
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6bd5e2bd-8dcd-4859-9c38-7a53a8465f14.roa
File: 6bd5e2bd-8dcd-4859-9c38-7a53a8465f14.roa (raw, json)
Hash identifier: Zdjq4a4uYY4rmTHPQlMPe5+OIV3wrAvaLvSwo7sMWbg=
Subject key identifier: B2:A7:CE:5C:0A:A9:34:4F:B6:CA:46:19:06:0E:80:59:12:3B:4D:1E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3FACE00A5A7B7F020C60015FE88FA8B1718194B9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6bd5e2bd-8dcd-4859-9c38-7a53a8465f14.roa
Signing time: Fri 07 Aug 2026 01:31:13 +0000
ROA not before: Fri 07 Aug 2026 01:31:13 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 158.221.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:ac:e0:0a:5a:7b:7f:02:0c:60:01:5f:e8:8f:a8:b1:71:81:94:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 01:31:13 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=132e5e3a68bfa949f8aaf58e90d57dd1bbdea9d49f6916b9589d9d32cacec9e2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:57:9b:08:26:d6:4f:73:4e:fb:26:3d:0c:
de:54:52:de:e2:3b:dd:7a:6c:d3:a2:35:ab:65:61:
c7:6e:c2:65:48:07:a9:cc:b0:2f:cb:80:85:24:ee:
81:7c:09:09:c0:aa:12:48:e5:2b:dd:51:b0:c0:ee:
04:99:d2:8e:97:90:ec:22:12:0d:dc:72:7b:5f:cf:
c7:b0:35:0c:93:bd:fb:d9:bb:48:0b:cd:41:fd:b0:
23:69:c0:66:1c:6c:a5:5a:6c:25:fa:cd:a8:86:fe:
b2:b6:2c:2e:3a:f1:fe:65:aa:be:40:d8:b2:d9:e6:
6e:75:05:7f:24:42:8d:0f:ef:b2:60:e1:dd:1b:b8:
8a:2d:7c:9d:d0:d1:4f:99:66:00:98:a4:37:03:0d:
7b:88:2f:ac:18:2d:e1:d6:5c:05:36:e5:fc:a4:56:
ca:fd:86:22:57:35:27:8d:0f:10:ab:7d:56:4b:73:
32:04:bf:14:f9:13:99:2b:f4:41:fe:1d:e7:8c:c1:
87:c9:ba:53:4e:5a:67:75:26:0d:5d:1c:7b:f8:a1:
fb:67:59:11:be:d1:16:50:86:09:d1:a8:cb:5a:3b:
29:ea:32:10:76:d9:82:d9:36:c6:de:5d:65:6a:ae:
70:50:b4:95:8a:e8:1e:6e:7f:f2:df:a4:e1:a6:cb:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A7:CE:5C:0A:A9:34:4F:B6:CA:46:19:06:0E:80:59:12:3B:4D:1E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6bd5e2bd-8dcd-4859-9c38-7a53a8465f14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.221.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:bc:fc:de:7b:12:5e:02:90:33:45:1d:17:d8:3b:30:b2:e8:
5f:8c:48:ec:ad:fa:b4:93:4f:60:1f:76:1b:83:0a:e8:d4:c0:
01:dd:cc:8e:d2:ab:01:1e:47:31:65:f8:8d:5b:da:ab:9c:a3:
56:b0:b7:3a:71:f6:72:36:d3:f4:10:23:d7:fa:c5:41:92:91:
f5:15:d5:1b:9e:95:97:69:f9:a6:cc:62:3c:b5:33:92:20:81:
0a:50:fc:f3:83:24:6c:47:75:a9:09:3e:c0:87:7b:97:88:6d:
fd:5b:2f:17:ac:2e:74:07:d0:c1:c2:69:c5:d7:86:99:bd:df:
01:9c:4a:d3:e7:27:9f:9a:18:c2:bb:9f:9a:6f:a9:62:54:44:
d3:65:02:14:bc:09:55:aa:6d:86:6e:c3:ea:4f:8b:ba:49:49:
66:73:09:f7:b6:8a:a5:20:36:68:5c:7c:0d:ef:68:cc:fe:22:
56:27:b3:f5:72:e9:5e:2b:3f:fe:82:a7:6e:f1:a7:e7:32:a0:
6f:2b:48:63:2f:d3:8a:30:b2:5c:b3:7d:d4:4e:cd:0a:2e:08:
df:8e:4c:ae:f6:b2:17:7a:73:0e:14:ef:22:b1:5a:c5:2f:10:
4e:8a:26:a3:fe:ee:e4:8b:0f:a4:7b:73:fd:72:8c:69:55:ae:
8b:4f:57:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 12:12:46 2026 by rpki-client