 2026 GMT
Subject: serialNumber=310a6e2e21d39a4317c35a47249d4ce6332b51ad07c18d917970bf5dc68fec08, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fb:e9:0e:ab:38:8f:66:22:e0:aa:77:1b:54:
da:ba:8d:fe:b0:1d:a5:9e:cd:86:bc:33:6b:60:c9:
ac:ed:48:55:1f:bf:26:7d:c0:fc:fa:be:e9:ba:73:
e0:94:16:50:a5:95:fc:49:d4:94:f9:28:c8:6e:d9:
75:5a:1e:87:b8:08:5c:44:c0:1b:02:de:9c:8b:1e:
ca:80:e2:61:d1:b0:a4:a9:d3:34:58:d9:ac:5b:96:
c6:15:fc:21:95:f5:07:8a:84:8e:16:6c:4f:d9:0f:
99:0c:92:a3:4f:3f:64:45:da:45:4a:19:9f:75:7c:
2c:b2:00:dc:09:7c:e0:b9:91:a0:7a:06:9c:d2:1a:
84:c5:9a:1a:82:37:24:85:e6:3b:4f:9e:ad:18:24:
fe:c1:20:58:01:05:54:4c:42:c3:a5:eb:b7:cb:0d:
e4:09:c5:d7:96:82:4e:4b:39:c1:f8:86:13:3a:d0:
58:f5:55:2e:18:4d:44:0d:ad:26:bd:78:0f:4a:e8:
5e:5a:11:07:6f:64:aa:06:71:1b:b3:ae:4f:2e:7e:
43:61:4a:c1:ac:d8:83:5b:84:ae:14:af:d8:7c:a4:
6b:88:04:91:a7:40:b6:67:3f:bd:b0:9c:26:a4:46:
9d:ca:2f:eb:73:23:1a:15:52:bd:db:57:5e:ee:be:
00:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AF:5C:9B:BE:66:65:35:77:52:E0:79:31:86:32:18:70:75:86:B5
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a8e9f4a-8040-45bf-8350-33fa02ee76d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.167.14.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:11:f2:82:b2:41:39:06:08:a3:66:46:02:19:f2:81:05:d2:
ce:1c:ba:02:44:64:d3:eb:ba:99:9b:b2:f3:fd:f1:08:1b:b8:
76:a8:de:7a:36:e1:75:e2:32:53:1f:17:bd:19:96:a7:66:cd:
bf:41:2c:0d:41:c2:b5:94:c7:9e:9c:38:0f:df:41:72:ac:9f:
91:4a:c9:b9:bb:9c:a8:c4:4b:0f:8c:01:bd:c0:d5:08:42:d4:
0d:4d:95:93:47:d5:83:88:26:3e:ef:96:31:2b:40:99:d7:d0:
d1:4a:47:76:0f:f1:65:af:f9:c5:09:70:16:34:81:ed:95:28:
38:b2:c6:2c:7b:f0:01:8d:62:df:22:c0:fb:71:17:90:0e:9b:
5f:83:b0:9e:a3:b0:21:ce:d9:ad:74:79:03:6d:c3:d5:33:14:
8b:69:45:97:a1:96:28:08:24:d6:89:ee:ad:f1:a9:38:fb:f5:
79:ae:21:6e:6b:c7:a5:80:47:ca:e3:3b:a2:7d:19:32:dd:c8:
b9:8c:05:7f:e8:84:24:72:43:60:66:2c:ec:be:60:61:2d:12:
23:3e:aa:fb:2b:03:f4:be:46:58:bc:4c:4b:5f:97:a4:9d:c2:
9c:48:ac:b7:fb:89:27:42:d2:46:64:09:f5:d0:de:f2:56:97:
b5:46:ee:a0
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUduXD3qD2RJxR5Tui8+oAevlXRfIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA2MDAwMDM0WhcNMjYxMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMTBhNmUyZTIxZDM5YTQzMTdjMzVhNDcyNDlkNGNlNjMz
MmI1MWFkMDdjMThkOTE3OTcwYmY1ZGM2OGZlYzA4MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCS++kOqziPZiLgqncbVNq6jf6wHaWezYa8M2tgyaztSFUf
vyZ9wPz6vum6c+CUFlCllfxJ1JT5KMhu2XVaHoe4CFxEwBsC3pyLHsqA4mHRsKSp
0zRY2axblsYV/CGV9QeKhI4WbE/ZD5kMkqNPP2RF2kVKGZ91fCyyANwJfOC5kaB6
BpzSGoTFmhqCNySF5jtPnq0YJP7BIFgBBVRMQsOl67fLDeQJxdeWgk5LOcH4hhM6
0Fj1VS4YTUQNrSa9eA9K6F5aEQdvZKoGcRuzrk8ufkNhSsGs2INbhK4Ur9h8pGuI
BJGnQLZnP72wnCakRp3KL+tzIxoVUr3bV17uvgChAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVK9cm75mZTV3UuB5MYYyGHB1hrUwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzVhOGU5ZjRhLTgwNDAtNDViZi04MzUwLTMzZmEwMmVlNzZkNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEDpw4wDQYJKoZIhvcNAQELBQADggEBAEoR8oKyQTkGCKNmRgIZ8oEF0s4c
ugJEZNPrupmbsvP98QgbuHao3no24XXiMlMfF70Zlqdmzb9BLA1BwrWUx56cOA/f
QXKsn5FKybm7nKjESw+MAb3A1QhC1A1NlZNH1YOIJj7vljErQJnX0NFKR3YP8WWv
+cUJcBY0ge2VKDiyxix78AGNYt8iwPtxF5AOm1+DsJ6jsCHO2a10eQNtw9UzFItp
RZehligIJNaJ7q3xqTj79XmuIW5rx6WAR8rjO6J9GTLdyLmMBX/ohCRyQ2BmLOy+
YGEtEiM+qvsrA/S+Rli8TEtfl6SdwpxIrLf7iSdC0kZkCfXQ3vJWl7VG7qA=
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:41:25 2026 by rpki-client