
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce5c78d7-59ef-4c1e-8f82-e7d15de1174e.roa
File: ce5c78d7-59ef-4c1e-8f82-e7d15de1174e.roa (raw, json)
Hash identifier: NYYTJgQRYSqA167JGjqF7uNC6vAjU/hm/BpUWbF2q+U=
Subject key identifier: 75:BC:5F:44:86:A0:27:00:14:AC:64:5F:1B:6C:3D:C4:E8:14:91:2A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2225BEB3990CED4D9787BC960F51580852C4EEAB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce5c78d7-59ef-4c1e-8f82-e7d15de1174e.roa
Signing time: Sun 02 Aug 2026 00:50:43 +0000
ROA not before: Sun 02 Aug 2026 00:50:43 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.68.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:25:be:b3:99:0c:ed:4d:97:87:bc:96:0f:51:58:08:52:c4:ee:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 2 00:50:43 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=4fd7b0a371e253017ac0a1a822e2bcb31716713d087d038cf6fba9c58fbb556b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:4d:4f:a7:db:1e:5c:c3:e2:b8:ce:88:f4:
52:28:76:3b:94:6a:1f:11:ed:41:d0:e6:47:69:f0:
91:df:27:6c:59:2d:f1:4b:5e:f6:b2:9e:94:71:c5:
7c:94:55:1b:24:7f:6d:e4:23:b2:d9:c4:6b:e8:2b:
e5:fd:cf:cf:07:ad:ee:b2:32:ac:ce:e7:f0:48:09:
79:33:64:09:7e:f7:e1:32:59:6e:29:af:e9:85:22:
53:4a:b2:96:f9:c7:49:6e:ac:ba:df:a4:27:ae:80:
8c:25:22:3b:c4:3b:99:33:99:0f:1f:ea:b8:07:5f:
a9:00:f9:1b:70:75:5a:53:97:5f:f0:21:ad:19:f9:
1b:90:e8:d7:67:d8:1b:c7:bb:7f:d1:71:1e:6b:17:
c4:ef:c2:b7:b4:e4:9e:9a:c8:c2:b2:8f:66:cf:d6:
93:6b:6a:a7:79:c3:48:31:05:1f:7e:60:48:06:af:
10:25:7b:f0:6a:7d:3c:4b:6c:a9:30:23:db:3a:c1:
54:25:54:54:09:d1:b7:0c:59:40:75:23:6b:5f:4b:
30:5c:ba:1f:9a:68:4c:73:4e:4a:c5:4a:fc:c9:c1:
46:80:c7:d3:82:0d:a4:2f:f6:e5:7e:c3:82:7c:b8:
af:ca:64:ad:11:f5:64:5b:4e:48:f4:b9:5d:dc:c6:
06:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BC:5F:44:86:A0:27:00:14:AC:64:5F:1B:6C:3D:C4:E8:14:91:2A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ce5c78d7-59ef-4c1e-8f82-e7d15de1174e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.68.196.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e3:c5:27:10:cb:f6:97:b7:cd:93:43:c0:da:3a:45:e9:a7:
a6:2a:70:64:54:68:08:fc:4c:9f:fb:be:30:e8:8f:62:d5:c2:
25:29:44:bb:7a:5f:74:ff:a9:b3:51:e8:7e:8d:1b:c3:90:b4:
01:98:79:49:3e:6d:b5:19:10:9e:41:79:f7:15:89:dd:88:89:
72:37:5a:c5:3b:86:a0:e7:2e:ce:3f:37:d4:7d:28:ad:9f:e4:
ad:a2:47:62:a0:c6:f3:4d:7b:87:44:58:f8:35:f3:d4:44:4d:
18:38:79:0c:64:45:1f:93:66:e6:99:d7:4f:0f:92:bf:fb:83:
c5:b2:39:b6:91:cb:f4:5f:4f:46:e1:07:aa:c8:31:e1:34:a1:
e4:8b:06:d2:15:82:99:66:b4:26:13:1d:8b:0f:16:a9:c1:96:
70:70:e1:3f:c0:88:90:b4:0d:ae:31:b5:36:4b:c9:59:75:58:
e7:cf:2d:55:d6:2e:23:a5:a1:0b:00:c2:ca:6d:df:0a:d8:91:
7b:70:fe:52:15:5b:b4:8b:bb:e9:38:98:99:d9:70:ea:ca:0c:
9e:5e:39:e3:aa:a6:cb:a4:61:c6:98:0a:13:64:7a:10:cb:40:
02:4b:62:04:13:73:e2:36:a6:38:12:91:19:d3:f4:c0:19:62:
de:f1:71:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:59:31 2026 by rpki-client