
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfdeb3c5-5799-4ca2-aa20-866b77a0628b.roa
File: bfdeb3c5-5799-4ca2-aa20-866b77a0628b.roa (raw, json)
Hash identifier: XJIzmmxEVRSGPghguxsF3V1p3/u8pz42YJO9qMACQI8=
Subject key identifier: 3C:D8:F4:D2:42:EE:99:37:9C:E0:31:D2:E2:D9:F9:91:3B:3F:39:61
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3A18E92C4F94F4A0B21B15AFFF0C82016120AA2B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfdeb3c5-5799-4ca2-aa20-866b77a0628b.roa
Signing time: Sat 16 May 2026 02:41:42 +0000
ROA not before: Sat 16 May 2026 02:41:42 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.195.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:18:e9:2c:4f:94:f4:a0:b2:1b:15:af:ff:0c:82:01:61:20:aa:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 16 02:41:42 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=3d8ac5c1a88838e61f8ec5d5114dbc41b1eb1abf7f6c561419339bf6de096168, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:19:6a:55:a2:29:8a:c8:3f:7c:0a:fa:e0:f3:
d5:3f:3e:13:89:c9:a2:b9:d9:8c:bb:6c:9f:c6:36:
a2:69:cd:84:30:07:0f:96:8a:c7:dc:5c:83:9d:f4:
eb:90:93:ea:dd:ac:18:44:85:01:7f:68:7d:59:7d:
c0:58:36:9a:60:a7:40:13:08:9d:2e:61:56:5e:9c:
ba:88:d6:73:3c:78:95:91:32:87:19:57:45:27:53:
85:41:52:19:a7:1d:d4:82:05:6b:76:75:e9:e2:ac:
a8:22:37:28:2b:c2:b6:4e:98:cd:71:c0:8c:2f:b3:
48:4c:88:3b:ab:7c:51:38:9c:6c:02:b4:e2:08:08:
ec:9a:36:2c:78:10:13:3a:96:ea:d4:13:80:9c:01:
92:d6:64:e3:11:4e:c8:4e:4c:09:93:82:9c:e9:4f:
b0:d5:f6:b6:6c:6c:56:5c:bf:ec:55:52:22:2d:96:
45:32:d4:a3:50:a1:6d:dd:c9:aa:74:89:cb:bb:1c:
2b:40:5a:73:71:dd:9e:33:2e:7d:39:8d:ac:e3:ed:
6a:03:37:81:af:e8:2f:8a:43:b2:1b:c4:ee:21:60:
68:b9:3c:ea:fe:11:45:f6:13:ba:5c:03:da:7d:78:
d5:c0:9c:ef:79:ce:db:28:e9:6d:ee:8f:dd:9f:43:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D8:F4:D2:42:EE:99:37:9C:E0:31:D2:E2:D9:F9:91:3B:3F:39:61
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bfdeb3c5-5799-4ca2-aa20-866b77a0628b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.195.232.0/22
Signature Algorithm: sha256WithRSAEncryption
51:d8:dd:56:ed:c5:44:e1:a2:16:9a:b0:12:ac:3f:8d:f8:b1:
95:89:8d:cd:af:c8:6d:50:f8:41:da:fe:1c:08:28:80:6e:e1:
0f:7e:6b:4e:87:13:66:4a:b1:3d:f4:b3:d8:49:e8:1d:98:d8:
5a:07:dc:ab:bf:c5:4d:f4:9b:79:af:67:75:20:63:f3:02:88:
f5:e2:f9:f8:79:26:1b:40:3e:99:52:67:b6:fe:f8:0e:b8:ac:
51:4a:c7:a3:7c:35:ff:c7:5f:29:bb:fe:5b:8e:9e:40:c0:52:
c0:77:e2:ae:14:b9:fc:a5:4d:9d:31:37:ec:f0:fb:1c:6f:83:
4c:52:e9:76:b9:54:3b:51:92:4a:77:6f:97:1d:b5:fb:d7:54:
96:30:85:bf:1a:a2:b4:0f:98:6a:73:3a:56:21:95:fe:64:58:
09:4b:32:eb:96:90:90:ec:d2:0d:e5:30:3b:a9:73:33:41:56:
88:d8:6b:13:37:1d:69:e0:e1:df:7b:40:02:75:bb:e6:e7:f4:
c8:99:a1:a4:28:71:18:9f:ee:db:74:29:b7:ca:79:5e:a5:f4:
f2:00:62:2a:56:09:4c:69:2c:8f:32:33:34:75:3b:7b:ce:8a:
21:61:1b:dc:91:ae:2b:20:50:e2:1f:37:8a:bf:50:a3:a2:72:
67:24:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:48:41 2026 by rpki-client