
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3446807-54fa-46e2-b8d5-9d8328bad7de.roa
File: d3446807-54fa-46e2-b8d5-9d8328bad7de.roa (raw, json)
Hash identifier: abiPVwY4Q/5oCibza3xBpLl3uXxfYVA8btKPn3pcl2c=
Subject key identifier: 6A:AE:FA:28:C4:7E:65:46:A5:AB:D9:6D:38:9E:38:CC:7F:DD:CD:19
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 54D1011AB2E5174E64D0C73833B8F7C5889B90AA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3446807-54fa-46e2-b8d5-9d8328bad7de.roa
Signing time: Fri 15 May 2026 03:40:12 +0000
ROA not before: Fri 15 May 2026 03:40:12 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.247.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 31 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d1:01:1a:b2:e5:17:4e:64:d0:c7:38:33:b8:f7:c5:88:9b:90:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 15 03:40:12 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=a81f5ee67022e65091cb5ebcabd213b54fdeac3a52fd6ea2811854aa72601b84, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c3:7e:69:0c:8f:41:1a:ec:ed:66:e2:43:49:
bb:21:00:a6:17:8b:be:1d:00:1e:40:97:e1:da:e4:
1e:e6:6c:79:99:2c:7d:2a:6f:a7:e8:4b:7a:fa:b8:
f6:5c:10:de:70:0b:a2:23:24:ce:71:d7:4f:44:94:
e6:a3:cf:b5:df:ad:c8:ba:f0:c7:fe:85:5a:94:3d:
3a:2a:d8:04:8d:56:02:17:68:b9:d1:6d:8d:a8:80:
3c:3a:c6:24:44:b5:88:b7:88:2b:62:93:63:a4:be:
a5:c8:0c:f2:98:05:15:29:a9:3d:97:77:1e:b1:8f:
00:e9:d6:94:5b:70:9b:7c:98:84:0f:2e:08:6d:b3:
14:5a:e0:52:24:22:15:3e:1d:54:a9:a9:6d:1f:65:
b1:f9:18:d2:8c:44:dd:34:8b:11:94:f6:97:a4:6f:
c0:e8:87:67:fa:aa:04:d9:f9:69:dd:34:c9:30:0b:
e1:2e:dc:e3:a9:de:d5:34:fc:a1:eb:ea:60:c4:c6:
ff:5f:88:62:a1:89:ba:4b:ca:23:f7:92:db:cf:fe:
d2:c4:ea:37:e6:58:cc:4b:74:b6:15:e5:5b:bd:a6:
1d:b8:b1:c3:0a:84:5e:31:05:ff:68:61:03:c2:54:
ae:18:17:0d:3e:76:a5:f5:79:38:d5:23:f9:e2:24:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AE:FA:28:C4:7E:65:46:A5:AB:D9:6D:38:9E:38:CC:7F:DD:CD:19
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3446807-54fa-46e2-b8d5-9d8328bad7de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.247.176.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:81:08:f7:c2:a9:0e:72:51:cf:6a:f9:02:d8:52:24:6d:e0:
66:70:61:ec:e9:6e:d6:91:e0:bc:65:65:72:ed:e0:56:ea:29:
ac:ef:7d:61:9f:8f:b1:2d:f0:bb:4c:25:12:90:29:9a:d6:8d:
0a:85:d7:a1:72:71:f4:0a:af:0d:b4:ec:df:59:a5:32:d4:27:
bb:5b:0e:b5:6c:f2:22:b8:e4:c9:1b:a4:23:05:82:76:4c:25:
14:9c:b0:c8:d7:da:53:c4:46:02:d3:f1:38:19:b5:fe:b6:8c:
27:a2:da:f5:7f:de:db:25:5d:74:17:76:85:ae:48:19:ff:45:
18:dd:62:d7:89:29:7a:b2:bf:51:1c:ee:84:96:a0:6b:69:58:
fd:67:80:96:60:4a:28:60:b5:f5:ff:42:ca:9a:94:84:39:00:
c3:bb:22:97:20:9b:e1:dc:8c:c5:4e:d6:29:0a:5a:7f:d4:6c:
d9:ea:7b:f3:1a:57:7d:45:78:a7:bb:4b:f2:9e:b6:cb:96:c9:
25:c7:6d:12:b7:c6:45:2b:bd:34:56:98:d1:d2:8d:aa:ac:3a:
a8:35:3b:59:98:96:67:b1:75:74:a2:d0:13:82:c6:2e:5f:8c:
d8:f1:13:1e:cc:b1:89:d4:58:67:4b:10:fe:58:71:a9:f2:ef:
51:c6:28:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:59:04 2026 by rpki-client