
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/667cce7c-f6ee-42a8-93fc-00c115087f86.roa
File: 667cce7c-f6ee-42a8-93fc-00c115087f86.roa (raw, json)
Hash identifier: jeyS9p4bb1mHWFqhmlVqiueNZikxks/6TsOJTQSlUjc=
Subject key identifier: EC:B9:F0:08:B4:A8:EA:89:85:3D:24:A0:DE:7B:A1:3D:B3:00:8B:A9
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5E353DE484DE7E65E92B9E134D217FE2AA48370D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/667cce7c-f6ee-42a8-93fc-00c115087f86.roa
Signing time: Mon 27 Jul 2026 01:00:10 +0000
ROA not before: Mon 27 Jul 2026 01:00:10 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 34.255.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:35:3d:e4:84:de:7e:65:e9:2b:9e:13:4d:21:7f:e2:aa:48:37:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 01:00:10 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=e1bf6afb9dab7d3f27dac9c3e3a471b5ba0cb20b7f0b8d367ca1a3859e094412, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:73:1a:78:2a:4e:55:6c:4a:e9:61:2d:51:
b5:31:d1:08:6f:64:65:6f:12:68:42:69:48:d5:52:
c3:07:b2:c5:d7:79:3f:af:1a:0b:2b:4e:d3:d9:d8:
8a:47:e9:23:41:a4:a3:27:ce:fb:07:ee:36:fc:e3:
df:3b:68:56:37:e7:58:a8:67:e3:78:00:a0:c3:39:
8e:53:0a:0b:09:1a:67:0e:87:e2:02:f8:ec:16:36:
13:b7:9b:a4:9f:87:20:95:08:c5:86:fc:06:a3:81:
65:80:14:7c:99:f8:93:a6:0a:2c:bb:3c:32:be:96:
14:d9:cd:8b:d6:9b:e3:fa:51:34:08:21:22:f7:f6:
8b:0e:6c:f9:4b:c5:09:5d:7f:27:3b:30:29:cf:c4:
06:c8:7b:0c:86:0a:ed:c0:7d:bf:e9:60:b8:a7:c1:
f0:82:83:34:3f:ee:3e:07:c4:9d:fd:67:8a:7e:c5:
ef:32:a9:6b:21:1e:7b:ea:44:1e:d9:1e:cb:98:2d:
1e:2f:55:cd:cd:13:aa:21:60:2d:a5:ab:53:03:2b:
39:33:c8:59:34:9f:34:df:6e:95:9e:b7:43:00:ca:
49:8a:42:5f:96:3b:ac:6a:37:ed:c2:5e:f1:67:ef:
cf:e1:c3:57:d3:e1:72:68:a9:4a:7b:63:16:ee:e0:
9c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B9:F0:08:B4:A8:EA:89:85:3D:24:A0:DE:7B:A1:3D:B3:00:8B:A9
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/667cce7c-f6ee-42a8-93fc-00c115087f86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
34.255.0.0/18
Signature Algorithm: sha256WithRSAEncryption
8e:36:ed:73:f0:b9:f4:07:4a:98:12:a3:df:7c:ce:ed:be:ae:
3b:86:be:ff:69:a6:0c:1d:db:58:be:8b:e9:72:a0:1e:0a:e2:
46:88:76:d5:13:16:54:78:bd:dd:ee:38:7b:31:de:ac:e4:f1:
ed:24:ca:31:a9:2a:cf:ff:89:cb:fc:17:00:13:cb:4a:4c:4c:
a3:62:a8:04:17:92:ea:c5:2d:c0:60:0a:d0:6e:12:c1:d9:38:
ea:e2:f8:1f:ad:41:1a:37:e6:30:4a:9c:48:a9:f5:77:e5:52:
87:7a:c3:25:d3:85:6c:9b:50:cc:47:66:4e:1f:20:5c:ab:3e:
34:ee:79:00:16:77:80:bb:be:1c:6b:20:1d:c8:67:7c:07:68:
1f:21:c2:e8:27:d5:86:3e:8e:ec:f2:76:c8:89:49:19:55:cc:
07:3f:c9:dc:d0:68:46:83:d8:66:b2:9b:b5:39:05:1e:95:70:
5f:32:72:b8:13:60:84:29:fc:34:4e:54:83:29:a9:44:fb:e3:
8c:07:ca:b9:c6:c5:c9:62:83:d7:a3:2e:7b:84:68:b6:ee:5f:
0d:9f:d6:18:b0:15:69:20:17:e6:2a:3b:c5:3e:99:21:47:44:
b9:01:b9:61:1f:8e:f8:3b:7b:fb:2d:96:fd:23:37:23:2e:57:
9e:8a:49:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 09:40:26 2026 by rpki-client