
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e5348d2a-9e4d-488d-bd66-f867fab5a5d8.roa
File: e5348d2a-9e4d-488d-bd66-f867fab5a5d8.roa (raw, json)
Hash identifier: iwG6CWvjWeOrm8ms17jtuYyBhRZEsRzO9OcBplmf0Fc=
Subject key identifier: 7B:7F:1D:EC:1B:76:9D:ED:A4:FB:89:50:79:64:D1:D1:45:0A:2A:74
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 596E4C30A1C4A21611ADB7B292A73581A654FF82
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e5348d2a-9e4d-488d-bd66-f867fab5a5d8.roa
Signing time: Thu 14 May 2026 01:00:13 +0000
ROA not before: Thu 14 May 2026 01:00:13 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:6e:4c:30:a1:c4:a2:16:11:ad:b7:b2:92:a7:35:81:a6:54:ff:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 14 01:00:13 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=92fd21245bff4d2e97b9e6fb7dcb79bd51f1dc8cc51a584dc43fdb3f192da313, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4c:0b:7e:6a:34:be:ab:c9:4d:30:9d:86:a3:
b9:aa:81:17:0e:06:2f:a5:75:63:8f:e3:35:62:24:
27:ff:a9:b4:6b:e2:0f:db:75:21:6a:3e:65:4d:1b:
a8:b1:ab:96:4e:a3:d2:89:b7:04:3b:f4:db:d2:bb:
c9:50:48:d1:d4:70:7d:5b:47:54:dc:49:23:29:59:
c9:b1:03:ac:65:71:8b:3c:62:f6:c4:62:1e:a7:be:
ae:01:8d:d8:c7:db:1f:1a:c7:fe:4f:93:dd:12:05:
24:39:a5:4f:aa:3c:0a:c2:af:71:02:19:ab:77:5c:
90:95:85:71:3d:a1:58:3f:fd:fa:25:45:4f:1c:9f:
8d:1b:b1:97:24:4f:04:08:1b:86:da:0e:1d:cc:70:
48:8c:d6:a5:b5:fc:10:b7:0a:d7:80:22:07:f1:f8:
b4:a0:8c:d2:b8:24:47:61:a6:7e:3c:08:28:20:5a:
d1:b9:1b:14:cf:24:fe:c1:20:8c:be:4a:e5:57:bb:
f7:73:a7:50:4c:fa:c8:d1:ca:33:2e:3d:41:a8:6f:
a1:c6:b2:04:aa:d6:51:cd:c1:0e:b2:53:cf:83:d7:
1c:bb:72:f4:5b:7d:27:02:db:d2:45:91:82:34:3d:
d2:c7:c3:cf:d1:f6:4b:ed:bd:8d:69:87:69:5f:02:
0c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7F:1D:EC:1B:76:9D:ED:A4:FB:89:50:79:64:D1:D1:45:0A:2A:74
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e5348d2a-9e4d-488d-bd66-f867fab5a5d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.220.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:23:3c:25:3b:3c:d8:44:09:b1:04:5b:ac:66:5a:7e:88:7d:
61:d4:cf:37:97:6f:b0:d8:cd:0b:0e:9c:5c:3e:57:21:91:7b:
1c:83:ee:7c:ad:83:dd:e5:66:b0:59:3f:e7:b2:e0:53:87:15:
b0:7a:e7:d3:49:e5:74:08:f9:ea:36:ec:43:9a:2e:6b:74:75:
9f:ac:f8:7d:b9:39:6a:7a:15:54:38:1b:1f:20:df:d3:6e:cb:
0b:ec:44:3b:e0:92:d6:d8:14:d2:32:a4:d7:00:44:8f:88:15:
4b:6a:ce:b9:d2:cd:d8:a3:80:a5:e9:96:1a:a5:e8:6d:d4:0e:
8f:66:67:fd:d9:11:15:2d:ae:44:5d:7c:07:d5:0a:2d:4b:50:
0f:ea:34:49:8f:28:04:ba:a2:b8:81:09:51:28:07:6a:51:46:
14:62:14:a8:a9:82:d0:6d:7e:65:35:15:56:a5:47:6f:4c:d5:
c7:2b:98:71:4d:5f:26:01:5c:1c:3a:16:7f:46:1e:3d:3e:5f:
93:1f:30:bd:a7:73:e4:fe:54:90:d2:c2:15:f5:8d:3b:e7:d6:
37:3e:4e:e8:c0:d4:e4:c9:93:29:65:a1:e3:e0:c9:45:e4:8f:
08:8b:98:09:3f:6f:ce:54:a9:15:cf:b0:e6:dc:5e:9b:c1:f4:
b5:ec:73:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:50:15 2026 by rpki-client