
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba17b8ee-342f-4b37-ad1a-d9cd20db8b84.roa
File: ba17b8ee-342f-4b37-ad1a-d9cd20db8b84.roa (raw, json)
Hash identifier: 8EchzQBMvJZCxiBidDAV2CvRo+bkNPS6HMEiiCCSXQ0=
Subject key identifier: 8A:B4:F1:15:F2:E4:26:BE:4E:5F:28:D5:F1:28:FE:44:16:CA:1A:34
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 472CEA9A0F7F298CF0874DC565231699C2E9ABE8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba17b8ee-342f-4b37-ad1a-d9cd20db8b84.roa
Signing time: Fri 07 Aug 2026 02:11:33 +0000
ROA not before: Fri 07 Aug 2026 02:11:33 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.230.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2c:ea:9a:0f:7f:29:8c:f0:87:4d:c5:65:23:16:99:c2:e9:ab:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 02:11:33 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=00d0c85345ec684dcd9ba98719015a266f2a99635bac67a93f62b90d9c601ef3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cf:8a:a2:61:b6:6f:c0:1c:ce:39:e7:fe:66:
41:9b:e4:48:70:f1:be:a5:dc:03:72:8e:99:09:db:
b1:08:3b:d0:8d:29:e6:c3:f4:4e:d3:34:3a:7b:40:
6a:04:dc:40:9a:71:2e:ee:5c:e0:bd:c0:24:c3:92:
ea:63:5a:fb:1b:ed:1b:2c:97:02:48:1c:a6:9b:b2:
a5:53:0c:60:c6:f7:f9:19:e7:f4:70:14:9d:65:ae:
df:8c:8e:a0:35:2d:1d:0b:ae:35:86:65:ac:a2:3e:
7f:cb:c6:ee:9b:d0:25:21:c4:45:7d:23:46:1a:de:
f0:ee:fd:7c:d4:60:83:20:3d:30:44:38:ab:f7:fd:
5d:22:9a:d2:d0:01:4c:77:b7:07:f1:2b:84:c8:d7:
37:6f:ea:58:0a:83:09:26:40:5e:ba:af:8d:c0:6c:
22:01:0f:66:3b:79:b1:ae:c0:4d:fd:c4:5f:98:fd:
50:62:9a:a3:8a:c7:e0:35:62:20:e7:2c:a7:34:5b:
1a:91:73:7f:33:a7:be:10:e5:1d:d3:53:e9:57:a9:
b3:55:e8:f0:90:a6:52:0f:7a:71:a4:d3:2e:ce:db:
c5:fd:d0:78:69:c0:d3:8f:2b:f9:b1:10:5a:73:42:
82:38:98:0c:90:f5:b2:a0:db:de:55:00:46:02:8e:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B4:F1:15:F2:E4:26:BE:4E:5F:28:D5:F1:28:FE:44:16:CA:1A:34
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ba17b8ee-342f-4b37-ad1a-d9cd20db8b84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.230.0.0/19
Signature Algorithm: sha256WithRSAEncryption
3c:02:bb:06:94:70:57:2b:a6:f1:c6:72:99:4b:61:ba:aa:d6:
1c:0f:2b:fa:53:77:60:09:4b:53:11:14:49:26:5f:d1:a3:05:
77:5b:aa:b2:3b:fb:15:ca:24:9a:eb:bd:8b:c2:36:ae:c4:0b:
34:d7:19:59:7f:61:98:a0:e9:bb:de:c6:81:aa:36:ef:f7:d9:
fd:7d:3b:86:bd:a3:16:e4:c8:8f:4e:c4:73:4a:36:f0:27:52:
08:4a:95:e6:a5:6f:2b:19:19:a6:37:23:2d:90:e1:08:3d:37:
f2:d1:3d:72:5d:b6:fe:2f:3b:3d:9e:1e:67:a6:54:df:bf:67:
15:70:3e:f0:23:05:63:1b:fb:5c:11:34:a8:1d:30:b1:aa:cc:
b1:e8:19:15:76:86:6b:28:3f:90:f4:e5:49:06:9f:08:c4:4f:
84:a5:67:88:96:03:02:0e:51:82:8c:1a:02:cd:ba:6b:eb:cc:
e6:b7:f4:f4:19:85:8a:8f:38:bf:96:b7:bb:ea:9c:e8:7e:9f:
4e:a1:77:36:b8:9a:0c:fa:6a:71:0e:d4:93:0f:db:6e:bf:14:
05:0e:67:95:0c:a2:26:38:e3:b7:0c:3f:ae:e6:c3:28:64:d7:
69:2c:27:45:f6:38:f1:74:f8:1d:f1:3a:4d:1f:d4:63:ea:ff:
aa:cf:58:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 12:14:20 2026 by rpki-client