
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97311007-c15d-4d81-b4bc-712e14568104.roa
File: 97311007-c15d-4d81-b4bc-712e14568104.roa (raw, json)
Hash identifier: 49Xx/UYHGNdxnBREHOu3jPRHCJbl9X4b8TcBGjjcvR8=
Subject key identifier: EE:BF:A3:68:2E:3F:68:81:89:FA:BF:6E:DE:DA:2D:8B:F5:33:AE:CA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 13A1E17B04628887F31F8F33FB13437DFBF8A5F5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97311007-c15d-4d81-b4bc-712e14568104.roa
Signing time: Sun 17 May 2026 01:31:15 +0000
ROA not before: Sun 17 May 2026 01:31:15 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 31 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:a1:e1:7b:04:62:88:87:f3:1f:8f:33:fb:13:43:7d:fb:f8:a5:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 17 01:31:15 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=8580e398ceb192506a11dea8eb6ad93b8284ad89b8a1cd5381aeb5b2c1223f46, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:a9:48:99:d6:60:c5:2b:28:4f:7a:74:6c:
68:95:04:eb:10:70:13:2f:d4:1f:e9:c2:4d:47:05:
22:fe:55:c6:61:1d:47:8c:86:55:51:11:58:ce:d4:
75:8a:a7:bd:44:47:19:8e:f6:80:38:79:61:0c:08:
5e:cd:9e:c1:41:ae:6f:af:72:71:7a:4a:74:0e:b0:
62:1b:11:8d:f6:46:9c:b3:d3:08:c3:c9:47:f4:d1:
1e:1f:79:e8:61:89:be:b9:c3:2b:9c:c1:c8:ce:c1:
94:21:f9:42:14:b0:07:d9:0c:a6:01:53:9b:ea:a0:
c4:5a:03:e1:b4:47:08:0a:86:4f:c1:c2:41:bf:71:
ac:03:41:e3:27:34:67:cb:14:e4:97:f5:c0:42:e7:
a6:a6:11:7d:1b:87:ec:af:5d:2d:9f:df:bf:84:c5:
72:b0:74:19:d0:c6:37:2e:88:43:29:0b:4d:fd:21:
1b:61:d9:39:03:7a:9f:c3:e4:17:d0:50:b5:88:f0:
81:3e:9a:f1:1a:31:90:59:34:ee:c8:1e:e3:23:08:
4e:79:4d:fd:7c:6f:d4:d9:30:71:42:51:07:b3:ea:
aa:f5:46:26:4d:5f:07:a7:75:ac:4f:e9:28:f2:71:
4f:28:01:14:e3:9c:d0:f8:29:fc:8f:1c:67:af:bd:
8a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BF:A3:68:2E:3F:68:81:89:FA:BF:6E:DE:DA:2D:8B:F5:33:AE:CA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97311007-c15d-4d81-b4bc-712e14568104.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.2.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a5:0d:7f:c7:c3:60:5e:e5:97:05:bd:64:60:5f:28:0f:44:
93:78:1c:61:41:b6:88:3e:c6:1b:a7:88:1b:d6:f1:59:8e:d2:
3c:20:2d:57:70:27:70:f3:19:47:a6:ce:60:a8:53:ad:0c:0a:
45:7b:69:bc:94:4d:df:57:78:36:99:62:94:7e:21:23:89:2f:
00:36:61:6a:00:17:44:85:9f:04:4e:42:e6:ad:22:75:2c:a2:
2a:33:50:51:4e:d0:13:54:17:97:6a:68:6e:9b:fc:82:f4:54:
b3:63:43:90:00:91:84:59:69:fd:a7:12:39:2b:25:39:a2:03:
90:ce:c1:7f:81:b3:26:57:b0:d5:04:b7:04:63:5e:71:f9:f5:
4b:57:77:50:c9:83:ac:a1:86:8a:44:2a:ea:2d:f5:a3:2b:e3:
e1:ab:40:5d:ed:22:bd:11:a3:3e:a0:57:8d:ea:3a:d8:3b:37:
b0:c2:68:ba:dd:d7:cd:bc:77:3a:1b:6a:04:fc:02:ba:a6:74:
2b:b7:94:d3:af:e4:5d:48:24:e3:0f:71:8f:8b:0c:e9:0f:9c:
0b:9d:c1:3e:12:0d:c2:41:a2:f8:81:52:b1:b4:1d:2e:d6:2b:
6f:5e:c4:75:c1:65:c4:a7:54:00:4a:c8:94:1f:ef:b6:38:c4:
d3:71:df:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 02:00:48 2026 by rpki-client