
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e78758c-9868-4562-9e1e-a5756f78f802.roa
File: 9e78758c-9868-4562-9e1e-a5756f78f802.roa (raw, json)
Hash identifier: O43cg+NHK5iSM1kQA1FBU5S/jCDud+V/VSwObfp4lsU=
Subject key identifier: 46:A3:43:EA:07:B9:E9:29:3B:65:F6:BD:BC:7F:1B:85:A6:B5:33:22
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1E6716984B168C9D9F6559E97D4609FE3B1F30DB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e78758c-9868-4562-9e1e-a5756f78f802.roa
Signing time: Wed 05 Aug 2026 01:10:36 +0000
ROA not before: Wed 05 Aug 2026 01:10:36 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.171.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:67:16:98:4b:16:8c:9d:9f:65:59:e9:7d:46:09:fe:3b:1f:30:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 5 01:10:36 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=cf247354ac8657a72ea24401d0569e0bc18f8b876770a8415302f6602999b561, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:8c:b0:67:89:ce:24:ac:d7:1b:00:ca:44:
2b:3c:a9:61:d1:46:0e:22:1f:bb:90:53:74:15:e4:
94:c1:4e:13:da:fe:59:3c:21:c0:f7:08:82:36:4c:
df:73:6a:0d:88:ae:4e:5c:4a:c2:fc:f5:c6:52:1f:
66:d7:f7:cd:46:67:17:ad:c7:4c:c4:8f:80:b0:58:
6c:6f:44:89:82:1e:53:be:da:7f:cb:87:ef:53:bd:
9a:a6:67:e6:dc:c8:b0:76:4e:8c:80:02:9f:62:05:
31:46:ac:98:1b:5f:8b:a1:7b:01:20:17:70:71:b6:
1e:1e:42:cd:c5:f9:e5:38:6d:5f:2e:b6:9b:dd:94:
3b:6a:13:36:91:65:7e:54:25:ce:51:97:75:aa:27:
0d:17:2a:7f:56:bc:7e:a3:e7:de:53:b7:40:0d:c7:
ec:f1:44:9e:e5:e4:a7:da:8b:9a:69:d9:45:f0:02:
d2:ab:9e:9d:4e:18:af:ed:af:85:ee:b1:33:ad:70:
ee:6e:90:c3:51:42:e3:31:d1:6a:4b:e4:54:fc:31:
39:62:57:bb:d8:4d:8b:2b:40:cf:2f:53:09:57:91:
70:49:85:94:59:b2:7a:8c:b7:72:d7:17:68:65:ef:
11:88:c6:c2:2a:b3:94:9d:56:10:cc:dd:5b:e6:2b:
2a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A3:43:EA:07:B9:E9:29:3B:65:F6:BD:BC:7F:1B:85:A6:B5:33:22
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e78758c-9868-4562-9e1e-a5756f78f802.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.171.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:40:ee:13:48:64:ed:99:4d:92:68:9a:f8:40:d1:90:e9:6b:
77:02:8d:7d:43:4f:5b:28:d7:9d:10:dc:34:f6:70:20:be:c1:
e6:ed:e9:8e:52:90:17:0f:3b:6d:7d:4d:48:28:fa:b3:40:15:
a7:f5:85:db:d5:fb:f0:86:d1:80:a5:be:66:82:5d:74:93:32:
23:a9:6d:01:0d:17:71:8b:fa:2f:34:15:7c:a6:3b:13:c9:9f:
77:b1:a0:cd:f7:53:08:11:25:e6:e6:6b:10:0e:15:f4:44:d8:
2c:de:f1:03:4d:96:31:d7:48:43:2e:70:6f:62:db:6a:80:bf:
a7:68:4f:b1:a4:d7:b7:98:b4:b1:27:24:7f:bb:96:03:8d:21:
04:7f:43:3e:d3:71:d9:23:cd:d4:c2:c3:ca:5b:c0:b7:8e:ee:
ff:4e:6b:d7:0e:5d:f3:7c:07:4f:08:b3:4d:9d:d8:bc:a4:f4:
72:24:0a:a4:c4:56:8a:20:d6:94:03:4b:cc:12:48:27:f0:e1:
e5:e4:48:37:18:6d:35:1e:cd:36:d4:fc:e7:bb:da:19:e7:ec:
65:82:22:86:03:dc:f2:14:aa:29:58:95:fc:f9:07:32:a8:39:
74:85:6a:d7:e3:0f:76:be:48:be:f0:af:af:79:c5:d1:57:4f:
c5:7f:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:44:05 2026 by rpki-client