
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d54f6ca-1175-4454-9f47-f101ffa12e6d.roa
File: 6d54f6ca-1175-4454-9f47-f101ffa12e6d.roa (raw, json)
Hash identifier: dQu31m664wBhP5qdxr3eESJpHmcf1ovH7FXmt7NfUH0=
Subject key identifier: F0:9A:B6:1F:3A:3B:EC:40:FB:91:1E:BB:C0:88:ED:B8:97:44:77:B0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 332A5F65997820958CBC54DC3F21C331ACAB36DF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d54f6ca-1175-4454-9f47-f101ffa12e6d.roa
Signing time: Mon 27 Jul 2026 02:40:45 +0000
ROA not before: Mon 27 Jul 2026 02:40:45 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.88.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:2a:5f:65:99:78:20:95:8c:bc:54:dc:3f:21:c3:31:ac:ab:36:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 02:40:45 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=7141e3a9fb2fe2d676ea1a06fe4eb71fe5d61dec27c50ef138c0032608bfc4a9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:9b:ba:dd:72:5e:c0:10:bd:d3:27:24:ba:
f6:df:8c:8e:c2:66:ec:e5:1a:1c:00:bb:c0:66:76:
91:09:88:ec:b3:ab:2a:18:8f:b1:38:95:ad:de:d5:
62:c9:a2:1c:a8:f1:5d:31:44:eb:02:7d:10:cb:f8:
7c:11:ca:28:c5:3e:17:4d:7d:17:b8:f6:d8:a5:d6:
3a:01:f1:c2:c8:4c:8d:8b:05:1c:33:b5:16:f1:0b:
96:3c:75:44:cb:37:3a:75:c7:fa:f8:d2:35:b8:7a:
70:20:4f:c3:ed:e5:74:e5:0b:a8:26:47:99:5c:d4:
6a:c1:dc:52:1f:1b:90:af:05:bf:95:64:ea:57:b5:
a9:a7:d2:af:56:af:2d:f0:95:11:0c:28:28:12:eb:
25:ba:8c:e1:a1:89:94:ed:b2:2c:97:11:5f:1f:a8:
d4:7b:97:09:0a:95:51:a3:6e:54:be:85:40:2b:93:
c7:53:91:e2:85:cb:4d:77:c1:ea:67:36:3d:43:f4:
e1:48:71:f1:ca:8a:f5:53:1b:48:21:67:15:9a:21:
38:7a:57:f5:a1:ce:23:b0:74:14:04:ba:25:f2:35:
46:30:43:3e:b9:58:e6:d0:7e:f6:5f:a2:2b:71:53:
84:c9:d6:43:39:bc:34:b9:f9:38:71:3f:26:11:53:
29:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9A:B6:1F:3A:3B:EC:40:FB:91:1E:BB:C0:88:ED:B8:97:44:77:B0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d54f6ca-1175-4454-9f47-f101ffa12e6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.88.0.0/19
Signature Algorithm: sha256WithRSAEncryption
58:b4:d7:83:d0:99:7d:21:5d:da:b7:f6:08:5c:6d:21:94:03:
70:d4:48:9c:c0:3a:f7:e2:c0:87:cd:09:a6:83:18:46:cd:93:
68:84:0d:2f:3c:37:df:66:75:bb:3c:f7:98:d0:22:b5:8d:aa:
5c:bd:e2:30:53:3a:14:08:fc:9b:35:f8:b7:66:f2:bb:fc:d7:
20:89:ce:58:c1:fc:d2:ab:ed:7b:26:0d:ea:10:a5:d8:5a:39:
57:63:ab:09:1a:ca:54:ea:76:5b:d9:ec:99:4f:46:24:76:d1:
76:b6:29:80:cc:a7:40:49:6a:cf:96:3e:46:31:6e:b4:6c:43:
f0:e3:da:a1:65:68:d9:65:e8:c8:6f:cb:5e:ab:55:a9:32:0a:
c2:7f:ed:6c:27:b2:aa:f8:a0:b6:a1:5c:fe:1b:97:c9:f0:b1:
1d:09:1e:b8:b9:53:e0:98:9a:56:67:d1:bf:90:e9:77:f8:c4:
16:a8:de:ba:be:af:6d:dd:a3:b7:6a:a2:c7:f7:e6:e8:48:d9:
c5:3f:d7:2a:93:c3:25:bc:29:15:df:49:93:58:2f:8f:da:09:
6c:1b:a7:08:ab:2e:83:f5:87:96:85:34:f2:18:70:4e:64:6a:
e6:cc:3a:4e:75:3d:fa:d4:5d:f3:78:36:e1:2a:f1:e6:e5:68:
4c:00:5d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 13:44:15 2026 by rpki-client