
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acfbdd06-bf86-414c-8630-66acc908ec95.roa
File: acfbdd06-bf86-414c-8630-66acc908ec95.roa (raw, json)
Hash identifier: UGquTjaVwcsGEEBT+qFiEGWs2x4HZD/LpHJ7icdXdZM=
Subject key identifier: 6E:C1:5E:24:EA:ED:B4:59:77:AA:89:85:06:B5:F3:D3:F2:1F:65:FF
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 450C9E13E680E8B9C9E1954CC277BAFDC0BEA4A9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acfbdd06-bf86-414c-8630-66acc908ec95.roa
Signing time: Thu 30 Jul 2026 01:11:58 +0000
ROA not before: Thu 30 Jul 2026 01:11:58 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.158.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:0c:9e:13:e6:80:e8:b9:c9:e1:95:4c:c2:77:ba:fd:c0:be:a4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 30 01:11:58 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=f74505dc80bd71cb2b1723f0b686a5c94c03fdb76eb4a2811b0de3e2eb2fe9c4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4e:6e:3b:53:57:68:b4:50:b7:4e:27:79:43:
17:cc:80:30:9d:d9:75:7b:f9:fd:6d:a5:24:1b:e8:
6a:45:80:8a:d3:10:5b:b7:3b:e7:8e:75:c3:5d:78:
18:b7:d1:ee:a9:c1:97:19:4b:02:05:c2:3a:e8:c6:
0b:ec:01:c1:81:6a:6e:c7:f8:d8:1e:84:e4:79:a8:
cc:48:8b:a1:aa:a4:d6:d8:d6:3d:85:e5:93:55:14:
c0:7c:73:25:63:69:21:74:d5:87:24:4c:c8:f9:33:
1b:dd:55:07:dd:65:30:4c:d9:1e:28:4f:8d:ba:08:
7b:46:ab:2b:dc:98:38:72:ec:c4:ae:62:4b:65:e3:
22:8e:bc:3c:84:78:d3:5d:63:29:d6:91:07:32:72:
db:30:ef:1b:f6:b7:1e:5e:34:78:7c:f3:2a:47:b5:
0e:96:36:29:39:e9:f7:cf:db:41:0a:92:36:01:9b:
28:c2:ff:80:c2:70:02:5b:45:3a:1d:4f:24:5e:0c:
1f:77:ba:8a:f7:18:c4:33:b4:0d:f9:06:d1:bc:25:
7c:f8:f9:cf:9e:63:d8:1c:91:87:f4:8e:36:62:25:
e0:f7:64:83:d4:88:4e:12:cc:69:54:a6:9f:bb:e1:
31:ee:76:7e:f5:cd:5b:4b:05:42:f3:f0:0c:17:67:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C1:5E:24:EA:ED:B4:59:77:AA:89:85:06:B5:F3:D3:F2:1F:65:FF
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acfbdd06-bf86-414c-8630-66acc908ec95.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.158.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:77:fc:5b:2c:01:f9:13:a3:a3:ca:73:07:a7:9c:84:d5:35:
f0:12:46:50:1d:e4:c0:02:21:cd:f9:14:6f:2f:3e:1c:87:16:
61:c2:2c:01:9f:ad:44:8f:23:ec:c7:5e:43:18:23:1c:f9:3b:
6c:46:29:b5:96:d3:8e:7d:bd:6a:d0:6d:28:b6:e3:4a:8d:4f:
a0:3e:71:66:fa:3b:07:2b:53:ac:d2:dd:7b:1d:89:a0:21:39:
a1:07:7e:dc:46:c3:25:b4:f3:64:b0:e4:3f:c6:48:d4:44:e9:
a9:0e:a5:91:10:51:86:37:74:b5:cf:a8:86:b7:a0:42:dc:9e:
9c:c2:46:ad:63:7c:37:dd:69:35:a3:6a:0d:8a:4a:47:e6:69:
33:7e:2a:9c:b8:48:23:ba:7d:f6:f1:14:ac:c7:fb:09:64:27:
c6:f3:5b:09:23:3c:8e:ac:ee:ee:b8:da:b5:46:b6:34:45:f3:
b7:60:4f:7d:ad:f0:0b:1e:17:af:d3:9f:0d:f0:02:72:2e:ef:
c9:ac:a9:78:ff:48:b0:20:de:29:32:38:77:e0:28:64:7f:08:
1a:7c:d1:d2:3d:1d:57:7d:7a:90:7a:2a:ad:d4:c0:cf:3d:c2:
e2:62:25:fe:34:3f:f0:77:69:95:9f:96:94:b1:a1:00:de:52:
b6:24:e3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:02:46 2026 by rpki-client