
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd64d62b-59e2-4450-8c59-bc2917e6add0.roa
File: cd64d62b-59e2-4450-8c59-bc2917e6add0.roa (raw, json)
Hash identifier: FdyNxgWoH8VJEmTZI59s5MJ4uuXAhSDhYq5WggHCiRo=
Subject key identifier: 03:B7:11:F1:F5:C5:B3:6F:31:4F:89:93:66:F4:43:7B:0C:38:A7:B3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 279F1CF56C437BD7D8EDEAD190EB24F5745018C9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd64d62b-59e2-4450-8c59-bc2917e6add0.roa
Signing time: Sun 21 Jun 2026 00:00:03 +0000
ROA not before: Sun 21 Jun 2026 00:00:03 +0000
ROA not after: Sat 19 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.5.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:9f:1c:f5:6c:43:7b:d7:d8:ed:ea:d1:90:eb:24:f5:74:50:18:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jun 21 00:00:03 2026 GMT
Not After : Sep 19 23:59:59 2026 GMT
Subject: serialNumber=780a741c4b13c172536b7a8d2a74c6130c5a432d836ba019cc5a3b16f2edfc02, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:52:87:be:78:64:73:83:91:31:28:d9:6b:
80:38:7a:10:a7:d7:77:cd:1c:97:e3:a8:ea:b4:b6:
dd:c9:8b:5b:01:51:67:50:ce:7d:80:c1:c1:59:22:
de:87:58:90:04:8f:44:fc:b7:4d:0f:da:3c:cd:3e:
cd:14:2c:dc:55:49:0a:4f:73:38:49:66:89:c5:40:
21:9d:11:97:cf:1e:a2:33:bf:21:34:b5:01:f0:2c:
4e:16:f6:c0:c8:8c:4f:db:fc:6a:cc:ca:0a:33:3b:
fe:27:a3:b7:18:37:32:ad:1b:fc:f2:b8:79:9d:87:
0d:ae:89:bc:76:a3:4e:8f:41:24:58:b5:fe:b8:26:
94:9f:40:0e:67:df:34:70:8b:f8:eb:a5:9c:81:84:
f5:33:62:40:f0:ea:5e:7f:af:13:26:95:83:cc:36:
bd:3c:07:25:be:cb:32:df:90:62:14:7c:18:d1:48:
0f:43:0e:f7:2a:23:d6:3d:39:1a:ba:f4:e5:72:65:
c2:48:20:8d:cf:7d:8c:70:8c:5e:ee:78:58:57:08:
a9:d7:c3:b5:d6:56:10:b9:32:fb:1a:42:d0:42:51:
13:92:fb:20:62:7c:5e:e8:e5:ba:0e:c3:9a:50:70:
bc:73:b5:15:42:5f:ff:51:6f:33:c5:b3:c7:84:20:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B7:11:F1:F5:C5:B3:6F:31:4F:89:93:66:F4:43:7B:0C:38:A7:B3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd64d62b-59e2-4450-8c59-bc2917e6add0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.5.74.0/24
Signature Algorithm: sha256WithRSAEncryption
54:9a:47:51:cd:17:c7:8c:4d:89:57:0d:46:aa:95:7c:07:15:
66:78:af:a0:97:27:d5:94:44:1b:7d:0e:5b:d8:3f:3b:00:0f:
ef:98:94:9c:0d:9b:ad:51:a4:e2:1f:3a:70:35:7a:dc:e6:1b:
84:90:f0:87:84:d8:0b:0a:bd:f1:ad:dd:52:c8:47:89:89:37:
e4:01:b1:6c:17:3b:54:88:04:9e:cf:bf:b8:ff:30:4f:21:90:
bf:d2:7a:48:7a:6d:c4:c4:e0:4a:14:18:8d:ce:c7:fb:81:0a:
bd:e7:a0:54:b2:a9:b9:f8:8f:b8:1c:12:ca:a5:0f:cc:a6:ca:
60:53:cb:93:6b:e2:56:13:8d:14:00:33:00:12:0d:91:9e:53:
0e:c4:4b:bc:8f:b0:34:a8:9b:ea:da:c8:0b:60:87:a2:ea:1d:
25:f8:0d:d7:0f:18:1c:72:c4:8c:77:ab:16:cd:42:84:9d:8b:
b1:b2:b5:ca:39:c8:f3:ce:72:78:ce:1e:78:32:96:b4:c4:fb:
ae:d3:53:cc:49:6a:dd:89:30:b1:92:ec:91:2b:7d:38:4f:a6:
4c:41:c4:94:b9:01:97:c8:e8:16:80:67:21:f0:8c:52:e4:fb:
8b:31:f0:a9:38:9c:13:84:8f:41:d0:3b:2b:82:52:d5:f1:d3:
74:55:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 06:46:01 2026 by rpki-client