
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ebd4866-0684-4b8c-b99e-2619b8860886.roa
File: 5ebd4866-0684-4b8c-b99e-2619b8860886.roa (raw, json)
Hash identifier: lnQP9JFCoymDp8PFAJaknqLpdJr5tMWqAS1JfUg+HJQ=
Subject key identifier: C3:E7:39:17:C0:6C:EB:5B:7F:31:70:69:CB:C8:63:7B:83:70:55:87
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7D458F9EBB5A40FCAA52F93A02E23D26DAA260A8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ebd4866-0684-4b8c-b99e-2619b8860886.roa
Signing time: Fri 07 Aug 2026 01:40:32 +0000
ROA not before: Fri 07 Aug 2026 01:40:32 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.114.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:45:8f:9e:bb:5a:40:fc:aa:52:f9:3a:02:e2:3d:26:da:a2:60:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 01:40:32 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=dba23617e64e3e85ec9c79c858fdb996d1ec0062e32f44c9197e32ac50c79ae2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0e:ac:c2:dd:3f:f0:9a:6d:7a:aa:6a:23:1f:
f9:36:99:10:1d:25:ad:43:bc:d7:4c:70:b8:97:68:
fa:b2:db:3c:97:c9:4f:86:be:5a:41:d2:de:20:f3:
e3:a5:52:f7:4f:52:ff:a9:43:67:d4:2d:c0:f9:52:
e4:13:83:8a:c4:ef:97:4a:23:e4:18:eb:a9:5d:f5:
05:73:2a:12:2c:ef:5c:9f:73:9e:52:2a:3e:37:a2:
de:6b:20:fa:ca:d6:67:b5:d1:21:61:58:8d:10:4d:
ce:8a:1e:d6:2a:27:bc:73:89:02:45:88:4e:69:0e:
76:e9:67:7c:ad:79:e2:a5:8e:f4:fe:39:6d:a5:79:
93:c4:8c:bf:ac:29:02:2a:6c:3f:22:6b:2a:2c:5d:
91:44:72:fb:19:ba:6e:a0:11:c9:83:e3:b1:53:90:
00:d9:ee:d9:fd:89:f7:b5:c1:d2:c1:d5:5b:13:29:
58:59:f5:f1:e8:33:2d:14:ae:dc:c7:59:9d:84:1b:
19:bf:ea:d8:88:ec:e9:b8:a6:09:96:4d:d6:44:37:
e0:19:bd:04:de:e7:68:aa:33:e1:e3:66:e9:f2:56:
61:03:88:aa:47:cc:51:7e:99:d9:0b:71:1d:1d:75:
f1:1e:9f:51:0a:0b:7f:01:c7:be:4f:53:fb:d2:e0:
bc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E7:39:17:C0:6C:EB:5B:7F:31:70:69:CB:C8:63:7B:83:70:55:87
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5ebd4866-0684-4b8c-b99e-2619b8860886.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.114.0.0/18
Signature Algorithm: sha256WithRSAEncryption
15:6a:3a:88:63:90:71:d5:c8:04:1a:e1:86:ec:6b:61:66:d7:
e4:0e:fe:fd:ab:bf:51:21:5a:87:b6:a2:f1:7b:78:68:3d:0c:
bd:04:1b:a9:af:31:aa:1c:d5:8b:1f:63:a7:ff:05:04:6a:e9:
1a:f8:7e:42:fb:29:c7:39:22:d6:6f:26:af:6e:d8:9f:54:04:
78:81:f1:ea:5a:f2:0d:95:17:1c:b2:8c:1d:1f:40:ed:e1:e1:
41:b7:68:22:0c:c0:00:7e:75:ad:41:26:d0:b0:c5:92:22:1a:
d2:f1:07:0f:18:94:77:ca:16:82:de:67:97:9f:ef:43:44:b8:
66:b7:5f:f3:5f:cc:1e:e5:c7:14:92:4c:2a:fa:62:b6:53:f0:
5e:b7:c1:4b:7d:9d:ac:72:1d:b4:b4:b4:ba:78:a5:ef:09:fa:
55:7d:ef:a7:26:80:f6:d9:e0:1a:5c:4d:37:bd:cc:0f:db:13:
c2:7a:44:e3:fa:07:4f:f7:c4:b8:9c:9b:5c:f1:bd:57:09:16:
7f:1f:a5:8b:6e:97:fc:3e:39:7b:5c:79:a9:ba:8f:9f:ca:b4:
8b:83:58:6e:12:16:15:ba:fe:d6:e4:87:c9:37:8e:97:9f:59:
0c:65:7b:67:d8:e2:1d:b2:4c:94:51:23:98:a1:de:b4:d8:2a:
8e:93:2f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 09:40:32 2026 by rpki-client