
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d14ed34-613c-490b-9514-4f4d19486a18.roa
File: 6d14ed34-613c-490b-9514-4f4d19486a18.roa (raw, json)
Hash identifier: s3MsCOMSiOoUsUXDWBxwBAwQoV0T/NDuqz5wPPR1lrE=
Subject key identifier: 17:BF:9F:A1:9A:47:D8:9D:C1:30:29:9E:20:57:B6:63:AE:44:62:EA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 14CC161A3BA99F5C00FCF7289BE59B38DACEC75B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d14ed34-613c-490b-9514-4f4d19486a18.roa
Signing time: Mon 27 Jul 2026 02:11:21 +0000
ROA not before: Mon 27 Jul 2026 02:11:21 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.70.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:cc:16:1a:3b:a9:9f:5c:00:fc:f7:28:9b:e5:9b:38:da:ce:c7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 02:11:21 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=a1b3741697e2ffa36dd710fc84399e572ae04b97feeeb7e1635022179cccfac0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:95:67:38:77:6b:fa:85:d2:15:37:bd:2f:85:
26:41:86:7c:27:af:19:1b:2d:f4:8a:07:66:53:47:
9f:8d:ca:3a:41:1e:d0:77:be:41:ad:a6:30:f9:36:
c5:47:a8:ab:3f:8b:70:b6:9e:04:9f:ad:0d:6a:41:
75:86:0a:df:75:c2:98:e6:88:40:3a:aa:b0:dc:a4:
55:b1:8c:51:5c:fc:23:af:24:36:fa:41:58:f6:3b:
56:41:bb:05:03:00:c4:2d:db:c7:a2:11:91:a3:25:
37:fe:61:72:1e:bd:8b:21:9e:29:ce:93:6a:21:49:
3f:20:13:e5:72:b3:29:5b:37:6d:22:0f:e1:f4:79:
0e:a5:d9:30:1b:39:66:2c:43:84:67:58:69:85:8d:
bd:57:4d:cd:5b:cf:94:8b:16:8f:cf:d4:8c:ce:da:
c0:cc:ea:99:42:06:ee:38:4c:57:d7:46:47:f8:9f:
5d:31:b3:da:a8:2b:ca:3b:a5:2e:f6:0a:fc:f8:71:
ae:fa:cc:23:b1:e2:00:ba:75:10:d9:bb:2e:6a:e7:
cd:d8:7f:61:65:0d:aa:81:88:34:1f:7c:12:5d:77:
d6:3e:32:79:06:8f:72:34:36:03:54:b2:59:73:fa:
a5:bb:b8:e1:d5:3e:c7:89:3b:bc:ec:02:fb:89:0f:
17:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BF:9F:A1:9A:47:D8:9D:C1:30:29:9E:20:57:B6:63:AE:44:62:EA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d14ed34-613c-490b-9514-4f4d19486a18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.70.0.0/15
Signature Algorithm: sha256WithRSAEncryption
8b:86:0f:1f:15:e6:6f:f8:1d:68:96:22:3f:0f:a6:58:d9:ff:
9b:e8:45:9f:bf:b1:2a:ff:eb:d6:74:a6:4a:4d:f3:e9:01:1c:
bd:40:eb:e4:b1:34:06:34:6e:47:81:e1:c7:14:42:5d:6b:5e:
64:8a:cf:85:cb:2b:ce:7d:0a:46:1e:61:c8:c5:ed:32:4a:e1:
37:9d:8e:29:a7:0b:ff:58:d3:3f:3c:ef:58:6e:50:ce:69:99:
dc:72:7b:bb:3c:2b:8d:23:e9:7e:22:59:1b:4a:1b:cc:3f:9a:
b9:39:5f:3f:33:7f:e3:6d:34:24:1f:ec:de:92:f3:3a:f0:d3:
60:ad:6b:3e:63:e5:12:16:98:be:4b:e0:8f:c2:b8:45:28:70:
77:e4:d0:bf:ce:59:1d:b5:64:bb:2d:52:9f:97:5d:92:11:c2:
75:e2:b6:72:d8:f8:51:8f:3a:0b:03:b9:74:ea:f9:4d:4f:e2:
87:8a:30:e7:71:cc:bc:1a:22:2a:08:e7:ba:0e:98:52:aa:77:
36:95:71:90:4c:77:6a:8c:14:91:7a:82:9a:6c:b5:1d:75:6f:
e9:06:80:b4:24:46:5f:26:97:64:3d:7b:a4:aa:00:e2:c1:61:
97:f0:a3:4d:15:73:79:1c:8f:0b:11:56:a7:d5:a9:22:09:73:
d7:93:82:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 09:37:12 2026 by rpki-client