
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8e05fde-8d06-43e8-b4c6-cb31f1c7e153.roa
File: c8e05fde-8d06-43e8-b4c6-cb31f1c7e153.roa (raw, json)
Hash identifier: dLHs0FU3yN3jltIl3sdWTIDO5g7iQ1d5WdBOu4+h5A4=
Subject key identifier: 5C:86:7F:43:D9:9B:42:31:A1:81:FD:7E:8E:C6:71:74:05:29:EC:E4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 67A56799D4580857F9BB214443F2496FED95F194
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8e05fde-8d06-43e8-b4c6-cb31f1c7e153.roa
Signing time: Tue 24 Feb 2026 03:00:53 +0000
ROA not before: Tue 24 Feb 2026 03:00:53 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.198.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a5:67:99:d4:58:08:57:f9:bb:21:44:43:f2:49:6f:ed:95:f1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 24 03:00:53 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=6214e5af3116e761337c30e40e383fe3cb89594779630ac443500c1ddbacc793, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:fd:69:8b:09:aa:c6:0d:52:53:de:9a:05:
e6:98:59:dc:bb:b0:d6:f7:a6:bb:a2:d0:2d:5c:fd:
ad:91:1c:b8:31:b7:a5:68:28:b2:9f:c7:84:b9:67:
5c:e3:5a:b2:fd:a0:98:42:fb:9a:e5:c6:e6:cd:eb:
6e:fc:e8:c6:a7:a8:d6:23:91:5d:96:0e:53:dc:31:
f6:b0:61:2b:8f:21:34:36:f4:a4:bd:36:72:49:05:
c7:fa:a2:3e:9d:74:5a:33:64:cc:bb:61:f3:cc:8f:
7c:e4:6d:20:1e:3a:b4:47:2a:14:a0:06:9d:97:91:
f6:f5:88:7a:1a:b1:ff:41:9b:5f:44:ab:c7:4f:ad:
ad:14:ab:77:7b:80:b9:d9:3e:9e:66:27:c1:04:66:
5e:be:7e:7a:46:b5:21:d2:0e:55:04:6d:cd:ac:11:
7a:36:de:b2:6c:8e:64:0d:ec:16:16:9c:4d:90:b3:
4c:7d:ac:85:d8:cb:01:3f:97:b8:71:09:b2:71:78:
1f:e4:7b:8b:c6:27:72:83:49:c3:6a:f6:2b:42:21:
26:b7:55:a6:86:61:f9:7a:83:00:8b:da:39:5b:1e:
f2:57:75:df:6e:82:0c:3a:d0:4b:d6:69:74:4a:24:
ea:6d:94:1c:53:f9:45:6a:23:d9:ca:fe:d3:50:a7:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:86:7F:43:D9:9B:42:31:A1:81:FD:7E:8E:C6:71:74:05:29:EC:E4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8e05fde-8d06-43e8-b4c6-cb31f1c7e153.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:5d:90:dc:51:81:12:1f:91:f5:e0:b4:78:75:e9:19:be:83:
ba:21:6c:e6:97:09:d9:a5:33:7e:83:c9:7c:de:68:91:fb:66:
23:51:a2:5b:96:9f:ab:3a:bb:fb:0d:89:32:59:52:6b:ee:65:
bb:7e:54:02:4a:7c:c9:3c:69:22:fb:ff:51:e6:ea:2e:ca:da:
96:e5:9a:17:e1:39:1d:a4:0f:aa:56:44:7d:d5:21:a9:b7:33:
ef:be:53:ac:87:44:38:2b:7b:33:24:b5:81:fb:eb:52:c2:a3:
d9:2c:e6:60:68:e0:b0:c7:1e:5e:24:ee:98:c3:94:b3:54:d0:
c3:d5:34:87:95:1c:c4:5c:45:b1:0b:88:00:10:6a:6b:d5:c0:
2a:6e:c1:4e:54:68:e5:76:2f:ae:07:58:2b:ce:c8:60:c5:76:
bb:ca:0b:da:38:ba:e6:2f:1f:b8:f3:11:70:8c:e6:21:fe:b4:
86:5b:d6:ea:33:fa:42:97:46:7e:a5:72:ec:9d:a8:ce:48:75:
2d:91:8c:09:5a:e6:e1:61:e7:fb:3d:27:5c:85:e9:8b:fc:5c:
8a:d9:38:c0:da:6f:32:1b:44:b1:aa:c0:e4:34:cb:70:24:ad:
d3:61:d0:fc:6c:6b:54:cb:d9:40:b5:ce:e3:72:db:27:97:fe:
9f:41:71:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 02:05:07 2026 by rpki-client