
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8e09efd-caa9-4237-aa90-8a63700dbb35.roa
File: e8e09efd-caa9-4237-aa90-8a63700dbb35.roa (raw, json)
Hash identifier: TxkjcadvkcL/FKI/mY07FlK78Oy6MgFKw4aYAsWxs0Y=
Subject key identifier: 15:73:FB:E9:8E:23:C5:3B:E5:2A:9C:8C:D1:31:FF:C0:CC:B5:FB:30
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 17CF4E78A734EF8569E1AA55CF8A9DA39A261CA8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8e09efd-caa9-4237-aa90-8a63700dbb35.roa
Signing time: Thu 14 May 2026 01:31:18 +0000
ROA not before: Thu 14 May 2026 01:31:18 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.158.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:cf:4e:78:a7:34:ef:85:69:e1:aa:55:cf:8a:9d:a3:9a:26:1c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 14 01:31:18 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=37afff162a035a1fa9340bfe353c70b347edf06694551190def4f4393a56ca38, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6d:7a:99:d4:15:8c:ca:5e:38:87:2d:e6:e8:
e4:b3:e6:d9:34:be:5e:52:05:0d:85:67:d7:95:b2:
ca:9b:57:9b:06:15:18:88:fb:e2:85:39:9e:06:df:
bb:52:33:eb:1f:d9:7e:c7:b8:b9:9e:1e:06:cb:4b:
6b:27:06:31:bb:b8:45:13:c6:a0:5d:13:64:2b:89:
18:ed:25:b9:29:35:03:3c:fa:7b:7a:65:af:e9:85:
f4:59:ae:2c:96:15:fe:ad:22:d1:eb:64:5b:b8:8d:
16:f2:7a:41:01:ce:35:03:f4:e6:c7:fd:90:8f:e5:
5d:9f:72:7d:e3:c9:ca:17:d2:40:48:7b:70:cf:e7:
83:1b:e6:a2:16:f1:69:6e:b6:6a:97:30:25:ff:c2:
2f:e0:d0:bd:db:42:aa:3a:65:cf:d7:c5:37:47:fa:
b2:ff:d1:9a:ef:1c:d0:3a:93:5c:d1:e8:1d:37:df:
80:19:1f:21:a8:ff:48:36:a7:52:2e:05:8e:6e:41:
e8:48:ab:0d:b6:4c:41:06:df:fd:ee:06:23:10:da:
0d:7c:16:4f:45:65:2c:13:b0:89:7c:05:2a:84:54:
d5:bb:96:0c:1c:e0:3b:6f:fb:eb:5c:1d:a3:c7:ad:
76:23:ec:8d:d2:f8:2d:53:58:5c:aa:06:26:c6:7f:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:73:FB:E9:8E:23:C5:3B:E5:2A:9C:8C:D1:31:FF:C0:CC:B5:FB:30
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e8e09efd-caa9-4237-aa90-8a63700dbb35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.158.0.0/18
Signature Algorithm: sha256WithRSAEncryption
96:37:2a:08:32:46:50:c7:30:f9:d9:17:52:28:d8:36:74:71:
41:06:77:90:9b:ee:1c:ce:2b:39:70:7f:05:a5:14:ac:21:01:
98:ec:72:0b:bf:12:ba:b3:36:2f:00:0b:75:0b:e4:93:9d:7a:
04:5c:0d:57:ab:5d:51:bf:29:9c:59:d3:58:9a:db:f6:0b:2a:
60:5e:02:05:fa:b0:2b:ea:fb:fc:c5:f8:4e:86:28:3c:6b:53:
de:c3:cf:dc:46:25:3d:6b:07:0b:fc:03:07:44:ce:36:69:26:
d7:ee:f4:a1:50:10:45:47:9d:be:a7:0e:67:b9:0e:20:23:47:
ae:21:16:3e:79:a8:05:46:94:29:8c:3d:7f:3f:39:0a:62:e5:
e1:53:ad:c3:f1:31:de:7b:30:6e:c0:e3:f3:e0:f0:85:9a:e1:
62:02:a0:d5:1c:50:ab:2e:75:e8:fb:43:e9:00:ae:cc:30:5d:
da:9a:d2:fa:0e:2a:e7:b1:e5:39:b1:1c:c5:32:e5:2e:4b:02:
07:6d:ef:3d:f3:d2:43:c4:59:59:a6:5e:ca:0f:1c:b5:8b:c8:
b4:be:79:81:db:47:f8:c3:34:21:41:b1:58:ca:18:fd:73:da:
2c:de:6e:4b:bc:da:85:47:8d:08:2b:9e:4b:42:f1:e6:a7:3c:
7b:a4:33:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:45:51 2026 by rpki-client