
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8e8d618-e946-4e41-991f-4a24eca02516.roa
File: c8e8d618-e946-4e41-991f-4a24eca02516.roa (raw, json)
Hash identifier: exWoNruf89BjmvfTKBQz5zfIOF9ldLs+tLu41Ubwyxg=
Subject key identifier: DB:69:3A:17:78:D3:73:48:EE:7D:EB:9B:B1:0A:99:98:1A:5D:24:FA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 431814CB1FFA423D7AE95DEC404C4E8DC8EEF427
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8e8d618-e946-4e41-991f-4a24eca02516.roa
Signing time: Sun 02 Aug 2026 01:10:12 +0000
ROA not before: Sun 02 Aug 2026 01:10:12 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.40.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:18:14:cb:1f:fa:42:3d:7a:e9:5d:ec:40:4c:4e:8d:c8:ee:f4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 2 01:10:12 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=529f342174388feade6f1b2dad0a86e37d6ac179585bd83aa0819ce0051ff44d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1c:8e:19:b4:5f:3e:bc:49:a2:68:91:3e:05:
96:c4:e0:21:6b:4d:dd:7b:40:6d:d3:05:c3:62:e4:
9e:3c:21:83:b5:92:06:9d:1e:73:55:35:23:30:da:
64:f2:85:e6:dd:27:fb:da:ef:f8:78:91:cb:6e:c4:
14:f5:86:ff:8a:f8:b5:4a:38:82:74:e7:b3:90:fd:
27:8f:ca:30:35:d2:b9:b8:e8:7d:b9:16:b4:7b:af:
bf:46:17:c8:05:11:f7:ed:fa:eb:1b:67:51:c2:a3:
44:b6:a9:f0:5d:41:e8:27:51:d3:da:00:ff:1c:8b:
1a:dc:2e:3d:79:12:0d:d4:62:0a:99:10:72:c0:c0:
72:b1:13:b8:e8:4c:4b:d9:f4:7b:b5:04:ea:0e:c0:
a7:41:c4:52:0a:19:09:39:29:69:a1:b6:97:79:7a:
af:98:6a:eb:e0:17:1f:2b:66:82:6e:41:95:3b:95:
0c:cf:ee:46:bb:f7:d8:ba:27:9f:e4:4e:d1:95:32:
90:76:c4:ee:e9:f9:be:9e:fd:e9:b5:59:c8:89:94:
58:db:14:d9:f6:07:70:c8:c5:5d:ca:ea:f0:83:25:
1c:d6:de:dd:f3:8b:8c:17:dd:ab:fc:1e:83:32:0a:
47:db:84:6d:64:63:fb:dd:30:af:02:77:5f:d4:51:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:69:3A:17:78:D3:73:48:EE:7D:EB:9B:B1:0A:99:98:1A:5D:24:FA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8e8d618-e946-4e41-991f-4a24eca02516.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.40.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9d:b1:26:8e:92:93:b5:fe:da:5e:a1:85:7d:5a:55:ac:58:23:
00:42:65:3d:a3:2e:d2:b5:15:0a:43:9a:c1:f5:82:cd:6e:ea:
aa:64:c6:68:f3:ca:d5:ea:d7:58:08:91:40:d3:e4:b6:ca:0e:
54:7e:90:2e:20:aa:de:b4:0c:18:c4:3c:ad:79:32:90:e7:5c:
86:29:30:21:de:cb:0c:68:ac:d7:88:25:08:3e:29:f3:cf:ca:
54:fc:93:cc:47:49:ec:83:4d:6c:e9:cd:4b:8f:27:e0:cf:bd:
64:cd:ae:50:91:8b:5d:73:53:37:94:6e:b5:60:e4:14:80:2c:
2b:f3:82:d8:ba:8e:b5:b3:e4:9d:a5:ca:b7:a9:3a:be:58:fa:
91:96:a9:40:23:14:6f:88:28:b9:9e:ed:5a:6a:ba:b0:98:5c:
35:4b:ea:b4:93:7f:af:32:be:56:6c:d4:12:eb:fc:97:30:49:
94:32:ab:e3:15:89:91:22:0c:5b:9f:4c:8d:96:a1:b0:e8:e7:
f0:b8:68:18:e5:7c:6a:19:8d:d2:02:84:67:b1:ac:b8:58:f1:
97:7c:48:1d:1b:8b:24:1e:87:fe:50:0b:9a:7a:ec:b3:94:aa:
a4:70:72:d1:58:53:41:dd:38:2b:ae:ca:c1:35:9b:64:bb:67:
21:9e:eb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 12:07:50 2026 by rpki-client