
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d227eb6a-a15c-4284-b425-102d04b80a6f.roa
File: d227eb6a-a15c-4284-b425-102d04b80a6f.roa (raw, json)
Hash identifier: GNt1KG/gFbafgODHKEFRrMpvCgT35y6Pa+J4Peb7TvQ=
Subject key identifier: A5:FC:A3:AE:B1:84:7B:4B:08:37:2B:BD:2D:21:F2:59:C6:72:DA:00
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 073D96101D1C5B96400B2B600420490F3C930CE3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d227eb6a-a15c-4284-b425-102d04b80a6f.roa
Signing time: Fri 15 May 2026 03:41:10 +0000
ROA not before: Fri 15 May 2026 03:41:10 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.245.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:3d:96:10:1d:1c:5b:96:40:0b:2b:60:04:20:49:0f:3c:93:0c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 15 03:41:10 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=098f520bcc3fedf2f04fd6136d8698b3eb6a56913311f9f821b0252d97da1d8e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a1:16:ea:66:1b:91:2f:c7:0c:74:f3:98:27:
d8:75:5b:93:63:2b:9c:c9:20:9c:bc:eb:ed:a1:46:
d5:39:52:ea:62:43:65:e3:e6:4b:24:81:af:23:cd:
f9:8b:53:ab:97:d0:a0:06:a8:49:9d:56:15:a3:90:
96:e2:21:35:0d:6b:21:6d:28:4d:29:73:4e:c9:f2:
9e:b6:73:37:f4:50:9b:61:8d:6e:40:38:f9:5f:da:
2b:c5:ba:54:0a:e9:4d:ba:5c:8e:b9:ca:01:17:fa:
2d:c4:8d:7f:78:89:79:88:b2:41:9e:86:3f:bb:9a:
af:29:29:d7:82:4c:3d:6b:93:a4:5d:48:e2:58:58:
9f:36:26:68:57:b7:92:f5:54:de:29:6e:c1:2a:a3:
b3:de:06:9a:67:70:07:96:ad:69:fc:c6:94:10:f8:
81:a4:31:16:01:8c:06:36:fa:d6:50:8e:81:c5:2a:
e6:7c:ab:3d:33:0a:98:3f:09:cd:8a:84:d8:0e:ed:
62:46:c3:0c:4d:5a:d4:39:4a:e1:1b:67:6c:98:b5:
d1:44:4e:ad:b6:14:d0:00:1d:d8:be:30:15:d5:9a:
62:ba:4a:16:c2:46:85:de:da:32:2c:71:63:ad:b7:
93:94:0f:1d:20:89:d4:cf:c5:25:f1:06:ec:cf:6f:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FC:A3:AE:B1:84:7B:4B:08:37:2B:BD:2D:21:F2:59:C6:72:DA:00
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d227eb6a-a15c-4284-b425-102d04b80a6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.245.128.0/17
Signature Algorithm: sha256WithRSAEncryption
93:42:ad:83:7a:70:f8:7f:33:3d:62:08:6d:4c:e1:43:57:22:
47:96:8d:cf:c4:a1:b7:9d:1e:45:58:38:5e:61:e3:29:78:02:
88:33:e1:10:f5:9d:96:78:a7:bb:95:66:3a:8a:75:4e:36:79:
6e:49:cf:47:82:3a:66:fa:1d:8e:01:3d:f5:0d:51:2f:89:1a:
48:79:5e:44:3d:61:2f:c5:f8:0e:c2:4e:89:af:11:16:67:32:
27:c9:f5:97:22:da:87:13:a9:ff:c4:73:f1:20:e8:ad:30:fa:
68:d5:bc:c9:bb:b0:4f:49:b8:83:2b:10:67:4c:1f:db:fa:70:
80:c6:05:ab:46:76:7f:06:e2:c7:8e:b8:23:e1:75:74:0c:93:
c6:e6:8d:c1:fb:f8:31:44:ea:03:57:9c:1a:c1:d7:a4:92:f8:
1d:53:38:7b:e7:04:53:24:47:d5:fd:b1:d1:58:91:97:e9:49:
2b:ab:c3:27:ba:72:0d:ea:09:4e:a7:71:8f:8d:81:84:1c:f4:
75:3c:94:af:56:d6:59:0a:a7:7d:68:a2:12:01:81:6a:8f:a9:
cc:b3:e3:54:d5:f6:ce:78:3f:5c:c1:bd:d1:04:11:c6:e3:e3:
a7:dd:e5:de:f4:8e:06:45:83:b5:3c:d9:2f:88:4c:f5:c2:79:
a6:20:96:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:49:51 2026 by rpki-client