
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bacdf462-0556-407b-a28c-e4535bb978b3.roa
File: bacdf462-0556-407b-a28c-e4535bb978b3.roa (raw, json)
Hash identifier: GcQ3nRoSFZ7Jy2P/i8z20vL+7CqvsBhno0HcitUbAyU=
Subject key identifier: 81:A4:CA:69:5D:EA:FB:A4:51:70:C1:87:84:1C:A3:A4:25:9D:EB:13
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 61358BBEA42EA0FDAF0B2AFC99BEC52A08AB9F70
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bacdf462-0556-407b-a28c-e4535bb978b3.roa
Signing time: Fri 15 May 2026 03:01:21 +0000
ROA not before: Fri 15 May 2026 03:01:21 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.204.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 31 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:35:8b:be:a4:2e:a0:fd:af:0b:2a:fc:99:be:c5:2a:08:ab:9f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 15 03:01:21 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=d6d76d660198a6bde01d369cd87d27f220cdf8e59fea1259c310ac45c3f63819, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:da:70:bc:90:9b:f4:a2:a5:9d:4d:47:f9:
57:21:4e:77:bd:a6:7d:27:50:8c:3e:78:41:d9:30:
4f:0b:06:ae:4d:28:6d:91:09:0f:32:41:49:74:ba:
8c:1b:ac:a7:cf:a7:8c:5d:72:a5:39:18:98:69:99:
d1:b6:24:00:6a:c2:39:99:cc:ef:ef:8b:0d:1a:9c:
15:7f:39:ee:5a:f5:f8:c5:7f:e3:cc:86:2b:e9:4e:
ff:b2:1c:55:76:2b:b8:7f:be:8b:18:d8:3f:70:5d:
11:df:a9:3f:72:79:76:c9:bc:2a:6a:eb:d1:a5:67:
7e:06:01:6c:26:ac:d7:cd:74:0c:20:62:0d:4f:13:
cd:91:2d:22:e3:7f:48:6d:c6:fd:47:39:40:77:bc:
43:34:f0:60:4d:95:76:1d:b6:ae:d2:a3:99:70:42:
a8:54:e7:19:92:7d:0c:45:e6:dd:35:28:1d:c2:e5:
c8:5a:e0:41:6f:f4:cb:fe:d9:d1:49:f7:bd:02:ea:
19:86:2d:49:d8:d5:f0:04:6e:57:b4:ac:f9:76:9b:
00:64:16:18:9c:e2:b5:25:d6:58:18:71:6a:31:c3:
20:77:81:6f:30:cf:7d:a1:0e:0a:04:6f:31:94:a7:
e4:a8:17:be:c0:87:67:00:fd:4a:2a:60:dc:60:5c:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A4:CA:69:5D:EA:FB:A4:51:70:C1:87:84:1C:A3:A4:25:9D:EB:13
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bacdf462-0556-407b-a28c-e4535bb978b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.204.56.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:3e:29:f2:aa:da:0f:a2:25:2a:c6:26:f0:5d:b8:57:bc:d6:
9e:d1:af:9a:8e:d0:d5:d6:28:90:ac:37:82:9b:2d:f9:c7:21:
c8:12:e7:14:9c:b9:72:39:d9:ce:81:af:1f:95:2e:fc:f7:d9:
fb:9e:53:c0:1d:ce:4f:ff:64:8b:b1:17:9b:77:23:93:5e:6d:
cd:df:21:e5:61:f0:bf:99:01:dd:66:59:dc:31:12:eb:c8:92:
f2:c0:28:6b:3e:54:a1:23:ef:ea:e7:1d:21:44:ee:5e:5d:1f:
d8:e2:05:b8:bc:1e:1b:13:bd:36:13:c2:59:81:04:bb:5a:f0:
85:43:d3:72:a0:3f:93:09:b9:d6:2e:6c:51:d5:f0:e4:58:80:
a2:ff:28:04:6a:57:f1:47:bb:2d:16:c2:35:3a:d4:c8:78:d5:
fc:72:50:f8:de:7d:fe:64:62:cf:58:9e:fb:62:30:4f:f7:72:
66:84:46:17:87:f9:bc:fd:91:76:fb:f0:a6:23:40:8a:80:3a:
9b:5b:42:66:6d:df:92:64:13:08:dd:0c:e7:2d:1c:72:af:02:
25:d5:f3:ff:13:2e:6c:85:14:71:0f:70:55:79:43:a4:07:8f:
ee:9f:34:56:99:66:71:2f:bc:d9:a0:8f:ba:3c:f4:fd:be:53:
a7:65:11:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:58:17 2026 by rpki-client