
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa74b400-e329-42cb-bf87-ab4ebaae5e18.roa
File: aa74b400-e329-42cb-bf87-ab4ebaae5e18.roa (raw, json)
Hash identifier: IaRQAvwnIGjLvbD9tgKYuB6lb8NcHJvDtRhEj/Ihw3M=
Subject key identifier: 5C:C2:EA:70:1C:C6:A1:F8:3D:37:A8:D2:60:06:D7:56:14:8A:6F:0C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 03240461D4587A6CB7CF8B6D52B447474688A341
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa74b400-e329-42cb-bf87-ab4ebaae5e18.roa
Signing time: Mon 03 Aug 2026 03:31:17 +0000
ROA not before: Mon 03 Aug 2026 03:31:17 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.241.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:24:04:61:d4:58:7a:6c:b7:cf:8b:6d:52:b4:47:47:46:88:a3:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 3 03:31:17 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=8a725cb07c7350f6994aed7b7682041fbf643e95524d617c33db646fa349af16, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cc:59:d2:60:64:60:64:33:11:aa:c7:68:c2:
15:62:df:5f:98:99:9a:fd:82:f9:8d:b8:17:cc:90:
30:53:79:ac:ae:80:5f:ae:75:c2:ef:95:6f:89:f6:
a6:83:cc:d4:37:80:fa:03:75:69:b2:59:45:25:a9:
26:dd:aa:10:ef:5a:99:76:a7:04:3a:22:11:1e:6b:
24:d3:28:dd:04:93:16:0b:32:dc:c9:e6:26:3a:5e:
8d:63:c7:e4:e8:97:33:e4:c0:f5:e1:cb:99:02:e3:
d2:5c:f8:b0:dc:f9:a5:28:ec:45:63:ed:3d:ae:6a:
18:ef:d5:e3:36:bc:34:9b:e8:0d:fd:11:98:5f:b9:
17:09:58:fe:90:8c:3c:61:cc:8e:54:4b:33:2e:ab:
46:d1:c8:ac:6c:8e:27:e2:09:fc:5e:24:d2:90:00:
27:df:56:aa:c1:8e:05:1d:cb:3e:7e:19:a1:07:f9:
cb:10:77:21:03:66:2c:b2:8d:9e:3f:44:f9:39:47:
32:c6:2b:ad:b7:2f:04:cb:fd:82:97:07:d6:58:30:
61:3a:fb:2d:2d:1d:95:09:29:76:d6:03:94:97:0e:
eb:5f:dd:7f:32:ad:0a:93:37:eb:e7:77:e8:58:a9:
0b:62:3c:b8:4b:a2:85:4f:2d:c3:5c:1b:d1:de:85:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C2:EA:70:1C:C6:A1:F8:3D:37:A8:D2:60:06:D7:56:14:8A:6F:0C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa74b400-e329-42cb-bf87-ab4ebaae5e18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.241.40.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:1c:d1:5d:5b:2c:33:0e:83:1e:3f:b4:e4:cf:3e:b7:81:fb:
3e:04:f0:e6:e2:f5:66:db:6e:50:63:c0:cc:cf:35:0c:d6:7c:
6c:f0:73:6c:3a:2e:9a:f5:11:75:de:1e:33:d8:95:51:d7:17:
e9:5e:4e:f0:09:af:96:b8:9b:e6:92:6d:ea:de:97:54:8d:04:
4b:50:4a:84:3c:64:6d:7b:4b:a3:19:72:77:61:b8:b1:33:a0:
33:4c:75:22:7c:97:d5:75:df:d3:e8:37:ae:01:5c:a5:1c:a4:
aa:9a:37:c1:52:2f:49:f4:33:cb:79:3d:64:2e:3f:53:0d:37:
c2:3b:27:5c:e7:74:5d:f1:d8:a6:e3:88:e3:42:81:1b:0d:8f:
12:8a:61:4a:b7:fa:f2:58:d5:9f:18:fa:04:8c:90:8c:19:cd:
ae:c0:56:cd:39:4f:4d:94:1a:ba:f0:66:38:8e:62:b0:5f:75:
73:20:35:a2:f6:d4:bc:c4:1c:af:da:2b:4d:3a:f5:b0:30:c9:
29:1a:ba:9d:b8:71:30:92:82:a5:46:72:8e:7d:51:da:25:11:
66:9d:2e:20:9c:23:0e:b4:7c:96:f0:83:6a:a9:54:44:11:f5:
c8:90:1d:7b:02:44:a1:1b:e8:3d:7d:c2:ef:c6:80:04:b0:2c:
a2:d7:04:9e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAyQEYdRYemy3z4ttUrRHR0aIo0EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAzMDMzMTE3WhcNMjYxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A4YTcyNWNiMDdjNzM1MGY2OTk0YWVkN2I3NjgyMDQxZmJm
NjQzZTk1NTI0ZDYxN2MzM2RiNjQ2ZmEzNDlhZjE2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD0zFnSYGRgZDMRqsdowhVi31+YmZr9gvmNuBfMkDBTeayu
gF+udcLvlW+J9qaDzNQ3gPoDdWmyWUUlqSbdqhDvWpl2pwQ6IhEeayTTKN0EkxYL
MtzJ5iY6Xo1jx+TolzPkwPXhy5kC49Jc+LDc+aUo7EVj7T2uahjv1eM2vDSb6A39
EZhfuRcJWP6QjDxhzI5USzMuq0bRyKxsjifiCfxeJNKQACffVqrBjgUdyz5+GaEH
+csQdyEDZiyyjZ4/RPk5RzLGK623LwTL/YKXB9ZYMGE6+y0tHZUJKXbWA5SXDutf
3X8yrQqTN+vnd+hYqQtiPLhLooVPLcNcG9HehYkZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXMLqcBzGofg9N6jSYAbXVhSKbwwwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2FhNzRiNDAwLWUzMjktNDJjYi1iZjg3LWFiNGViYWFlNWUxOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAM28SgwDQYJKoZIhvcNAQELBQADggEBAKMc0V1bLDMOgx4/tOTPPreB+z4E
8Obi9WbbblBjwMzPNQzWfGzwc2w6Lpr1EXXeHjPYlVHXF+leTvAJr5a4m+aSbere
l1SNBEtQSoQ8ZG17S6MZcndhuLEzoDNMdSJ8l9V139PoN64BXKUcpKqaN8FSL0n0
M8t5PWQuP1MNN8I7J1zndF3x2KbjiONCgRsNjxKKYUq3+vJY1Z8Y+gSMkIwZza7A
Vs05T02UGrrwZjiOYrBfdXMgNaL21LzEHK/aK0069bAwySkaup24cTCSgqVGco59
UdolEWadLiCcIw60fJbwg2qpVEQR9ciQHXsCRKEb6D19wu/GgASwLKLXBJ4=
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:40:43 2026 by rpki-client