
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95d6b79d-170d-43ba-84d5-9278dc2cdd90.roa
File: 95d6b79d-170d-43ba-84d5-9278dc2cdd90.roa (raw, json)
Hash identifier: pBqNyN9K4kHuuL/irkB3BCTa+NIuYmuIC5U42g8mJ6Y=
Subject key identifier: FC:3D:29:41:62:E4:05:AF:F1:01:1F:C7:6B:D7:2B:9E:38:82:A2:9C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4F38C20C86910DEA957D3F54A86E502F3A200A3D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95d6b79d-170d-43ba-84d5-9278dc2cdd90.roa
Signing time: Fri 07 Aug 2026 02:51:38 +0000
ROA not before: Fri 07 Aug 2026 02:51:38 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.119.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:38:c2:0c:86:91:0d:ea:95:7d:3f:54:a8:6e:50:2f:3a:20:0a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 02:51:38 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=02cbf02435c6bf381266667f2f3fc74e15e11f2659a7d938a1bb644c6cdc75b1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:01:57:9e:70:7d:fa:5e:b4:d1:43:5d:f8:
c3:95:ce:dd:5b:16:ae:ff:89:b1:d5:ce:47:6c:c4:
1b:e8:40:85:8e:33:93:42:b5:80:06:2d:55:6b:ae:
6b:ae:07:36:34:c0:24:c2:10:a3:ae:8d:5a:ca:68:
aa:a4:bd:ce:d5:3f:c7:96:d3:3b:55:c9:05:8a:0c:
fb:c0:da:9e:3c:10:2a:78:35:08:1e:b1:4e:33:77:
5f:71:6a:13:bd:5a:3a:2f:ff:9b:df:c6:07:30:64:
30:b8:f8:67:80:e4:4b:dd:2b:4f:24:90:90:57:73:
c6:c8:36:d2:48:05:d5:f0:b3:11:27:f6:25:79:20:
1d:49:73:a2:45:fd:4c:e5:32:66:4b:5b:3f:da:52:
f3:72:7f:b6:80:a8:7e:24:70:17:cb:b0:af:b0:ec:
f1:60:3b:e0:6f:0f:ce:02:ce:15:bc:46:c5:2e:23:
98:97:6f:ba:10:03:66:fe:f3:8e:61:d8:08:99:e6:
d7:23:3a:b8:ba:6e:00:5d:b0:22:19:99:6b:6c:12:
c6:6b:d5:06:4b:4d:7e:f5:02:30:ca:27:92:de:41:
c0:08:77:ea:29:c0:94:73:90:62:b3:35:de:4f:b3:
c2:44:ac:2a:41:1a:59:70:eb:3d:ee:6f:8b:df:74:
8b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:3D:29:41:62:E4:05:AF:F1:01:1F:C7:6B:D7:2B:9E:38:82:A2:9C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/95d6b79d-170d-43ba-84d5-9278dc2cdd90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.119.216.0/21
Signature Algorithm: sha256WithRSAEncryption
61:f5:da:0d:14:9b:50:bd:d9:7d:34:b4:0b:03:b0:a9:eb:f5:
f5:d1:cb:8f:dc:61:3b:86:81:ae:c7:26:7e:2c:40:00:d1:1d:
74:48:ea:48:a3:f6:88:49:7e:fb:dc:8e:f2:4c:f0:fc:81:3a:
65:51:66:34:e1:32:35:e1:0e:c9:75:e2:7a:ca:d5:11:b6:0f:
85:f1:47:f0:f9:9f:13:f3:e5:70:7a:78:73:ee:cf:54:51:ff:
cd:e0:c3:62:08:06:0e:f9:bf:15:26:92:5c:c5:05:b7:2a:4a:
07:d1:ae:25:1e:67:84:2e:2d:85:1f:51:c9:3a:4a:53:77:67:
b6:8f:95:0f:d2:9e:7f:af:a8:be:90:93:c3:39:23:75:8a:48:
a5:d1:b5:c3:48:ee:9d:fc:f2:64:df:c8:40:cb:70:43:eb:03:
6e:e6:a1:d4:fe:04:37:4a:cd:12:c0:30:b9:b6:87:04:9e:fc:
a9:d8:89:4b:52:a4:b5:da:1a:c2:e7:44:f9:ec:d2:0d:be:30:
83:3d:03:3f:fc:c8:54:cc:db:21:4b:ca:2a:70:e0:9c:f6:f9:
66:60:43:8d:86:e7:80:0a:4a:74:7c:8b:5f:fe:cf:7a:eb:f3:
04:bc:1f:8c:55:5f:2d:f6:72:5b:76:95:c3:87:91:3e:47:83:
7d:dc:8d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 08:41:20 2026 by rpki-client