
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d79b728b-21dd-4d9c-977d-32edf24014fe.roa
File: d79b728b-21dd-4d9c-977d-32edf24014fe.roa (raw, json)
Hash identifier: a9V397PHi04+BWcqRcBUBI4F6DrEnDtZ712DzcEFygo=
Subject key identifier: 43:3E:3C:19:23:BA:55:29:B2:54:1E:56:9F:5A:15:3B:AC:0F:89:94
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 012D70D152997C6A376915FAFD03C0FF6FEE492E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d79b728b-21dd-4d9c-977d-32edf24014fe.roa
Signing time: Thu 14 May 2026 00:51:41 +0000
ROA not before: Thu 14 May 2026 00:51:41 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.68.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:2d:70:d1:52:99:7c:6a:37:69:15:fa:fd:03:c0:ff:6f:ee:49:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 14 00:51:41 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=6d3533c5aea33803ecf526e86037ebffad540f73d53e3ca75ff688835113940c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:92:fc:72:97:35:cb:f6:b1:6c:eb:9a:ef:
47:af:af:44:da:2d:a8:0c:b7:0f:06:58:61:fa:fe:
69:60:30:99:99:42:bb:c7:4e:82:8f:34:24:af:ec:
1d:4e:f5:11:9c:55:dd:48:db:70:97:25:a6:10:87:
6e:db:27:e1:1b:19:f3:47:2d:0a:c5:73:09:0f:50:
8e:ea:09:8f:94:4a:81:d8:23:e1:b7:7f:85:2b:1c:
a2:d9:85:db:c7:62:da:23:fd:07:8a:11:16:7d:dd:
c3:38:5d:ca:7b:68:2f:b7:a5:50:c5:f5:91:45:ac:
a4:48:45:44:18:67:54:7b:bf:b3:5a:6a:6f:5c:c0:
37:a8:a5:53:0e:75:21:0f:c4:d2:09:4e:48:3f:be:
e9:98:d0:a0:a2:8a:26:fb:6c:39:c3:96:12:0e:dc:
55:d0:6b:ec:1a:aa:8d:76:65:7a:71:e7:af:43:2d:
c5:5e:27:5d:11:6e:cb:9e:5f:35:22:6b:7e:24:7f:
f2:47:88:81:a9:bd:f5:ba:16:3b:e1:e2:50:bb:c9:
13:3a:a4:b4:15:a9:89:7a:a5:49:04:6e:b3:a2:e7:
5a:f5:7d:d7:74:a4:8d:89:a6:13:98:9d:75:ab:90:
ef:48:9e:0b:cf:3e:c8:b5:b0:bb:d9:26:68:0e:40:
e1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3E:3C:19:23:BA:55:29:B2:54:1E:56:9F:5A:15:3B:AC:0F:89:94
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d79b728b-21dd-4d9c-977d-32edf24014fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.68.200.0/24
Signature Algorithm: sha256WithRSAEncryption
91:cf:37:1d:e3:1b:cb:75:10:e1:27:1e:b8:9c:21:fb:4f:0b:
d6:dd:64:a3:3c:53:68:c2:f3:d1:a7:ab:c0:09:0f:f1:de:ce:
74:79:fe:27:15:97:bc:97:ab:a0:a9:f3:72:a6:e9:d2:64:1f:
2a:82:38:9c:71:67:07:1b:36:67:7a:40:52:14:0b:36:fa:48:
58:24:5e:c7:20:79:dd:a4:02:e5:26:1d:b1:4b:23:20:69:8a:
a4:23:44:da:af:b6:e3:15:41:26:78:bd:cb:20:59:7d:70:de:
06:e4:c3:f6:34:44:cd:31:0c:45:49:2e:38:52:f2:24:bf:0a:
2a:e1:99:de:67:21:4c:46:3b:02:f1:e8:3b:b9:69:70:ff:32:
3e:15:64:15:2f:a4:63:b2:b1:21:4f:77:91:01:4d:71:b0:9a:
83:1b:ad:35:e8:d5:e3:63:47:a3:48:66:aa:1f:23:bd:fc:b7:
5e:09:68:a2:97:27:30:0a:96:02:09:84:0c:30:fd:a0:5b:d7:
9f:ef:59:c8:e2:35:ab:f7:26:3b:05:74:7a:d6:73:10:1e:f4:
42:8e:3c:12:c3:98:a3:e7:61:5d:8e:dd:08:d1:d4:0e:b1:4b:
00:11:de:2c:b9:2d:14:f5:74:84:cb:fa:e4:45:3e:50:67:f0:
b4:a6:79:0d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAS1w0VKZfGo3aRX6/QPA/2/uSS4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE0MDA1MTQxWhcNMjYwODEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZDM1MzNjNWFlYTMzODAzZWNmNTI2ZTg2MDM3ZWJmZmFk
NTQwZjczZDUzZTNjYTc1ZmY2ODg4MzUxMTM5NDBjMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8e5L8cpc1y/axbOua70evr0TaLagMtw8GWGH6/mlgMJmZ
QrvHToKPNCSv7B1O9RGcVd1I23CXJaYQh27bJ+EbGfNHLQrFcwkPUI7qCY+USoHY
I+G3f4UrHKLZhdvHYtoj/QeKERZ93cM4Xcp7aC+3pVDF9ZFFrKRIRUQYZ1R7v7Na
am9cwDeopVMOdSEPxNIJTkg/vumY0KCiiib7bDnDlhIO3FXQa+waqo12ZXpx569D
LcVeJ10RbsueXzUia34kf/JHiIGpvfW6Fjvh4lC7yRM6pLQVqYl6pUkEbrOi51r1
fdd0pI2JphOYnXWrkO9IngvPPsi1sLvZJmgOQOGlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUQz48GSO6VSmyVB5Wn1oVO6wPiZQwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2Q3OWI3MjhiLTIxZGQtNGQ5Yy05NzdkLTMyZWRmMjQwMTRmZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAASRMgwDQYJKoZIhvcNAQELBQADggEBAJHPNx3jG8t1EOEnHricIftPC9bd
ZKM8U2jC89Gnq8AJD/HeznR5/icVl7yXq6Cp83Km6dJkHyqCOJxxZwcbNmd6QFIU
Czb6SFgkXscged2kAuUmHbFLIyBpiqQjRNqvtuMVQSZ4vcsgWX1w3gbkw/Y0RM0x
DEVJLjhS8iS/Cirhmd5nIUxGOwLx6Du5aXD/Mj4VZBUvpGOysSFPd5EBTXGwmoMb
rTXo1eNjR6NIZqofI738t14JaKKXJzAKlgIJhAww/aBb15/vWcjiNav3JjsFdHrW
cxAe9EKOPBLDmKPnYV2O3QjR1A6xSwAR3iy5LRT1dITL+uRFPlBn8LSmeQ0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 04:48:28 2026 by rpki-client