
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cad4c2e4-0c69-4360-b210-888b69b3c00e.roa
File: cad4c2e4-0c69-4360-b210-888b69b3c00e.roa (raw, json)
Hash identifier: bMXDl/FgBpvyQ511uR7/wiYNy1JhFikOSP0HPRtHjeA=
Subject key identifier: E8:5F:F8:9B:20:2D:0F:D9:B1:A0:93:D7:B9:47:D7:C8:17:C7:59:7A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 545A26CA6DF76299872E21FFE6E255201ACDB95B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cad4c2e4-0c69-4360-b210-888b69b3c00e.roa
Signing time: Tue 19 May 2026 03:20:59 +0000
ROA not before: Tue 19 May 2026 03:20:59 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.140.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:5a:26:ca:6d:f7:62:99:87:2e:21:ff:e6:e2:55:20:1a:cd:b9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 19 03:20:59 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=9096720e15d64b80eb264752b667129b20ec0b9d091f92e9ed421b7a4ae2383e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:3b:68:5f:ed:2c:2d:b5:32:20:36:8d:72:
a8:de:79:0b:7b:2e:94:b8:04:2d:9d:bf:31:b9:8d:
68:67:4d:67:9b:5a:6e:cc:e7:01:fe:22:ca:b4:fc:
76:97:86:d1:ef:70:a8:4f:b0:18:51:e5:45:ce:88:
06:2b:a3:57:ca:e0:06:33:52:2d:d5:df:be:1f:bf:
b8:79:69:07:79:43:9c:4b:65:e8:ef:70:50:b5:5f:
17:71:46:fe:65:9d:b4:a6:f6:78:5d:4a:0c:7a:c3:
d9:22:64:29:22:8b:ba:ba:0d:0a:0d:73:16:c1:23:
d1:0e:be:93:8e:b1:4a:05:88:8e:13:cd:d6:a7:b6:
f9:69:5e:3c:81:46:40:98:d9:83:41:6f:20:84:cf:
a2:d0:70:46:fb:fe:4b:79:cf:9f:32:1e:23:55:b3:
bb:be:4f:f1:4d:e2:92:34:c6:61:c5:ae:79:fc:88:
55:15:1c:d3:42:32:86:1a:ae:af:28:26:b2:eb:08:
ea:59:41:45:b8:c7:78:52:24:40:f4:16:7a:4a:a2:
46:db:ce:8c:c6:a5:77:ac:b2:3d:67:ad:da:9e:b9:
72:59:92:b5:d2:3a:6d:0a:9c:2f:e6:69:29:32:30:
00:6f:96:a7:8b:b7:58:12:81:be:93:04:1d:90:97:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5F:F8:9B:20:2D:0F:D9:B1:A0:93:D7:B9:47:D7:C8:17:C7:59:7A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cad4c2e4-0c69-4360-b210-888b69b3c00e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.140.0.0/14
Signature Algorithm: sha256WithRSAEncryption
b4:94:ae:6e:e1:ef:df:6a:49:42:0d:79:86:12:70:66:3b:30:
22:29:11:ce:14:d1:0d:76:83:85:fe:c3:6a:9e:20:06:17:1e:
bf:74:e9:2b:81:ee:28:89:2e:c9:11:28:f8:24:f8:2f:bf:eb:
00:31:73:91:69:f7:ef:a5:50:46:a1:62:01:87:1d:8f:4a:8b:
74:19:b0:14:f1:1b:06:3a:eb:24:a0:b9:64:9c:ac:e4:f5:e5:
18:ba:21:91:fa:e3:ff:8b:28:7c:78:c9:0a:4d:68:da:5b:a5:
a9:1f:de:f5:4c:93:04:aa:80:27:7a:ff:be:36:d5:69:90:9d:
97:67:85:89:e5:55:fa:2d:c5:c1:9e:a4:d3:8e:12:b4:20:c4:
ae:25:56:e1:fa:d0:ad:de:62:8e:f2:eb:bd:81:3a:c6:79:3e:
04:8f:c1:9b:f5:78:3f:91:7f:00:bc:12:d0:07:4a:5f:9e:33:
91:e6:03:bd:bc:43:1d:97:0c:31:87:25:72:09:02:9f:1b:63:
d3:14:54:46:5b:d6:7f:9f:19:5f:25:f0:5e:40:ab:45:44:2e:
56:f1:5d:21:98:68:a2:fe:5a:50:d4:7e:10:35:24:b8:6e:7f:
a7:99:2e:78:81:c0:85:97:19:1c:29:c2:37:78:cc:b2:a0:bd:
be:ee:12:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:51:18 2026 by rpki-client