
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8eb2a469-e3ab-4902-8d79-5582b02afc12.roa
File: 8eb2a469-e3ab-4902-8d79-5582b02afc12.roa (raw, json)
Hash identifier: cmvtPaJYRhLFzymgpStc+Ou20zpJUoVTAvsUQ/Bzuro=
Subject key identifier: 0A:FD:7C:BB:02:D4:3E:A7:D1:1D:0D:23:FB:75:4F:1E:7E:12:21:EF
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 50488CBEA944950E4C1DFE8D1A56FB196B314E41
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8eb2a469-e3ab-4902-8d79-5582b02afc12.roa
Signing time: Thu 14 May 2026 01:20:07 +0000
ROA not before: Thu 14 May 2026 01:20:07 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.68.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:48:8c:be:a9:44:95:0e:4c:1d:fe:8d:1a:56:fb:19:6b:31:4e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 14 01:20:07 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=a4a5f1badefa6f4b00a423f6b71b41b7148c80746c64f37f131618bdd62c1760, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:ad:ac:54:97:9c:e5:b1:cb:87:3b:89:fe:
2d:7a:19:e5:fa:27:26:d6:ff:4b:ef:76:cf:47:2f:
3a:a5:e0:82:e4:83:70:55:63:c6:27:0e:70:f8:5c:
e5:b5:c2:9f:2a:e8:e6:17:c1:0a:f2:30:4f:7d:6f:
7f:cc:30:8f:f8:a2:bc:62:41:14:f7:4d:af:9f:11:
63:99:9b:23:1b:30:37:e1:e6:5c:94:28:76:bb:b0:
d4:8b:26:1a:27:76:66:ca:15:eb:44:46:a1:fa:97:
14:d1:f6:c3:f0:48:c2:b4:cb:af:72:ff:dd:61:37:
b9:b3:11:2e:cf:4a:c9:fe:b5:06:bd:ce:b3:9c:58:
20:6a:e4:4f:ae:19:7a:c0:b0:48:94:f7:c2:ab:c9:
17:dc:b0:87:37:bd:1d:1d:70:7e:06:d5:c9:90:c5:
6d:a3:b0:96:d4:66:2f:5f:0b:b6:79:e8:be:3f:fb:
f1:53:92:bc:89:54:ab:e2:bd:33:98:d9:93:e1:d5:
ec:6e:1a:30:96:71:aa:cd:08:c0:ee:10:04:a1:c1:
7f:8b:9e:5c:8f:7a:2f:07:ff:28:6b:5a:a5:20:47:
5b:25:7d:a2:9a:16:9c:83:e1:54:21:2c:44:6f:14:
5d:ef:0a:cc:25:52:95:5b:e7:eb:28:33:de:82:b9:
67:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FD:7C:BB:02:D4:3E:A7:D1:1D:0D:23:FB:75:4F:1E:7E:12:21:EF
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8eb2a469-e3ab-4902-8d79-5582b02afc12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.68.193.0/24
Signature Algorithm: sha256WithRSAEncryption
02:77:61:b5:f9:60:21:cf:da:92:b0:35:14:47:56:33:e5:be:
21:2f:4d:41:63:88:67:37:89:66:64:aa:32:9f:a8:47:f9:0c:
55:79:de:8f:5a:fe:98:d4:6e:cc:85:d7:b1:97:db:9f:51:96:
96:56:92:72:95:90:f9:48:25:f9:77:39:8a:2a:7c:1e:50:a4:
ff:fd:5c:0a:2f:d5:61:dc:e5:0c:1d:c5:8f:9d:7e:45:be:cc:
8f:00:a2:91:e4:7d:69:75:c7:ba:d9:d6:b4:58:df:ad:c0:a4:
e2:7c:7a:04:48:e5:7d:fc:43:c4:ca:5c:b1:2b:d8:d8:b0:84:
47:c2:5c:26:be:bd:64:4e:64:40:23:64:f1:9a:71:46:00:50:
bb:15:d5:57:de:1f:16:59:92:e9:64:ff:e8:0d:36:b9:16:32:
33:7a:8b:3b:b7:d3:68:65:ef:54:dc:f5:83:98:f6:19:74:47:
73:ed:40:f1:02:a1:77:0a:21:9f:e0:8b:24:db:26:7e:d4:06:
0d:b6:c5:0a:ac:0b:3d:71:9e:ba:9a:26:68:21:2b:53:a1:95:
33:d3:93:2d:8b:2f:d8:3a:7a:bb:b9:72:9a:8f:77:5c:39:da:
7d:2e:23:5e:44:b1:ba:85:47:92:29:98:09:7b:00:4d:04:b1:
cf:65:16:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:46:14 2026 by rpki-client