
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5e6251d0-71d3-482b-9cc8-1b2b0e393da4.roa
File: 5e6251d0-71d3-482b-9cc8-1b2b0e393da4.roa (raw, json)
Hash identifier: b3t2w/OL709N6Sn20OzGSTFy9z3MFcAaS5m0gqim3ts=
Subject key identifier: 1D:49:12:AC:0D:B8:59:1D:E4:92:12:E3:1A:B7:12:37:DA:11:46:C0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 71E3DD0FBA8226618B9130077CC79C717E07D020
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5e6251d0-71d3-482b-9cc8-1b2b0e393da4.roa
Signing time: Mon 03 Aug 2026 03:31:44 +0000
ROA not before: Mon 03 Aug 2026 03:31:44 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.94.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e3:dd:0f:ba:82:26:61:8b:91:30:07:7c:c7:9c:71:7e:07:d0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 3 03:31:44 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=f191752abf9cf458b37fa18acf32bb7d7de1670815ea5a2e66633b13ba9bfad3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:ab:da:b7:93:50:68:b8:6e:96:92:23:1d:
d7:9f:7d:0d:45:2b:2e:a1:a0:74:17:27:49:7b:79:
fc:73:5a:55:d3:7a:ba:b3:38:ea:45:98:98:86:98:
75:41:9e:68:3f:b5:4f:08:59:5a:c1:b5:12:b5:46:
51:da:5f:c9:5c:88:c1:07:5a:7a:56:4e:3d:69:65:
25:21:71:72:74:01:54:9d:86:00:05:42:9f:a6:00:
20:6b:67:f3:4b:16:71:de:fd:05:14:cc:43:7c:1b:
f4:10:99:b1:b6:b2:f1:64:55:ce:dc:6b:d5:57:78:
4d:91:f8:52:94:d8:2f:07:e4:94:58:18:a2:8f:9c:
0f:e6:72:b6:22:e8:d7:8b:1e:c0:92:d0:5b:07:cd:
f8:50:7c:62:57:04:4b:87:c8:ed:ad:61:48:aa:6a:
d4:9c:a0:0c:18:3b:31:78:0c:ab:1f:b5:78:0c:06:
af:4e:39:66:3c:86:b8:d0:e0:e1:a8:0d:a6:59:5f:
22:6a:f1:7d:cb:1d:b2:ef:cc:5e:8e:7f:04:3c:70:
7e:8c:16:d8:fe:9b:8c:ca:32:72:b3:6b:dc:4c:6d:
0b:25:08:f8:cb:92:46:88:72:77:a0:99:5b:dc:84:
cf:f7:c5:e9:c7:55:4f:3e:d9:d4:7e:88:88:73:a3:
45:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:49:12:AC:0D:B8:59:1D:E4:92:12:E3:1A:B7:12:37:DA:11:46:C0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5e6251d0-71d3-482b-9cc8-1b2b0e393da4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.94.96.0/21
Signature Algorithm: sha256WithRSAEncryption
24:1e:c9:ac:58:c1:f9:68:9b:69:da:29:b6:f5:38:4c:a2:73:
78:ac:f3:99:75:d0:5d:ad:31:f3:99:10:00:7f:d0:8b:87:66:
c4:98:1b:72:ef:ee:0e:1d:e2:15:a6:a5:90:16:ad:36:71:8e:
dd:44:a7:cb:1e:0d:4d:9c:e3:8e:79:85:2d:2d:b4:e3:30:47:
dc:6a:e1:12:aa:39:a1:78:01:b2:f2:4d:b1:ea:fe:dd:37:02:
0a:bf:47:92:ac:6d:04:e2:d6:3c:cf:16:60:65:73:c1:1d:a2:
ef:e1:01:88:4d:74:ae:6a:60:71:3c:9e:f9:b7:4a:d8:75:bb:
d7:c5:ec:07:95:58:0a:d2:94:70:80:1a:67:2f:f6:a7:42:41:
1f:34:ed:89:b7:6a:2d:06:bb:fc:82:49:22:8d:c3:59:0c:f6:
fd:d8:d8:c6:55:2f:eb:3c:6a:cc:89:33:b8:80:90:78:bc:f4:
9e:73:8f:6b:dd:96:2a:63:ba:74:02:74:ec:44:44:c4:72:ac:
8a:c8:81:b6:64:e6:a3:15:43:90:cb:da:79:8c:72:51:d1:98:
2b:f1:cc:fb:19:7d:56:98:56:b3:cc:24:89:ae:66:9d:a3:81:
0a:9e:c5:d1:10:41:da:6a:29:98:a7:26:bf:f5:57:10:a5:96:
28:38:01:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 08:41:24 2026 by rpki-client