
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa
File: ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa (raw, json)
Hash identifier: +EkzMLGziYQLhkHCHRQEDQk1f9FrXyEYCUtkr8Ha7HM=
Subject key identifier: 5E:F3:A0:8D:0D:19:67:93:25:77:F5:A4:8E:7A:9E:4E:57:A6:45:04
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 175CF9B66EB28F6595C60A0A863098460F6A8B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa
Signing time: Mon 27 Jul 2026 02:31:06 +0000
ROA not before: Mon 27 Jul 2026 02:31:06 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.170.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:5c:f9:b6:6e:b2:8f:65:95:c6:0a:0a:86:30:98:46:0f:6a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 02:31:06 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=0a169e1432fb5c87cb8cd315b29d51663c67d42560543a5086763d47f70b37ba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:88:23:02:bc:bd:fe:f5:04:9d:ff:99:ce:df:
ec:db:16:fa:77:8c:98:35:ab:2e:5d:90:0d:d9:aa:
50:5a:14:32:5a:0b:93:eb:b3:fd:d9:d0:f4:d4:6a:
dd:2e:fb:91:88:aa:f9:bf:37:77:c5:0e:07:7a:a1:
fd:90:bf:f3:90:e4:ad:11:20:e6:ce:21:54:13:8c:
85:de:48:28:a6:ab:26:3b:92:44:6c:40:62:a4:f1:
fa:b1:48:bc:9d:c6:b0:7b:5b:2a:4c:c3:eb:0c:27:
81:2b:80:2a:ed:68:18:64:93:19:cc:ac:70:ce:ba:
e2:96:28:90:2f:fc:b1:50:a3:62:60:22:c2:a9:27:
9e:28:6b:6a:c7:8c:b0:91:7a:15:ba:fe:48:a5:57:
19:22:1e:ab:ba:04:59:bc:19:4f:90:dd:3a:fc:86:
12:c5:bb:47:5c:52:89:1d:e1:bd:e7:14:2b:0e:e4:
5e:74:86:1b:47:6f:3d:8d:08:d7:b6:4c:31:0b:9e:
25:3f:21:6e:04:fc:24:88:a8:36:88:ce:a9:32:b9:
b7:8b:8f:8d:26:ff:94:5c:3c:eb:a7:46:9c:e8:dd:
80:5b:69:47:fe:a4:c9:82:02:66:cd:17:88:a3:83:
1d:83:c7:07:b7:6b:2f:8b:25:ab:43:d8:52:ca:0a:
67:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F3:A0:8D:0D:19:67:93:25:77:F5:A4:8E:7A:9E:4E:57:A6:45:04
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce4a44e4-0182-4d58-ab2b-2a1d1d18c02e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.170.0.0/15
Signature Algorithm: sha256WithRSAEncryption
ae:c8:13:8a:26:6b:10:31:2a:7b:74:09:9d:72:db:a9:07:7b:
ec:de:04:be:1d:ef:86:02:82:7d:bb:da:de:f3:ce:62:8b:f9:
bd:dc:04:3b:12:c5:a3:43:59:1f:23:91:e6:52:95:6b:7c:68:
42:12:8c:bc:59:f9:9e:7d:24:ff:f3:6c:a1:fe:89:88:95:31:
fd:89:95:28:c2:18:52:f7:dc:0a:b1:45:25:c0:33:16:98:18:
de:68:85:8f:63:18:ef:34:18:03:f6:a1:76:be:a3:33:ae:1a:
71:7a:c2:ff:f6:4e:b5:e3:0f:9f:0b:70:f7:92:44:39:75:33:
c4:ef:c5:6b:32:58:15:40:c8:18:fa:97:e1:dc:e5:40:0f:71:
a2:ca:f2:4b:6f:78:88:c3:f1:87:f7:29:9c:29:14:17:fe:7a:
45:2f:04:2b:4b:93:0b:94:c7:c0:6d:c3:64:58:c5:44:7c:5f:
67:cb:ce:0c:85:79:38:08:45:b0:46:d5:82:e7:bc:a8:c9:cd:
09:6f:85:a5:57:43:db:0c:e2:01:c6:46:e3:49:76:f0:f1:6b:
75:a2:ed:23:84:70:d0:d6:b1:53:51:2e:0d:c7:a5:45:13:67:
36:e9:9b:4f:b7:3b:49:a4:08:86:33:c7:f7:ea:f6:28:81:c1:
ef:56:45:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:00:41 2026 by rpki-client