
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d98f209-c6f8-4a8e-82d5-c21fbbb4fa00.roa
File: 8d98f209-c6f8-4a8e-82d5-c21fbbb4fa00.roa (raw, json)
Hash identifier: HcSCxR2WCwKk82pxxp8dzhjjFLnheqKChR+MDhm3KAY=
Subject key identifier: 1C:86:AC:C3:A1:3E:63:A3:FA:69:D1:0A:81:3B:D7:6C:05:09:CC:51
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2B4134B34DE42A40A3CA2E8BE02397150BE6D33B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d98f209-c6f8-4a8e-82d5-c21fbbb4fa00.roa
Signing time: Mon 27 Jul 2026 01:11:46 +0000
ROA not before: Mon 27 Jul 2026 01:11:46 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.177.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:41:34:b3:4d:e4:2a:40:a3:ca:2e:8b:e0:23:97:15:0b:e6:d3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 01:11:46 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=be0b282d04d1bd5270ca9b598f07953ee11e1f88ad24a510e28b48514701b554, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:31:88:08:61:ca:2a:1c:be:b6:02:f7:e9:
e4:18:c2:88:8a:1a:9a:64:9e:3b:62:2b:29:45:b7:
d7:de:75:19:d6:0c:4f:2a:d2:f4:8c:5d:ee:66:19:
8f:63:3e:b4:6c:08:62:4c:73:a4:62:5b:35:41:75:
85:f4:6b:91:ff:71:c5:33:e5:7f:43:cf:64:0d:2f:
19:60:df:ea:1c:94:ee:53:5a:ec:a8:f8:a5:0b:e7:
56:17:5c:57:3d:77:ce:56:6e:a7:78:94:c6:dd:a3:
5c:ec:13:55:2e:ad:ec:9a:71:38:16:a2:8c:bd:b3:
7a:fc:e4:05:72:64:62:cd:99:f5:7e:eb:1b:dd:3c:
b0:7c:a3:85:b1:bf:93:a0:a2:4e:59:b6:2c:73:b5:
e1:57:ec:39:4c:ed:ff:02:72:43:9d:34:5a:9f:93:
9f:ed:7f:10:20:20:5d:ed:42:b8:ef:f3:b9:cd:3d:
95:86:47:c4:b4:a5:a4:89:b7:98:4d:92:b8:8e:e5:
a0:a8:6b:2e:5e:55:25:91:ba:42:be:53:de:fd:40:
53:b3:6c:99:23:21:3a:b7:b1:92:a3:b1:9d:cd:51:
d5:94:66:b8:ba:ec:58:3e:b0:88:18:41:56:97:dd:
b8:cf:1a:04:64:f5:39:e2:34:64:c2:19:25:27:6c:
e8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:86:AC:C3:A1:3E:63:A3:FA:69:D1:0A:81:3B:D7:6C:05:09:CC:51
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d98f209-c6f8-4a8e-82d5-c21fbbb4fa00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.177.98.0/24
Signature Algorithm: sha256WithRSAEncryption
89:9a:ce:93:14:29:78:22:89:9d:83:f5:be:10:fe:5e:9c:41:
dd:e1:31:42:e3:ce:54:b4:9e:22:91:97:b6:c6:f3:db:10:28:
0e:ea:d0:e2:06:e6:a4:44:75:67:32:75:ef:60:9e:83:f6:f6:
0d:d8:bd:8b:70:a6:1d:27:d8:9d:02:46:0d:51:1d:9f:16:a1:
c7:58:bd:df:1b:2e:be:7b:ee:c8:1d:f2:9e:39:46:19:59:33:
6b:b7:8e:a7:20:9b:9d:0e:39:84:74:20:77:ef:19:c3:41:c9:
4e:a9:bb:03:20:a6:b3:a3:fb:3f:04:d5:03:02:74:c2:41:43:
e2:5b:e8:73:39:0e:77:df:f5:84:cd:f2:b5:0e:32:fe:cb:b4:
74:42:1f:a4:0e:26:75:44:6f:3e:a4:cf:12:30:da:9d:c0:0e:
b8:53:f0:84:d5:9c:95:8b:18:c0:2c:85:7c:40:e9:20:7d:1e:
fd:47:3e:0f:d1:04:39:68:c4:e0:4d:7d:e9:12:42:a2:8c:2c:
83:ff:f7:8f:79:3e:00:11:ab:b1:a2:4b:a7:b6:33:13:ba:5a:
db:2b:60:4b:ad:1c:05:8f:43:a8:2f:8e:67:cb:7a:47:c2:2c:
5c:69:08:b8:24:50:aa:0f:bd:a1:30:47:a5:95:8f:d6:de:39:
c8:32:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:40:48 2026 by rpki-client