
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2b48f59-933d-4199-a32e-4bcd0da6a167.roa
File: a2b48f59-933d-4199-a32e-4bcd0da6a167.roa (raw, json)
Hash identifier: agF9Oyi4Zwz7h5mBDqIDyOABIDGSv/QqUSEz1UTnLrk=
Subject key identifier: 76:87:CE:58:1C:98:71:1E:EC:5E:9B:1C:1A:D2:A2:F4:4B:9E:05:76
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5022DD5E4C10A2C086065120A305AEC28430348B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2b48f59-933d-4199-a32e-4bcd0da6a167.roa
Signing time: Thu 15 Oct 2026 02:30:10 +0000
ROA not before: Thu 15 Oct 2026 02:30:10 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 52.78.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:22:dd:5e:4c:10:a2:c0:86:06:51:20:a3:05:ae:c2:84:30:34:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 15 02:30:10 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=fb478ebeedddf78400fa10d4b5f0c2ae60afb340d076cac8b58faa637530eb36, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:57:03:e3:ee:bf:62:f0:90:a9:c3:c7:b6:
b0:e6:eb:ef:7b:dc:f6:47:c6:73:58:b2:3d:0d:7b:
f1:ff:75:b5:a5:f2:c0:eb:1c:3b:0e:67:0c:37:b8:
d2:dc:57:dc:a0:76:c0:59:ab:84:bb:69:6c:bc:99:
61:05:5d:c1:f3:e6:55:cd:57:4a:47:b8:f4:61:fa:
f3:7a:dd:aa:2b:b7:98:b6:68:82:2f:1f:48:44:9c:
ec:80:b2:5f:1f:71:3f:02:ff:92:71:c4:a3:61:3e:
91:df:9f:f8:10:af:34:e5:43:3e:21:3c:75:a2:15:
c0:0c:5f:7f:48:20:42:4d:86:29:1b:ca:6d:03:2e:
58:23:64:a8:d0:af:04:0f:b8:e4:af:ed:0d:ec:9d:
37:d8:59:32:29:8f:92:35:b2:0d:73:fc:4c:63:79:
b2:97:79:01:4c:28:fd:5f:e7:9e:e8:d2:63:3f:82:
a2:48:03:b5:91:74:06:96:ca:88:63:52:0f:b3:44:
4d:07:b4:f8:f2:10:fa:ba:f0:cb:92:71:16:d9:2b:
c6:26:14:a4:ff:be:39:f9:46:5c:d4:b7:1d:f2:18:
b5:0c:b1:dd:6b:0e:c5:5e:a6:cf:3a:bc:90:72:12:
32:58:2a:d2:b6:70:71:65:64:e0:d0:ea:79:fe:f9:
1d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:87:CE:58:1C:98:71:1E:EC:5E:9B:1C:1A:D2:A2:F4:4B:9E:05:76
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a2b48f59-933d-4199-a32e-4bcd0da6a167.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.78.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:92:f9:26:f2:3c:68:30:e1:21:bf:80:8d:ad:c3:07:15:5a:
79:45:46:54:21:74:27:3f:7a:ce:f9:48:f8:c6:42:62:13:e2:
b5:89:a8:e2:5b:ca:0d:a4:4f:b0:64:ce:3c:b8:61:13:c5:70:
d4:42:39:a8:04:33:1e:ff:6c:f0:fa:e5:15:1b:85:e0:56:57:
d5:87:91:0c:ef:bd:43:06:01:ff:93:16:09:b0:d6:dc:de:8d:
e3:b6:53:c6:73:5f:7f:af:14:ab:8d:0a:ff:cc:39:67:b1:d6:
d5:2e:f4:6c:0f:10:83:b9:da:2b:e6:0b:1c:45:20:2b:38:20:
68:39:de:3d:d8:75:f3:21:07:fa:68:3c:6c:e2:cc:e0:bd:53:
96:40:8b:a7:52:97:3f:24:3b:bb:c4:1b:07:2c:6f:51:a1:9e:
c6:9f:ba:92:26:1e:f4:52:f4:4e:14:14:05:61:59:dd:e6:9c:
f2:de:0d:d1:47:18:bd:fd:77:e3:63:4d:67:f4:1f:cf:6b:6e:
e6:b7:51:13:53:69:9a:c2:24:8a:2f:ae:84:ef:a2:f2:ae:6a:
c0:7e:08:4f:52:6f:90:51:61:1b:a7:2a:bd:f5:7a:0a:d7:16:
d4:52:00:68:c6:ee:fc:6a:2d:1e:ba:1a:28:3e:d3:d9:98:81:
60:b9:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:07:07 2026 by rpki-client