
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dcd7e384-f30e-45f8-b9c4-ffc1a149e46e.roa
File: dcd7e384-f30e-45f8-b9c4-ffc1a149e46e.roa (raw, json)
Hash identifier: eI7RqRcSQJfGQpNU7bHuqNPr/0Qqc9L11PaujCwqVHo=
Subject key identifier: A1:14:A4:30:C0:8C:60:C3:7E:A6:36:59:91:7A:BB:64:8D:D0:71:25
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7AB9CF2507A11F3783130B4ED1031F3C13B79FB0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dcd7e384-f30e-45f8-b9c4-ffc1a149e46e.roa
Signing time: Mon 03 Aug 2026 03:31:10 +0000
ROA not before: Mon 03 Aug 2026 03:31:10 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.250.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:b9:cf:25:07:a1:1f:37:83:13:0b:4e:d1:03:1f:3c:13:b7:9f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 3 03:31:10 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=a7bcb7c85f98ee626c1e78251b9c96062218fa603ad812fc64186b6fa62c5bcd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:0a:ba:5c:bb:e3:18:2e:7e:1c:3f:b0:70:
b5:80:cf:54:9c:83:3f:97:19:4a:77:96:d7:16:49:
c7:f6:ae:fd:25:7a:45:58:5d:5d:f6:0f:e4:ed:ae:
f9:cf:8e:f3:18:b3:9c:ff:a3:28:65:e2:e0:3e:00:
1d:c4:46:ae:98:ce:5a:1e:36:7f:8c:5d:db:a8:bf:
03:32:9c:dd:56:db:ee:0b:25:26:76:ac:83:3f:9b:
53:e0:0e:9e:ba:9d:91:bc:d8:9b:20:20:26:fc:df:
cd:7a:7d:4e:4b:7d:d1:d7:75:fd:1d:35:14:10:9a:
3c:7e:5e:07:fd:2d:c4:a1:c9:02:0e:8c:7e:35:b8:
95:24:73:42:6c:4a:72:cb:7c:dc:cd:3f:dd:d6:f9:
0a:82:28:5d:98:84:e7:e7:4a:c3:0c:03:7e:d7:ab:
1c:9f:28:3c:2c:a7:9f:76:a0:22:61:18:57:27:de:
80:82:22:2c:11:af:10:b0:ad:84:ef:b4:e3:0e:2d:
b7:67:9c:6c:e2:f5:8e:53:aa:c8:6e:f7:c1:c0:73:
a4:77:af:bc:bd:11:1d:14:f2:9f:23:47:ac:f8:d1:
81:20:c4:e9:89:db:27:85:6c:ac:25:43:f8:c5:8e:
47:07:31:a1:11:48:ef:6d:a3:0d:01:ee:45:8a:11:
9f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:14:A4:30:C0:8C:60:C3:7E:A6:36:59:91:7A:BB:64:8D:D0:71:25
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/dcd7e384-f30e-45f8-b9c4-ffc1a149e46e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.250.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0d:3b:e4:b6:1e:86:91:2f:1a:3c:ae:c3:a6:50:bd:af:a2:8e:
bb:67:3e:e1:7d:a6:5d:5d:69:c9:ec:56:5e:c4:a3:27:20:e8:
f1:d7:15:b1:30:60:ad:c4:9e:7b:72:34:0a:88:cc:64:07:21:
24:a3:b3:23:ec:c7:3a:d1:3b:27:cc:28:13:b1:97:a9:3b:72:
40:6a:30:a5:09:c5:fd:84:ef:d4:f2:4a:86:54:c2:59:8f:f5:
a0:df:56:12:93:44:83:d3:36:39:32:f6:0d:83:b4:b3:aa:22:
2f:d4:06:da:76:c6:e7:01:66:b7:36:25:dd:67:c6:32:c2:4f:
1d:64:dc:3c:d3:44:fc:25:19:b7:50:96:b5:11:40:3a:a5:f3:
70:cd:43:af:65:85:aa:42:06:49:6f:c6:d4:c8:77:44:5d:fc:
bb:4d:8f:01:71:86:35:31:99:28:4e:3e:7b:d5:82:26:dd:73:
ce:05:37:e4:d2:c7:a6:83:83:b7:35:3b:42:39:94:f7:3c:49:
be:9e:23:52:f9:2d:ce:07:3b:3d:1b:e5:cb:91:99:cf:0c:76:
47:cb:1a:04:e4:08:25:e5:7f:a9:e4:e3:1a:42:47:42:4e:0b:
04:00:1f:e9:cb:d6:07:51:55:a5:0a:c5:b6:1e:80:29:61:41:
fd:e5:13:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:01:03 2026 by rpki-client