
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae5210c-d469-43b7-8e47-3e4190af8c57.roa
File: 5ae5210c-d469-43b7-8e47-3e4190af8c57.roa (raw, json)
Hash identifier: GfJBSHbd7/gZmKn1B6Eif8aXTzHb4dsIlUY4/2WCfFw=
Subject key identifier: 10:8C:E6:53:9C:E2:4A:A8:D3:48:AA:BA:B6:F7:2E:AF:F0:72:CA:7F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 59C66A5492E67B31C321ECC6272D04FB8A002946
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae5210c-d469-43b7-8e47-3e4190af8c57.roa
Signing time: Mon 23 Feb 2026 00:21:51 +0000
ROA not before: Mon 23 Feb 2026 00:21:51 +0000
ROA not after: Sun 24 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.197.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:c6:6a:54:92:e6:7b:31:c3:21:ec:c6:27:2d:04:fb:8a:00:29:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 23 00:21:51 2026 GMT
Not After : May 24 23:59:59 2026 GMT
Subject: serialNumber=045eb9ba783ece8a4c69064509b62904c8b7c5f905c8963ec735603a10b62311, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:6d:18:78:ed:fc:72:29:3e:c8:01:d8:cd:
bd:52:33:67:90:c2:a2:e1:32:de:bb:23:61:30:41:
31:91:4d:2e:3c:2d:1c:1a:9b:c8:b5:1b:68:43:6b:
f2:99:4a:6a:10:08:ed:97:43:05:a5:18:1e:b5:07:
5f:ec:46:56:62:68:84:56:24:f3:b4:38:5c:79:5e:
a6:d4:ac:83:26:e6:39:1f:1d:2b:69:68:b1:e3:65:
4a:07:68:02:81:d3:c8:c8:b7:15:9a:7d:08:43:35:
16:b3:fe:35:06:cf:b8:53:dc:31:be:fe:99:73:a0:
fe:48:36:4e:e6:a6:2c:03:25:20:0d:72:e0:36:ab:
36:60:7d:9f:2a:d2:53:31:c2:f1:64:56:be:48:f2:
11:d4:53:02:c6:ed:7d:fe:bc:73:6a:85:94:e3:fc:
bc:8e:fe:38:be:1c:4d:55:ef:22:56:f2:4e:c6:7e:
ff:85:0a:3b:60:7c:9e:63:be:fe:8e:ee:55:89:57:
49:77:92:46:da:07:18:d9:40:97:9b:99:d0:f7:83:
3c:64:84:a4:0f:9c:7e:d9:ac:e1:07:15:95:82:29:
ba:25:58:3a:e6:de:dc:b9:26:e8:39:5f:45:bf:29:
1c:59:53:b0:07:84:83:d8:eb:cd:ef:a3:da:63:cd:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8C:E6:53:9C:E2:4A:A8:D3:48:AA:BA:B6:F7:2E:AF:F0:72:CA:7F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ae5210c-d469-43b7-8e47-3e4190af8c57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.197.193.0/24
Signature Algorithm: sha256WithRSAEncryption
86:40:0a:02:45:bb:e6:49:a8:47:79:df:e1:eb:03:5b:33:25:
c3:91:e5:8f:3e:30:bb:56:29:78:b2:fc:21:38:9a:2b:01:bf:
93:d0:25:49:bc:2e:92:4d:92:6a:0c:e9:d6:af:a7:50:6e:f8:
cf:cc:53:62:25:2b:cb:3f:8d:15:0e:93:db:36:ce:e0:4a:29:
83:00:02:d3:09:dc:5c:0c:e6:c8:b4:9c:52:a1:a7:7a:57:63:
62:32:36:05:89:bd:e8:ef:1f:6f:2a:31:34:cb:16:c3:e8:3a:
29:bc:d5:5a:c1:1c:8c:69:5d:ee:aa:c2:97:f7:40:fe:ed:e8:
34:93:92:a6:a2:08:af:11:fb:71:73:cc:14:77:8c:17:d4:a3:
6d:31:9d:e5:8f:f7:3f:d5:ed:4e:88:5f:f9:e3:41:77:b2:de:
02:2a:93:01:06:f5:eb:d3:33:9c:25:0c:2b:33:a2:9f:12:41:
dd:03:f4:6c:50:55:0b:fb:fc:73:a3:3c:fb:37:cd:34:9b:eb:
45:ca:6b:b2:f7:1b:3b:d1:eb:05:c4:af:ce:74:e8:d0:02:e6:
d0:a4:77:2d:e4:10:83:9b:ae:dc:c4:97:ea:aa:79:77:fc:e8:
1e:19:31:56:d9:99:f2:7f:76:fd:76:bf:a8:e5:86:84:cb:24:
c2:09:ab:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 02:08:41 2026 by rpki-client