
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a78c36d0-d370-4041-9ee9-53ca2bf9c4ed.roa
File: a78c36d0-d370-4041-9ee9-53ca2bf9c4ed.roa (raw, json)
Hash identifier: q1+LB9AbxTqoF58u2+a1AhUlnw9viowIxvsQJtXKpCw=
Subject key identifier: AF:99:EB:A6:BA:29:5D:51:32:1B:0F:50:78:97:9F:B6:9E:40:2E:01
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2D6BAEE9060FF5B455A0381EF044D3436DD2E529
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a78c36d0-d370-4041-9ee9-53ca2bf9c4ed.roa
Signing time: Fri 20 Feb 2026 01:01:03 +0000
ROA not before: Fri 20 Feb 2026 01:01:03 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.156.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:6b:ae:e9:06:0f:f5:b4:55:a0:38:1e:f0:44:d3:43:6d:d2:e5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 20 01:01:03 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=ed378e915900913937e75723c2bb2adcdd86435086362a7b00ee6de265096eed, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1c:a7:7c:dd:5d:30:4d:49:9f:9c:6e:d9:1d:
d2:8e:56:6d:8a:7c:47:a6:14:8f:33:34:f7:28:c4:
27:59:43:22:3e:12:5a:df:3d:13:ca:70:9a:97:ed:
67:32:59:a0:4e:d0:5b:94:38:37:54:e9:62:e5:c6:
9d:4a:d3:8d:a2:2b:87:81:6d:83:d9:81:3e:c9:6f:
b8:d9:15:b1:a9:e8:c9:17:09:b1:6f:fe:ff:f4:15:
c8:18:f5:e7:e8:24:1e:fa:40:55:31:67:e9:e5:6e:
10:d5:a7:41:31:7b:bd:73:e9:58:71:8a:33:af:92:
49:37:d8:80:54:c7:e0:8f:13:8f:a6:61:33:27:97:
db:1b:e4:ed:a1:3e:c8:cf:19:ef:02:3e:60:68:70:
e1:bb:7d:44:ac:52:34:1a:0b:93:29:bb:9f:7a:91:
ec:a1:0b:1e:49:c1:6d:d9:f3:b4:09:f9:7f:d6:01:
7c:f7:87:47:da:38:e6:0a:ea:0e:45:f0:66:87:6e:
7d:09:ce:3c:2a:fb:d5:99:3d:dd:b4:74:bc:5b:3e:
fb:04:16:28:5c:91:03:27:b8:28:e5:f5:65:25:fc:
50:06:42:9e:35:70:1d:ab:4c:3f:6e:7d:55:9a:06:
0d:d0:19:c6:a8:b0:9b:a4:65:65:15:5b:26:75:a6:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:99:EB:A6:BA:29:5D:51:32:1B:0F:50:78:97:9F:B6:9E:40:2E:01
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a78c36d0-d370-4041-9ee9-53ca2bf9c4ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.156.0.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:68:ec:2d:60:8c:63:b4:22:48:b8:4d:eb:00:fc:37:5d:88:
a0:d6:d9:be:06:4f:46:de:d0:38:d9:65:0d:b2:b1:7e:2e:4a:
2d:ee:3c:6d:b8:6e:ea:d6:9e:99:03:18:8c:ee:4f:ab:0b:d8:
ee:aa:48:f1:06:92:d7:6a:24:ae:ed:4c:12:62:c1:16:ac:64:
d5:08:32:6f:c0:c2:cd:32:98:07:b6:f0:93:91:30:7c:41:a5:
c2:73:3d:b6:4e:1b:a1:9e:58:f4:4e:ef:9e:5e:89:e9:a0:e2:
ca:6f:7c:6e:21:5a:6a:6e:4f:4e:36:64:ea:b3:07:5e:f2:eb:
03:98:a3:ff:4f:8f:c6:e8:fb:d1:13:8d:d3:5c:5f:02:da:f3:
10:be:f7:20:bf:85:1f:7a:f2:e1:3a:b2:8e:3a:f6:c0:b9:1c:
b3:11:5b:74:34:a1:5a:ac:d8:53:81:e4:b6:a4:4c:cd:69:c5:
8d:6d:85:d6:10:84:38:17:db:9f:c7:ce:c0:e0:d4:76:b1:47:
da:e8:45:ff:0f:6b:25:34:e9:8a:08:e4:79:5e:1b:81:f9:e8:
ca:45:45:2a:e3:c8:64:c1:e5:5f:57:bc:ca:72:b3:48:d4:2a:
7a:db:dc:c1:b5:d3:e3:7d:3b:b9:42:f2:25:d6:22:dd:6d:52:
7b:99:00:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 02:05:06 2026 by rpki-client