
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c81ec3b6-9d84-4093-8d0c-8e3511608dbd.roa
File: c81ec3b6-9d84-4093-8d0c-8e3511608dbd.roa (raw, json)
Hash identifier: fkw4u8igehcKIVmhlLWdoJ1rTa3Zyl+D4z4DsPi50oQ=
Subject key identifier: 4B:DD:19:A3:06:08:5D:3F:32:E1:C1:B8:8E:C0:F6:D7:B3:6E:9C:D0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6BB004FBEAF3A933ED6B954565668E061D8643D5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c81ec3b6-9d84-4093-8d0c-8e3511608dbd.roa
Signing time: Tue 28 Jul 2026 00:40:47 +0000
ROA not before: Tue 28 Jul 2026 00:40:47 +0000
ROA not after: Mon 26 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b0:04:fb:ea:f3:a9:33:ed:6b:95:45:65:66:8e:06:1d:86:43:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 28 00:40:47 2026 GMT
Not After : Oct 26 23:59:59 2026 GMT
Subject: serialNumber=d7ceff03c6e64ace55cb64bba301558e57c1e33304c80c7886f6ea75f4a0ad5c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:7e:c7:34:27:32:a1:02:9c:77:2d:74:9d:
29:ae:a3:7a:a7:6c:6e:4c:10:41:1d:bd:c7:40:14:
19:b1:de:d5:6c:12:6a:07:f4:3d:68:ca:e2:b5:91:
33:eb:87:5c:d8:3d:49:d8:1b:af:63:08:b9:ad:fd:
4e:1a:b8:06:63:89:e0:08:b4:05:29:81:e5:f5:93:
c4:26:0b:79:a4:8f:1f:64:76:ec:eb:fd:be:ba:d2:
fa:e4:77:c8:f3:7b:20:b9:5f:30:9e:14:3e:b7:0e:
8a:ef:f2:16:d0:01:c7:36:51:dd:c0:95:ab:c2:4a:
94:4a:ca:df:c8:b2:91:d7:39:a5:0c:11:e0:55:97:
e3:19:2b:5b:c5:20:40:17:84:07:02:35:bc:de:80:
d9:27:f7:1e:e2:be:e1:a7:34:f8:5e:af:16:4a:fa:
87:6a:48:22:cc:16:d7:bf:98:a1:29:82:a7:e3:1e:
43:b3:86:20:17:ba:4e:1f:42:82:0a:35:b5:97:07:
95:fd:c2:33:a2:57:56:2a:5c:6f:c7:5f:cf:53:8e:
58:6e:17:ef:27:f2:57:51:59:5a:a0:45:ef:25:b9:
a6:84:64:79:e0:1d:31:78:10:d6:9e:14:be:92:0b:
b5:26:44:a0:ea:17:a4:3d:43:c8:bc:11:d7:c5:22:
ec:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:DD:19:A3:06:08:5D:3F:32:E1:C1:B8:8E:C0:F6:D7:B3:6E:9C:D0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c81ec3b6-9d84-4093-8d0c-8e3511608dbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:5f:d6:32:50:fe:17:e8:11:09:f0:1c:17:7b:62:22:4a:02:
ed:2f:b6:aa:d1:f9:21:85:8d:c4:fc:8a:d5:93:da:29:1e:52:
cf:c0:ad:01:d4:0d:22:a8:87:04:6b:d5:43:3a:2e:d7:db:aa:
55:2c:ea:bc:c6:22:13:8d:8d:f2:cc:26:ce:a6:3d:4d:89:ba:
14:31:d6:10:59:0d:74:30:52:3e:48:7c:fa:d5:bd:90:84:4a:
ee:06:37:7b:bf:61:d9:17:8a:51:c8:96:c9:46:7e:ac:ca:04:
9a:3b:8a:d9:6e:dd:95:c6:d2:8f:8c:b1:41:07:59:7e:1b:bd:
03:f0:b6:82:9b:31:4f:f1:96:ba:03:7d:da:fe:e8:f2:ab:23:
1a:c5:86:51:40:50:74:06:9d:75:b3:3b:84:0f:0d:02:4c:5e:
22:80:ab:c9:13:1e:80:0a:e0:b4:56:ad:47:f5:18:5e:d8:da:
c6:33:75:f3:7b:6d:4f:c5:f5:ff:24:af:cd:72:51:dd:be:a9:
a2:1b:9d:97:8c:a4:03:4b:cf:01:b7:2f:f8:86:ee:93:fa:9e:
ef:eb:58:9b:84:5a:aa:ad:a1:6c:99:df:84:d2:ba:aa:ae:5f:
2f:3d:86:28:ad:b2:87:cc:a7:42:0c:cd:0f:74:4b:f3:9d:1e:
41:79:48:86
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUa7AE++rzqTPta5VFZWaOBh2GQ9UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI4MDA0MDQ3WhcNMjYxMDI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BkN2NlZmYwM2M2ZTY0YWNlNTVjYjY0YmJhMzAxNTU4ZTU3
YzFlMzMzMDRjODBjNzg4NmY2ZWE3NWY0YTBhZDVjMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCx3X7HNCcyoQKcdy10nSmuo3qnbG5MEEEdvcdAFBmx3tVs
EmoH9D1oyuK1kTPrh1zYPUnYG69jCLmt/U4auAZjieAItAUpgeX1k8QmC3mkjx9k
duzr/b660vrkd8jzeyC5XzCeFD63Dorv8hbQAcc2Ud3AlavCSpRKyt/IspHXOaUM
EeBVl+MZK1vFIEAXhAcCNbzegNkn9x7ivuGnNPherxZK+odqSCLMFte/mKEpgqfj
HkOzhiAXuk4fQoIKNbWXB5X9wjOiV1YqXG/HX89TjlhuF+8n8ldRWVqgRe8luaaE
ZHngHTF4ENaeFL6SC7UmRKDqF6Q9Q8i8EdfFIuxNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUS90ZowYIXT8y4cG4jsD217NunNAwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2M4MWVjM2I2LTlkODQtNDA5My04ZDBjLThlMzUxMTYwOGRiZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0XxwwDQYJKoZIhvcNAQELBQADggEBAJ9f1jJQ/hfoEQnwHBd7YiJKAu0v
tqrR+SGFjcT8itWT2ikeUs/ArQHUDSKohwRr1UM6LtfbqlUs6rzGIhONjfLMJs6m
PU2JuhQx1hBZDXQwUj5IfPrVvZCESu4GN3u/YdkXilHIlslGfqzKBJo7itlu3ZXG
0o+MsUEHWX4bvQPwtoKbMU/xlroDfdr+6PKrIxrFhlFAUHQGnXWzO4QPDQJMXiKA
q8kTHoAK4LRWrUf1GF7Y2sYzdfN7bU/F9f8kr81yUd2+qaIbnZeMpANLzwG3L/iG
7pP6nu/rWJuEWqqtoWyZ34TSuqquXy89hiitsofMp0IMzQ90S/OdHkF5SIY=
-----END CERTIFICATE-----
Generated at Sat Aug 8 07:01:16 2026 by rpki-client