
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61940442-21b4-4cde-8d39-e5c3216b1372.roa
File: 61940442-21b4-4cde-8d39-e5c3216b1372.roa (raw, json)
Hash identifier: jVL9pbI4Myo5UEyiFr4RPfuhdxdVg4dtRE+lWy6VVOc=
Subject key identifier: 4D:C3:2B:8C:33:D7:7F:89:18:64:DB:61:EC:F9:63:C0:A2:AE:05:01
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 251881EEC78B64BC8C802D1F5A71C1239B3D5255
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61940442-21b4-4cde-8d39-e5c3216b1372.roa
Signing time: Fri 24 Jul 2026 01:10:40 +0000
ROA not before: Fri 24 Jul 2026 01:10:40 +0000
ROA not after: Thu 22 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.177.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:18:81:ee:c7:8b:64:bc:8c:80:2d:1f:5a:71:c1:23:9b:3d:52:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 24 01:10:40 2026 GMT
Not After : Oct 22 23:59:59 2026 GMT
Subject: serialNumber=321733d46e12eb150b6055fb50d530e2db7353bd88fae4e107ed0b07668662bf, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6a:08:5d:81:26:e9:21:79:c2:10:5e:2c:b3:
8c:0d:c0:8a:e3:47:9c:bd:21:00:23:4d:f2:bb:25:
5e:47:95:38:8d:64:51:af:af:d7:b7:5c:83:5f:06:
8a:80:7d:46:b9:38:7f:7c:32:cc:ab:97:62:e4:88:
50:04:22:72:a3:29:9d:51:69:e5:86:f5:b3:1d:2e:
74:33:fd:01:c5:bb:4f:fb:5f:f5:55:33:58:7b:c6:
35:3c:96:3d:76:d8:dc:b6:57:2e:bc:53:07:c3:3e:
99:bd:8c:d2:32:46:e8:02:16:b1:d6:11:e2:7a:94:
f6:21:54:be:c6:0d:1b:a4:18:38:6b:a9:1e:b2:c3:
5d:90:da:d9:47:2f:df:ab:ce:9c:87:dd:e5:e5:24:
35:0c:52:0b:bf:04:54:16:85:c4:5a:23:49:bd:4d:
b2:6b:4b:ac:87:db:a5:11:60:9b:99:60:63:97:27:
a7:2c:1f:02:6b:84:8f:13:95:dc:fb:a8:dd:82:a2:
ef:30:4c:e1:e5:9b:ea:15:55:79:05:c8:fe:71:2d:
c9:15:46:c8:b4:da:1b:d7:15:e2:f0:8b:14:52:e2:
05:d2:85:a2:0f:e5:83:26:f9:ba:92:43:d8:06:69:
60:06:e4:d0:16:11:e8:11:90:9c:e4:b1:da:5a:5e:
7d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C3:2B:8C:33:D7:7F:89:18:64:DB:61:EC:F9:63:C0:A2:AE:05:01
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/61940442-21b4-4cde-8d39-e5c3216b1372.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.177.40.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:bc:2f:9b:4a:e6:cc:a6:06:13:b7:b2:51:1d:39:eb:63:3c:
9a:b9:20:35:d8:58:32:40:1b:54:e8:c1:c3:e0:7b:c4:ef:ae:
c7:f0:2a:eb:eb:c0:59:4b:cd:a0:7c:d3:c8:57:73:5e:00:bf:
d1:61:ca:a7:bd:73:2b:81:64:e9:1e:99:9c:e5:e8:af:98:0d:
b4:94:1a:48:7a:c7:f0:37:51:d2:b9:d6:fa:89:a9:87:53:1b:
dc:45:d4:f8:13:8c:6f:53:82:99:5d:46:12:f7:01:11:3a:bd:
9c:1f:98:98:92:49:7f:82:9b:39:e4:97:6b:9a:b1:81:0c:34:
e0:1c:01:bf:8b:26:fa:86:44:35:0c:71:ad:a0:2d:36:c6:7b:
73:ae:cf:05:e7:f9:ea:6c:2d:52:49:cd:09:72:e0:94:79:f3:
fc:fe:e4:88:3f:7b:67:29:29:23:43:36:b0:f7:7a:68:fe:66:
4d:75:79:43:86:4c:81:66:90:72:f8:06:36:53:03:09:7b:a0:
83:63:31:a7:d0:ac:17:8c:c9:9f:7a:77:13:22:fb:81:5a:76:
98:bf:b2:86:a9:cd:56:62:4e:3b:e8:61:69:69:38:25:0b:cd:
80:11:c8:e5:42:72:cf:a2:4e:10:d9:ed:77:88:52:07:4c:1f:
9c:d2:06:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 08:43:08 2026 by rpki-client