
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd757d1a-f3b0-4f5e-afdf-1b8cd6b968ee.roa
File: cd757d1a-f3b0-4f5e-afdf-1b8cd6b968ee.roa (raw, json)
Hash identifier: 19+a44yM0SWa+TkiDh1PNMvn5G/7+Gn01oh3Cy/cacg=
Subject key identifier: CE:1A:76:18:BF:D2:2D:5A:F5:3D:16:57:73:6D:71:7D:BD:08:3F:0D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 49DE58C4EECA0680FED7EBAD6D53891E7556521F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd757d1a-f3b0-4f5e-afdf-1b8cd6b968ee.roa
Signing time: Tue 19 May 2026 01:10:53 +0000
ROA not before: Tue 19 May 2026 01:10:53 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 158.141.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:de:58:c4:ee:ca:06:80:fe:d7:eb:ad:6d:53:89:1e:75:56:52:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 19 01:10:53 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=9730eb3c45c4245654c3bbbe773218b5c923b0608c07841718957320436c7876, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:99:e4:bc:bf:23:6b:ce:ef:02:d1:f5:0a:1e:
06:91:32:f5:dc:37:f6:12:cc:5b:28:e9:f7:9c:b6:
b2:0e:55:61:25:f7:47:04:cb:cc:fb:65:b0:8c:c6:
95:b7:6b:db:45:f6:8e:ad:6a:4e:b1:f1:3b:ba:8d:
23:82:2c:31:f4:49:be:9b:d5:be:07:0c:d7:f7:b3:
ec:87:a8:2c:7b:e7:c6:60:e7:33:df:8e:4d:63:cc:
52:01:25:af:86:98:d4:a4:20:39:3b:28:cb:d1:d9:
f7:ac:cb:e7:86:5f:b8:c0:cd:38:8d:25:89:4b:77:
85:77:22:2e:44:17:f4:97:fe:c4:30:da:eb:9b:64:
81:10:c6:8a:50:de:e3:f2:ad:50:6a:30:f0:b5:a7:
dd:09:9b:8a:c9:dc:43:7e:d8:cd:0c:8a:ff:b7:c9:
4b:37:8f:bf:66:7e:8a:87:35:86:f7:9d:ab:35:3a:
ba:6e:43:af:76:f1:96:e9:eb:7c:78:a5:b7:0b:9c:
b6:ee:e2:91:91:d9:d5:ac:59:30:d3:02:01:08:ce:
c8:76:f9:33:16:99:63:ff:ab:6f:53:2e:66:06:45:
d0:2e:37:84:7f:c9:3b:ed:0d:f6:b2:00:7b:29:d5:
a8:b8:ca:90:11:74:d5:bf:73:10:60:52:90:8c:17:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1A:76:18:BF:D2:2D:5A:F5:3D:16:57:73:6D:71:7D:BD:08:3F:0D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd757d1a-f3b0-4f5e-afdf-1b8cd6b968ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.141.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:e6:a5:bb:04:30:c4:12:b2:75:e4:ee:23:96:b7:7b:96:b0:
55:fd:91:54:18:b5:ba:7d:c0:e4:0c:73:82:c3:18:92:c1:3a:
d0:d4:fe:45:2b:1f:6a:89:f7:c4:09:24:f1:16:96:25:c5:a8:
a6:16:03:9f:ac:3e:c0:f6:37:44:ec:49:83:3d:57:49:db:ad:
c2:ba:e9:ad:5a:fb:35:1f:b0:94:60:1a:1b:df:43:66:51:67:
77:1f:66:97:7f:1d:4a:8b:9d:e0:a8:56:a0:91:fc:8d:fd:61:
f2:d8:96:4a:55:6c:67:43:91:28:b4:6d:8f:d5:53:2c:e9:83:
e7:37:56:a5:f2:5e:b2:42:d7:20:95:ce:d5:06:cd:7e:fc:31:
0f:ab:08:07:87:67:e6:ac:b3:76:ed:48:35:6d:b5:08:e0:a0:
d2:0c:c8:d4:ff:08:34:11:85:9f:e8:96:91:4f:7a:55:39:5c:
9e:4e:9f:f0:c1:a1:45:b5:55:27:9a:73:84:fa:8f:2d:34:a5:
53:76:ba:45:da:85:fe:8a:17:af:c6:9d:1e:7f:3a:88:b3:5c:
5d:22:e6:e0:43:5a:a2:7a:60:40:40:29:ac:a3:a3:60:8a:75:
c9:53:89:dd:db:b7:94:d1:99:4c:94:cc:90:21:d7:fd:12:c6:
e8:77:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:47:41 2026 by rpki-client