
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/64cd88e8-4e44-4da5-aa79-733001c5da74.roa
File: 64cd88e8-4e44-4da5-aa79-733001c5da74.roa (raw, json)
Hash identifier: bI/LMuod7/OkJ/SgbGcDTK1CyNzHBDSAhY2qUORgqUU=
Subject key identifier: 95:3C:A6:5D:31:0D:A4:DE:AC:75:37:64:77:47:DB:7E:E9:49:1C:35
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 52354F5E8E4840CB61B2DAF711640DAB110422E1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/64cd88e8-4e44-4da5-aa79-733001c5da74.roa
Signing time: Thu 14 May 2026 00:30:52 +0000
ROA not before: Thu 14 May 2026 00:30:52 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.124.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:35:4f:5e:8e:48:40:cb:61:b2:da:f7:11:64:0d:ab:11:04:22:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 14 00:30:52 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=12eb4704a8ccbc5b586ac2add90c719dd4832d96fb8e1c0e50ea0a069d86c242, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:3c:1d:1b:ab:07:8c:4c:a3:4b:74:e9:35:
93:d2:34:7f:fb:4b:0e:8f:b3:16:84:c3:7c:fa:dd:
d6:95:5e:e3:3f:c4:e1:a6:61:fc:21:aa:43:4c:67:
c3:ff:dc:fc:ff:ad:c0:b5:d9:9c:93:d3:95:bf:59:
69:3b:64:b9:87:d9:16:a3:44:2b:2b:1d:39:32:2f:
64:a9:90:15:83:19:76:aa:f2:e3:99:df:08:d7:9a:
9e:fe:00:e2:38:0a:a2:97:5d:97:f4:ff:14:bb:53:
bb:26:c2:f9:4a:76:92:16:11:44:91:00:ef:61:dd:
c9:55:ba:64:28:45:62:20:be:06:50:13:dc:75:bc:
59:50:0c:92:10:b4:70:81:19:3a:5e:c2:6a:bd:85:
fc:81:6d:49:c6:74:fe:9a:7f:cc:5e:7b:a4:db:e2:
9c:8e:2d:f1:84:5b:09:9d:71:54:f6:a9:9b:2f:14:
08:99:5d:8f:af:db:8b:c9:c1:54:77:10:97:cd:d8:
1e:7a:95:62:f5:c5:9a:84:81:59:c9:93:38:c9:9a:
73:89:8c:2d:9d:9d:27:a2:71:a3:96:d0:e4:5a:76:
88:06:2c:d2:1c:3d:83:2b:d1:00:a8:a1:85:b8:d2:
7e:6d:41:dd:0d:13:54:ef:61:0a:05:06:49:0f:92:
96:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3C:A6:5D:31:0D:A4:DE:AC:75:37:64:77:47:DB:7E:E9:49:1C:35
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/64cd88e8-4e44-4da5-aa79-733001c5da74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.124.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:9b:00:f8:f2:3b:cc:8f:64:9e:a9:96:72:91:44:f6:fb:7d:
18:c5:40:79:85:01:82:fe:fa:2e:c6:af:6c:62:66:00:cf:45:
08:58:e1:b0:e9:03:dc:88:df:0f:a0:e6:26:a6:71:a3:46:2c:
31:22:21:83:c8:3f:51:54:3d:18:c5:f1:6c:fe:e1:c2:20:ae:
0b:ce:17:f3:fc:19:9f:d6:39:38:5c:c2:21:dc:6e:b4:1b:97:
af:20:db:d6:29:97:db:f8:a9:e5:de:e5:06:d6:63:19:78:a9:
0c:ce:e7:d3:96:8f:32:7e:f2:6a:e5:b6:ed:f6:20:12:50:2e:
f2:30:05:b5:e6:e3:71:6d:3c:3e:23:a7:7a:e9:84:3b:1d:b7:
f7:62:22:18:c3:ec:1c:51:6a:92:90:5e:7e:42:50:8f:dd:7f:
d7:16:a0:6c:55:4e:a9:b9:da:52:d7:fa:ee:2c:7e:c3:80:00:
d3:17:d2:40:a9:54:58:9d:ad:1c:a0:f1:17:12:27:06:a4:f8:
94:e1:fc:38:7b:be:13:59:6a:57:31:cc:87:6b:0c:6e:15:da:
92:6f:6a:09:d9:2d:88:bf:c1:c6:f8:86:1a:f5:8d:4b:9f:5e:
dc:4d:df:4b:29:8e:7c:61:48:e0:ea:7e:29:66:13:2a:2d:c6:
90:73:da:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:46:51 2026 by rpki-client