
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9ee27b7-1b8f-47bf-aec1-3f1055f8bc7b.roa
File: c9ee27b7-1b8f-47bf-aec1-3f1055f8bc7b.roa (raw, json)
Hash identifier: qu5C51yJgkyS4xHaypk6aEoCW4kSS4ZZ2arw9olhVAE=
Subject key identifier: B3:0B:AE:54:8C:2F:F3:1B:79:BA:5C:12:30:75:67:E0:D0:25:94:AD
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 58BFD547CDB460E78FDB28A96A5D89C836DB870A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9ee27b7-1b8f-47bf-aec1-3f1055f8bc7b.roa
Signing time: Sun 17 May 2026 01:30:57 +0000
ROA not before: Sun 17 May 2026 01:30:57 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 161.188.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:bf:d5:47:cd:b4:60:e7:8f:db:28:a9:6a:5d:89:c8:36:db:87:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 17 01:30:57 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=216a7e75a6f856cefc8f6ac46aafca8c8b18e38c049ba61a2d3abe26a6f94e90, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:40:f2:44:41:cf:63:dc:51:c7:51:49:e6:
93:3c:67:70:82:65:60:5b:8b:45:8c:64:a6:78:8f:
9e:32:55:c4:7d:65:e2:ac:ff:31:07:11:dd:b6:91:
07:fc:96:ab:19:6f:89:32:f8:a7:34:57:61:ab:7b:
df:57:06:99:9f:e9:f2:7b:21:3d:ca:26:77:bc:5d:
b8:98:3f:2c:48:68:ba:e4:bc:67:79:1c:77:a7:85:
43:55:d4:31:60:9c:39:92:31:00:35:17:73:47:10:
ad:ec:1e:a5:42:e0:66:f3:89:7e:e0:64:f6:06:0e:
33:ec:d9:2e:85:b4:e9:1e:f8:e3:4d:ce:f6:ec:c2:
2c:e8:e4:e5:19:f3:6b:fc:bd:f1:e0:68:f4:4c:72:
0f:91:01:8e:1e:f3:91:50:c4:b3:21:bb:07:8a:f1:
27:db:91:59:56:89:b3:fa:8f:b8:12:d1:54:b4:ef:
42:e8:d5:c8:c7:b0:ee:7f:c8:36:e1:05:ca:fc:ec:
f7:a6:cb:15:0b:86:31:f9:5a:4d:bd:63:f4:e6:08:
3e:eb:55:2f:d3:34:52:82:db:74:d0:0a:95:63:1d:
ac:7a:9b:ce:c9:32:ba:a6:76:47:0c:a1:8f:20:8a:
16:63:72:03:82:29:51:77:f3:f8:3e:85:5f:a2:c9:
b4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0B:AE:54:8C:2F:F3:1B:79:BA:5C:12:30:75:67:E0:D0:25:94:AD
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c9ee27b7-1b8f-47bf-aec1-3f1055f8bc7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.188.182.0/23
Signature Algorithm: sha256WithRSAEncryption
74:b0:f1:f6:9a:0f:f1:41:5d:f9:f8:70:c9:3e:ff:9c:5e:00:
c4:5d:e0:d0:df:aa:63:d5:6e:fc:e9:f2:e8:bb:59:93:a5:77:
b6:2d:b4:93:8d:f9:05:e1:39:58:93:4c:58:7d:f0:62:b5:35:
fa:1e:2b:14:c1:e8:d8:08:71:12:47:30:30:9e:04:51:41:cf:
d0:c4:d9:bd:34:86:93:93:3f:c2:96:7a:c6:69:dd:7e:dd:36:
0f:99:85:76:49:3f:d0:20:06:43:a1:12:f5:ee:75:a9:a8:65:
9a:d1:09:ae:4d:f5:d2:4d:9e:2b:6b:d5:21:cd:14:df:c1:96:
80:c8:09:5c:dc:11:d2:a3:33:a7:c2:a2:30:59:57:0f:7a:cc:
b6:50:f9:42:8c:93:2f:4f:fa:dd:47:05:80:46:ba:d9:78:0a:
d7:8b:dd:73:bb:f6:9a:e0:0d:03:31:43:1a:f1:2a:c4:41:a3:
1e:ba:a8:e3:97:95:46:f9:ae:da:ae:59:1f:22:af:54:84:41:
2b:81:f0:ee:fb:42:26:f6:cb:5c:9e:91:cc:1e:22:6d:eb:55:
1b:66:ca:0c:08:2b:b6:b0:0f:ef:e1:df:9e:9a:b7:fc:0f:45:
f2:dd:16:c2:10:37:a4:43:ec:01:bb:2e:0f:4c:57:b6:66:ed:
ec:6d:e3:3f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWL/VR820YOeP2yipal2JyDbbhwowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE3MDEzMDU3WhcNMjYwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyMTZhN2U3NWE2Zjg1NmNlZmM4ZjZhYzQ2YWFmY2E4Yzhi
MThlMzhjMDQ5YmE2MWEyZDNhYmUyNmE2Zjk0ZTkwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxZkDyREHPY9xRx1FJ5pM8Z3CCZWBbi0WMZKZ4j54yVcR9
ZeKs/zEHEd22kQf8lqsZb4ky+Kc0V2Gre99XBpmf6fJ7IT3KJne8XbiYPyxIaLrk
vGd5HHenhUNV1DFgnDmSMQA1F3NHEK3sHqVC4GbziX7gZPYGDjPs2S6FtOke+ONN
zvbswizo5OUZ82v8vfHgaPRMcg+RAY4e85FQxLMhuweK8SfbkVlWibP6j7gS0VS0
70Lo1cjHsO5/yDbhBcr87PemyxULhjH5Wk29Y/TmCD7rVS/TNFKC23TQCpVjHax6
m87JMrqmdkcMoY8gihZjcgOCKVF38/g+hV+iybR3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUswuuVIwv8xt5ulwSMHVn4NAllK0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2M5ZWUyN2I3LTFiOGYtNDdiZi1hZWMxLTNmMTA1NWY4YmM3Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAGhvLYwDQYJKoZIhvcNAQELBQADggEBAHSw8faaD/FBXfn4cMk+/5xeAMRd
4NDfqmPVbvzp8ui7WZOld7YttJON+QXhOViTTFh98GK1NfoeKxTB6NgIcRJHMDCe
BFFBz9DE2b00hpOTP8KWesZp3X7dNg+ZhXZJP9AgBkOhEvXudamoZZrRCa5N9dJN
nitr1SHNFN/BloDICVzcEdKjM6fCojBZVw96zLZQ+UKMky9P+t1HBYBGutl4CteL
3XO79prgDQMxQxrxKsRBox66qOOXlUb5rtquWR8ir1SEQSuB8O77Qib2y1yekcwe
Im3rVRtmygwIK7awD+/h356at/wPRfLdFsIQN6RD7AG7Lg9MV7Zm7ext4z8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 04:48:32 2026 by rpki-client