
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef8732ac-a3b2-4047-aa15-05ad7d37528b.roa
File: ef8732ac-a3b2-4047-aa15-05ad7d37528b.roa (raw, json)
Hash identifier: QKugSLbXmxFWOF+POz1nnI4bKhgEdI2T8GMIZ8z1zc8=
Subject key identifier: AA:5D:54:72:C9:D6:75:11:35:1F:CD:14:23:7E:43:74:04:8C:84:F1
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6D20CEADD5E3F5E4DB89ABD3BFF5C060EADC2383
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef8732ac-a3b2-4047-aa15-05ad7d37528b.roa
Signing time: Mon 03 Aug 2026 03:20:56 +0000
ROA not before: Mon 03 Aug 2026 03:20:56 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.239.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:20:ce:ad:d5:e3:f5:e4:db:89:ab:d3:bf:f5:c0:60:ea:dc:23:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 3 03:20:56 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=8626f54dd162780af1fc23324a1d4e7a1a192589b492e34477302132219952d7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:18:fb:dc:8d:de:a9:3e:e9:b2:1b:4e:23:
cb:4e:b6:2d:b0:c5:fd:39:dd:bb:c9:74:34:e4:64:
e6:72:c6:d8:55:f0:84:10:2a:85:fd:9c:10:1c:c6:
14:f2:e9:be:ba:46:90:7e:64:28:2f:33:8f:0f:32:
c1:63:42:6d:38:4c:66:7a:28:c2:36:f3:d6:36:0a:
f1:77:f2:9d:fb:88:99:32:06:12:93:7d:be:e7:ec:
55:99:01:05:c2:99:b5:10:49:ff:41:03:ff:2d:a9:
d5:1e:74:d4:1d:91:10:d7:6e:74:bb:3d:60:7a:b9:
41:92:4e:b1:8a:5d:2c:35:0b:a6:87:81:31:03:16:
d1:67:40:f8:ba:f0:6e:e2:04:30:54:56:28:92:89:
14:1b:51:4d:c3:79:fa:76:7c:a1:e9:d3:d2:aa:56:
f3:91:71:47:8f:a4:39:2b:30:3d:b0:b5:53:d0:4e:
29:c7:d4:4d:77:55:4b:df:64:6e:dd:81:ae:54:96:
d5:44:f0:25:4e:89:71:3b:66:2d:29:b0:ff:4b:6f:
a3:29:df:f0:43:f3:04:58:63:12:60:16:95:41:9e:
47:06:3b:f2:4b:1a:f7:59:d3:29:d7:f6:99:24:f6:
34:0a:09:d4:a5:e6:f3:20:c9:b7:d4:0a:e2:a2:1d:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5D:54:72:C9:D6:75:11:35:1F:CD:14:23:7E:43:74:04:8C:84:F1
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef8732ac-a3b2-4047-aa15-05ad7d37528b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.239.97.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:94:d5:b2:24:65:4c:3c:3a:d4:7d:7a:32:65:31:50:ab:74:
d5:c2:5e:fb:fe:18:94:38:02:b0:c1:ec:ac:21:20:97:93:76:
14:4b:19:f2:9e:18:ab:0e:98:a0:ab:da:61:59:f1:f2:57:e3:
ba:61:e0:b2:b6:37:eb:ba:e5:ff:65:81:3c:c5:8f:a1:08:a5:
87:6f:84:d0:04:dd:aa:62:b4:20:43:50:5b:15:ef:8e:9b:ae:
84:97:c8:1d:67:17:79:e8:66:80:d2:54:92:42:ab:d4:a7:69:
3f:9a:4f:00:60:c9:37:32:b9:2f:53:64:24:40:03:5f:f4:0a:
a3:ca:8b:ec:f9:8e:4a:1f:56:c2:88:7a:42:4c:8a:00:f3:6a:
e0:17:c7:48:7f:99:a6:35:26:59:7d:11:b5:b5:41:e2:58:86:
33:cc:35:8a:02:ce:52:8d:4d:ed:c9:34:94:66:fa:cd:4b:52:
8c:0c:65:e6:54:3d:9c:27:50:91:19:9d:11:a3:51:30:8e:cd:
1a:bd:10:ee:18:5e:0a:af:c7:83:93:f6:6c:cd:fc:3c:05:5b:
a5:76:28:f6:8c:7f:aa:3a:e7:73:e7:7c:8a:43:5a:e3:9d:78:
50:96:94:10:3a:27:f9:5b:4e:71:18:34:48:55:12:e4:30:87:
42:76:f5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:02:59 2026 by rpki-client