
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6a8b612-226b-4884-9d81-4b18a527ed9f.roa
File: d6a8b612-226b-4884-9d81-4b18a527ed9f.roa (raw, json)
Hash identifier: V4Cp+bj16Q24mJzd1BqiFWEbwsFLAV/8nhYj/o31hCg=
Subject key identifier: 4A:84:9D:47:1C:1D:E0:D4:7E:E3:15:BF:0A:A3:C6:D3:4F:83:92:8C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4FC72FA7C12151D112094111DE85A7B4223016EA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6a8b612-226b-4884-9d81-4b18a527ed9f.roa
Signing time: Fri 22 May 2026 14:02:16 +0000
ROA not before: Fri 22 May 2026 14:02:16 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 47.131.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 31 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:c7:2f:a7:c1:21:51:d1:12:09:41:11:de:85:a7:b4:22:30:16:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 22 14:02:16 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=06d485053c0e06b61c66434c8fae008ddc3028b23aae3c162781ab07ba34af5e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:14:e4:0b:3e:e5:9c:35:2b:29:e1:06:3e:56:
4b:6f:c2:10:7a:d0:53:77:b6:ca:6a:05:e9:91:d3:
9b:a6:65:f0:68:78:1b:ab:42:d4:49:2a:ac:3f:56:
af:89:f3:ee:70:4e:cf:c4:25:21:f6:90:c9:61:46:
96:e7:b4:78:bf:a8:21:2f:b7:ef:6b:ce:a4:32:8d:
78:61:25:13:4c:c7:d7:2d:6b:08:bb:bb:7b:08:f3:
d5:25:eb:8d:03:78:81:11:49:1f:fa:db:73:40:ed:
9c:73:0b:f2:1d:0a:a9:ff:3e:da:af:fd:07:2c:f0:
85:e2:5e:d3:b0:c0:10:eb:c8:95:09:ed:37:e8:0b:
25:2c:7c:47:a0:0a:01:14:e8:44:35:90:79:a7:9f:
49:45:a7:f5:11:0c:70:30:00:92:95:e4:28:4e:37:
b8:a5:43:6e:8c:e6:0e:92:ba:75:30:8b:94:3a:b8:
e4:52:bb:09:38:ae:dd:73:de:89:5e:0b:6c:dd:9f:
22:d0:05:5b:88:94:64:fe:3b:04:82:dd:20:3b:41:
a8:f6:56:22:e1:50:ed:d3:98:e9:30:89:ee:ed:98:
29:be:6a:9d:1e:46:41:7f:0f:1b:69:c8:10:78:f6:
a5:9f:6e:91:72:c8:9e:21:2f:db:12:b1:63:85:03:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:84:9D:47:1C:1D:E0:D4:7E:E3:15:BF:0A:A3:C6:D3:4F:83:92:8C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d6a8b612-226b-4884-9d81-4b18a527ed9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.131.230.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:b0:e5:af:95:df:82:25:51:70:c3:48:85:79:54:f3:96:f9:
a5:91:a9:16:77:67:4c:71:8e:8a:b5:52:f1:4b:ef:18:7a:81:
26:c0:e7:4a:6f:44:35:a9:7e:22:02:51:a0:d0:57:52:c7:72:
66:db:b8:1e:35:b5:64:09:01:c7:bb:37:19:2d:27:a2:cb:ac:
83:c2:30:a6:f6:79:a0:a7:c6:d4:96:2b:20:40:a4:7d:3a:69:
8a:11:09:89:00:a1:b3:ff:61:67:42:cf:74:42:7c:2a:36:df:
c4:cb:68:51:d0:11:c3:9a:26:d4:a6:a2:f6:ed:6b:34:a6:e2:
1d:18:0a:af:df:6a:1b:bf:b9:80:f1:f3:73:8d:92:31:40:b5:
6c:2f:37:90:12:ca:c4:0e:4d:92:47:a0:c5:bb:a2:3e:54:2e:
93:ba:8a:20:5a:ec:dc:1f:98:d5:09:90:87:a9:75:2d:42:ab:
9b:0f:26:96:82:9e:1e:d3:4e:b5:6e:5c:e5:c3:23:c4:e4:13:
7c:30:b0:8b:4f:ac:d8:e1:2e:03:9c:5e:c2:02:ea:d5:2f:5e:
3a:af:d5:21:3a:d1:9a:25:0a:16:a9:7a:f5:06:d7:45:6b:ee:
d0:11:c6:10:e0:03:6c:a5:19:61:fe:f7:d3:ab:ce:c4:3f:3d:
c1:ab:fb:0d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUT8cvp8EhUdESCUER3oWntCIwFuowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTIyMTQwMjE2WhcNMjYwODIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AwNmQ0ODUwNTNjMGUwNmI2MWM2NjQzNGM4ZmFlMDA4ZGRj
MzAyOGIyM2FhZTNjMTYyNzgxYWIwN2JhMzRhZjVlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDgFOQLPuWcNSsp4QY+VktvwhB60FN3tspqBemR05umZfBo
eBurQtRJKqw/Vq+J8+5wTs/EJSH2kMlhRpbntHi/qCEvt+9rzqQyjXhhJRNMx9ct
awi7u3sI89Ul640DeIERSR/623NA7ZxzC/IdCqn/Ptqv/Qcs8IXiXtOwwBDryJUJ
7TfoCyUsfEegCgEU6EQ1kHmnn0lFp/URDHAwAJKV5ChON7ilQ26M5g6SunUwi5Q6
uORSuwk4rt1z3oleC2zdnyLQBVuIlGT+OwSC3SA7Qaj2ViLhUO3TmOkwie7tmCm+
ap0eRkF/DxtpyBB49qWfbpFyyJ4hL9sSsWOFAxBfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUSoSdRxwd4NR+4xW/CqPG00+DkowwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2Q2YThiNjEyLTIyNmItNDg4NC05ZDgxLTRiMThhNTI3ZWQ5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEvg+YwDQYJKoZIhvcNAQELBQADggEBAF2w5a+V34IlUXDDSIV5VPOW+aWR
qRZ3Z0xxjoq1UvFL7xh6gSbA50pvRDWpfiICUaDQV1LHcmbbuB41tWQJAce7Nxkt
J6LLrIPCMKb2eaCnxtSWKyBApH06aYoRCYkAobP/YWdCz3RCfCo238TLaFHQEcOa
JtSmovbtazSm4h0YCq/fahu/uYDx83ONkjFAtWwvN5ASysQOTZJHoMW7oj5ULpO6
iiBa7NwfmNUJkIepdS1Cq5sPJpaCnh7TTrVuXOXDI8TkE3wwsItPrNjhLgOcXsIC
6tUvXjqv1SE60ZolChapevUG10Vr7tARxhDgA2ylGWH+99OrzsQ/PcGr+w0=
-----END CERTIFICATE-----
Generated at Sat May 30 01:57:20 2026 by rpki-client