
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d37ab758-c8d0-4ff6-ba08-8b25b7b052dd.roa
File: d37ab758-c8d0-4ff6-ba08-8b25b7b052dd.roa (raw, json)
Hash identifier: kCEaT4Cd5SBSN9IapAfiFhDoq6xC32UQO18IoVN+Vlg=
Subject key identifier: E9:77:C4:F1:C2:7F:2A:F4:FC:50:C3:38:C1:C9:11:8A:7D:8E:C3:3E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 44FA5ACFB402AFF20A7DA3801284F556E4216B25
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d37ab758-c8d0-4ff6-ba08-8b25b7b052dd.roa
Signing time: Fri 15 May 2026 03:00:09 +0000
ROA not before: Fri 15 May 2026 03:00:09 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.197.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 31 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:fa:5a:cf:b4:02:af:f2:0a:7d:a3:80:12:84:f5:56:e4:21:6b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 15 03:00:09 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=2a0ed240f89a762a690350757b1af7bcabb0219bc7df8ad227f3fd59465ee067, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:71:79:59:13:c4:3c:8c:2b:7f:97:b2:87:
85:4f:13:b6:5e:de:58:28:9e:35:8d:a5:ad:5d:6e:
c7:9e:f5:9d:a3:04:46:f8:2b:d6:7f:c4:13:e0:aa:
f1:6a:5d:67:6b:7d:ef:7d:04:29:81:9a:bf:b0:2e:
4d:ad:40:44:a6:46:ec:ac:46:00:f3:52:17:c6:a2:
f4:d6:31:3b:2b:7a:e9:55:aa:b6:fc:35:10:29:1b:
f5:91:85:4d:21:49:ed:d0:0d:0f:d8:66:7f:30:bd:
4a:0f:91:b9:71:96:d9:ba:25:2d:2a:c4:10:d9:35:
3a:df:87:18:8d:71:67:5b:65:3b:e0:5d:ac:8d:d6:
c6:e4:61:5a:f0:8c:f4:22:01:68:41:4f:f3:4d:f7:
e6:35:2d:0b:42:1c:79:ef:8f:3f:44:3f:25:c6:bc:
e1:e1:36:d0:ba:9f:55:04:13:46:4e:aa:93:8d:1a:
e2:39:2a:bf:02:19:4e:5c:1e:ae:65:4e:f6:01:96:
1b:8f:bb:c0:d7:c4:f0:0c:d0:05:4f:a3:14:75:a3:
12:2a:eb:a2:12:6d:36:a2:c4:fc:f3:b6:86:06:73:
33:0f:0b:79:15:97:6e:92:08:8c:5a:6f:61:c4:dd:
bf:c5:b4:eb:38:d3:6e:7f:af:0c:96:31:85:01:af:
9d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:77:C4:F1:C2:7F:2A:F4:FC:50:C3:38:C1:C9:11:8A:7D:8E:C3:3E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d37ab758-c8d0-4ff6-ba08-8b25b7b052dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.197.224.0/19
Signature Algorithm: sha256WithRSAEncryption
3d:c6:1f:e7:b7:e8:3e:83:ba:74:7a:b5:6b:b1:82:d1:df:31:
6c:5c:f2:12:82:b6:50:b2:43:a9:42:81:b6:b4:d3:b4:c7:b7:
f1:b8:7b:cd:de:cb:57:ba:0d:24:f8:a2:a9:9a:7c:5e:39:05:
a2:71:29:ee:a2:60:e3:13:93:54:01:3a:aa:1c:d5:ce:c7:4e:
95:4e:79:43:71:7a:48:ba:fa:7d:bf:81:a9:8f:8b:46:28:05:
a7:4a:e6:17:c8:6f:ca:d6:53:95:4e:7e:c5:c3:25:a2:70:a7:
f5:02:74:95:5f:21:55:2b:e3:99:e9:06:03:e7:14:69:21:00:
4f:60:85:f3:a0:72:ac:9e:c7:ad:c4:6f:d9:0a:91:13:5b:c8:
fe:e2:cc:27:08:0a:67:0e:62:ed:ec:80:9f:53:e0:4f:02:a5:
0a:a9:80:64:42:a8:df:57:de:f3:fe:17:90:d3:f7:1e:de:86:
52:7a:b1:2f:47:a5:25:14:78:6e:85:90:ac:2a:6e:30:0e:0f:
17:ba:dc:41:23:da:68:a8:38:1e:c9:c6:17:e1:c6:23:50:8e:
3d:aa:95:ac:65:f5:6d:22:d4:09:1b:8e:bc:50:21:9f:38:83:
55:c2:41:18:6d:85:8f:95:00:51:d8:37:98:3e:35:e0:68:03:
98:75:32:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:58:32 2026 by rpki-client