
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e00a1ecb-2efb-4e0f-9e4a-d152fbedac7a.roa
File: e00a1ecb-2efb-4e0f-9e4a-d152fbedac7a.roa (raw, json)
Hash identifier: IDKQpUpsiS0bplHD0XUMLUcLHoV0M2Vlpw/RqPkhSPw=
Subject key identifier: F6:87:C6:91:06:E0:43:40:83:14:AC:64:EF:CD:69:83:9D:B5:5B:B4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 643DC93ADF72EB342EF238DE280A5169863EF7A2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e00a1ecb-2efb-4e0f-9e4a-d152fbedac7a.roa
Signing time: Mon 27 Jul 2026 02:10:57 +0000
ROA not before: Mon 27 Jul 2026 02:10:57 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.12.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3d:c9:3a:df:72:eb:34:2e:f2:38:de:28:0a:51:69:86:3e:f7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 02:10:57 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=6d9e5c9d3928f624f676fa90d22d296512ec18076d1ef696e555a7d07f46e19f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:53:e0:e6:26:cd:65:44:b0:b4:69:91:af:
2f:cc:49:30:be:8c:45:e3:86:52:40:dd:c7:91:6d:
bd:2b:1b:bc:4b:79:6b:09:c0:1c:31:ab:1a:35:4e:
d5:42:60:23:a6:95:10:e3:75:f8:da:ae:9e:d4:64:
4d:99:bd:98:84:66:eb:cb:ed:5a:11:96:86:d1:fe:
d8:5d:3e:ec:3a:7d:8b:9d:17:d3:b6:1e:50:be:20:
48:17:e3:f4:fa:99:43:0c:99:cc:d5:11:37:e8:94:
50:50:e9:60:6d:18:da:b8:57:8e:20:61:83:8c:f9:
da:5f:e3:d1:65:88:fc:d0:bb:c2:a8:db:04:9a:cc:
2b:a9:80:b6:94:76:84:88:6d:09:b7:cb:bd:c3:89:
7f:ac:1d:fd:6e:d6:16:91:80:60:e9:2c:48:c4:02:
4c:1f:80:07:69:c6:73:45:db:d4:e8:2d:ae:c7:ea:
4e:c5:eb:84:b9:4b:e4:86:f3:d2:6f:a2:c6:0f:3e:
61:2e:67:84:b3:9e:5d:c9:f6:7c:1e:c2:ee:0f:e9:
7d:d2:ef:f2:8b:a2:8d:f1:4a:65:7a:36:c3:0a:e6:
e8:00:5a:47:01:20:60:79:16:82:39:fb:1e:b7:ed:
c1:4b:23:78:19:fb:c8:45:40:69:4f:9c:cd:a0:a8:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:87:C6:91:06:E0:43:40:83:14:AC:64:EF:CD:69:83:9D:B5:5B:B4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e00a1ecb-2efb-4e0f-9e4a-d152fbedac7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.12.192.0/19
Signature Algorithm: sha256WithRSAEncryption
61:09:5d:5e:5c:42:e2:fc:c2:67:30:8a:bd:80:ea:88:4f:6b:
71:59:db:47:54:3f:88:3f:33:7d:ec:9e:b7:84:a9:c5:9d:54:
4c:1c:bf:c6:97:d3:14:6a:fd:dc:31:6c:d8:c3:07:98:38:a1:
bd:48:32:65:1c:82:51:25:01:8a:ba:37:37:81:e9:28:08:d0:
18:ee:88:ed:a2:ad:08:b4:57:dd:d0:eb:32:ba:8e:96:80:b7:
85:fb:05:09:d7:8f:46:84:8b:c2:38:98:06:d2:5c:fe:be:6f:
0d:35:d2:6c:03:ea:de:d4:90:ed:ef:3b:e2:f3:5c:69:71:77:
a6:9e:b2:ef:89:e2:65:d8:7b:09:5a:30:77:20:d7:e2:5d:93:
41:98:5f:62:8d:a7:41:f9:d1:c7:6b:81:77:b4:7c:5b:6b:3c:
c9:eb:c4:97:5a:35:d0:c5:50:d7:ed:af:33:7e:d8:17:40:a6:
9f:11:3c:ea:fc:44:0f:d0:1d:73:8e:49:f6:e2:9f:97:db:4e:
2c:73:b0:95:6d:64:29:f1:a6:25:b0:9d:e8:e4:f9:8a:49:1f:
93:bc:7c:02:4a:1f:97:a8:01:0f:cb:26:8a:6b:61:f9:5e:0e:
bd:2e:66:37:89:ed:1f:a3:f5:db:ba:e7:f1:7a:2e:54:11:06:
72:a3:6f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:59:23 2026 by rpki-client