
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8062c860-88cd-4f61-b357-09296b397b51.roa
File: 8062c860-88cd-4f61-b357-09296b397b51.roa (raw, json)
Hash identifier: mC66wLGRBr16HSuk7OR4sT748l0FMmYkwIjweXdjFMY=
Subject key identifier: 31:9C:C4:12:58:15:E9:C2:6B:E1:06:F2:97:56:30:77:A9:5C:6F:C7
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5E894124F8A96E06EA89A430C072D38835192DF4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8062c860-88cd-4f61-b357-09296b397b51.roa
Signing time: Sat 08 Aug 2026 00:40:38 +0000
ROA not before: Sat 08 Aug 2026 00:40:38 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.102.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:89:41:24:f8:a9:6e:06:ea:89:a4:30:c0:72:d3:88:35:19:2d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 8 00:40:38 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=8503cc8f1bd5565e3974379d99bdf08be6ebabb3f5d5ed91677dbf229d3d3c32, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:67:e7:23:ba:22:d0:32:1f:44:58:4b:09:
b3:3a:a9:11:41:76:f0:be:a2:c8:ff:05:7e:3c:59:
e7:38:12:9e:ef:6f:77:9b:f9:80:59:f9:da:d7:e8:
67:16:9f:6f:1b:3b:23:8f:73:6a:90:76:6b:09:d1:
d5:71:c7:b2:54:33:dc:89:0c:31:9b:dc:78:71:d6:
46:5d:bb:d5:6b:af:8a:9d:bc:8b:92:a4:4f:b6:60:
d4:19:af:01:54:3c:2f:82:38:55:76:cb:b6:08:8a:
1b:41:5b:5b:63:18:69:f7:41:a5:28:f0:3b:2a:9c:
64:9f:2d:b2:72:94:05:fe:b2:db:4e:de:09:aa:9d:
be:26:58:3e:2e:cb:c6:f1:4d:0a:67:ea:6f:f2:45:
db:84:57:23:a0:3e:b6:e1:de:33:5d:59:d5:5b:23:
21:80:2c:78:99:d4:b4:7f:bd:56:c4:ef:1f:82:e4:
f6:a6:15:e7:c7:42:51:59:78:74:20:85:63:c0:b6:
05:8f:9a:5d:ba:dc:90:8e:f0:cf:f3:8d:42:82:72:
6b:91:1b:3b:6d:ff:24:0f:53:e1:10:80:f3:b8:40:
e8:26:9a:7d:9f:d5:f0:c4:9a:86:0a:23:2a:a6:24:
d9:76:3e:48:71:a8:32:e3:2f:47:98:34:ab:8e:59:
13:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9C:C4:12:58:15:E9:C2:6B:E1:06:F2:97:56:30:77:A9:5C:6F:C7
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8062c860-88cd-4f61-b357-09296b397b51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.102.52.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f4:3c:75:e1:d9:59:96:9a:3f:73:8b:a9:e0:f4:c2:1e:81:
2e:df:e1:78:2f:d1:02:57:ed:bd:18:62:e9:d3:eb:eb:ab:ee:
ef:71:e5:71:db:b4:d2:b9:9f:cf:a0:3c:87:3e:7f:38:ad:c3:
7d:ae:01:58:d4:2b:be:b8:9d:cb:69:13:d4:21:24:46:61:8d:
3b:8b:a6:c0:61:6e:ba:d6:46:82:5f:5f:9d:f9:5f:d1:30:ad:
49:e2:31:8e:80:df:ec:53:93:de:e8:b4:9d:0c:8e:8d:f8:ed:
7c:cb:9f:e8:c1:9b:47:23:bf:b1:ff:a4:f8:9a:a2:46:bd:52:
fc:46:15:51:85:26:32:d1:18:96:0f:21:30:4d:bf:dd:e6:82:
1e:6d:49:d0:a1:dd:b7:55:1b:c0:3d:a8:e7:02:9c:53:db:08:
0e:a2:4e:af:1a:53:77:1d:90:ea:aa:99:0c:49:3b:b5:ad:b5:
63:0f:0f:8b:35:54:4e:ec:ca:9b:20:d5:20:d7:fb:07:a5:e3:
c3:af:ac:19:1f:fd:ff:0d:3c:c2:8e:88:f4:38:8f:ce:4e:7c:
06:e2:93:6d:c1:f8:6b:e0:bc:87:fb:e9:7b:b2:1b:c8:17:bf:
69:c5:c3:25:f0:54:58:a7:2d:e0:93:cf:dc:82:b3:83:e7:5c:
28:eb:27:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:44:06 2026 by rpki-client