
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f127aaea-0ba2-4eb5-b0d7-e949f16981ed.roa
File: f127aaea-0ba2-4eb5-b0d7-e949f16981ed.roa (raw, json)
Hash identifier: dn+hkjz+0XwJBjq2fDJXDJ8UGMsoObtvc14WG8AHPE8=
Subject key identifier: 1F:AD:AD:E7:23:10:7E:D9:CF:70:E2:E4:32:28:AF:1E:28:A9:D1:82
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3CF90D529D4DF2633316AF372D1134E6F6DDFEA9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f127aaea-0ba2-4eb5-b0d7-e949f16981ed.roa
Signing time: Mon 27 Jul 2026 02:11:45 +0000
ROA not before: Mon 27 Jul 2026 02:11:45 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.65.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:f9:0d:52:9d:4d:f2:63:33:16:af:37:2d:11:34:e6:f6:dd:fe:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 02:11:45 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=d695434f5eb1580ec984f36f066baf2438922984c7b567da8bb4d62932efdcab, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:34:95:60:0d:d8:fe:67:ab:ff:1e:eb:da:
69:27:f4:1c:57:55:31:f0:55:8a:7b:c6:b3:ba:df:
7b:2e:9c:94:e0:f7:47:ac:3b:69:1b:44:3a:b0:d8:
95:34:36:de:4b:00:a5:f0:89:43:0a:b6:b7:69:4f:
1b:ca:bf:56:3c:dc:87:4f:bd:7a:93:13:95:b1:76:
84:c1:f0:98:73:e5:d7:49:38:1a:ae:fe:42:71:57:
b3:2e:74:3f:68:1c:f1:c1:41:e5:18:82:73:3a:d8:
85:6f:f4:03:16:cd:b3:b9:77:18:f4:4e:f3:ec:18:
a7:f1:42:f1:be:40:87:b0:34:af:04:be:05:64:42:
1b:df:c7:ff:ea:79:8d:4e:4d:93:bd:b9:0e:43:01:
cf:9e:a2:1a:78:bc:8b:9b:90:f0:ba:96:70:9f:2f:
79:59:d0:21:d9:c7:d1:0d:5a:9d:db:d9:ad:08:a6:
c1:fa:c6:c5:4a:13:ab:87:20:cc:2d:a6:6e:55:23:
eb:6e:81:bd:04:6d:17:b4:cd:26:bd:37:8e:e8:2e:
01:91:c5:70:a6:f2:24:b0:42:2e:8e:5d:72:c8:bb:
44:25:6d:42:99:0a:17:26:7e:3c:3c:c0:b0:02:3c:
b8:12:9c:10:e8:40:09:8c:e2:5d:23:41:ef:67:20:
e1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AD:AD:E7:23:10:7E:D9:CF:70:E2:E4:32:28:AF:1E:28:A9:D1:82
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f127aaea-0ba2-4eb5-b0d7-e949f16981ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.65.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:50:c1:67:17:31:04:23:c1:e3:36:da:f4:cb:e8:6c:aa:d0:
ed:34:4a:eb:66:13:05:7f:3f:27:ea:8d:da:39:1c:67:ec:ae:
a0:8a:7b:2c:32:d3:3c:00:40:cf:73:2b:db:06:9f:8b:5f:2e:
b9:5e:2c:2c:39:83:ad:51:62:4d:e3:f8:56:a4:37:91:d2:6e:
88:7c:af:ba:bf:fb:67:4c:e6:e8:21:52:5d:25:f7:8a:fd:a0:
ee:80:0f:68:97:63:b9:dd:79:95:65:08:44:82:6a:ad:6c:c3:
6b:9a:42:ca:c8:2b:e6:76:bb:fc:35:97:a0:33:79:13:e6:ee:
51:da:16:4a:dc:b9:9c:ce:b8:d1:a1:d8:3d:2c:98:69:e1:e4:
93:01:f5:11:d6:b0:7e:34:28:8f:24:73:5d:a3:03:9a:25:92:
9f:c6:9b:75:86:af:8a:28:68:09:c1:da:57:b1:d6:0e:50:35:
ba:79:f2:84:a8:35:8c:f3:25:07:ad:e7:1f:d1:fe:b6:51:10:
0c:3d:72:c1:87:1d:54:f9:29:e7:f0:9f:6e:64:92:85:73:3c:
de:43:d1:f7:00:0c:36:28:c7:42:e9:5e:a8:66:31:57:ec:2e:
a7:30:e5:7d:a9:92:42:5d:94:43:92:4b:44:9e:59:66:9e:15:
a9:43:a1:79
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUPPkNUp1N8mMzFq83LRE05vbd/qkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDIxMTQ1WhcNMjYxMDI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNjk1NDM0ZjVlYjE1ODBlYzk4NGYzNmYwNjZiYWYyNDM4
OTIyOTg0YzdiNTY3ZGE4YmI0ZDYyOTMyZWZkY2FiMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4QzSVYA3Y/mer/x7r2mkn9BxXVTHwVYp7xrO633sunJTg
90esO2kbRDqw2JU0Nt5LAKXwiUMKtrdpTxvKv1Y83IdPvXqTE5WxdoTB8Jhz5ddJ
OBqu/kJxV7MudD9oHPHBQeUYgnM62IVv9AMWzbO5dxj0TvPsGKfxQvG+QIewNK8E
vgVkQhvfx//qeY1OTZO9uQ5DAc+eohp4vIubkPC6lnCfL3lZ0CHZx9ENWp3b2a0I
psH6xsVKE6uHIMwtpm5VI+tugb0EbRe0zSa9N47oLgGRxXCm8iSwQi6OXXLIu0Ql
bUKZChcmfjw8wLACPLgSnBDoQAmM4l0jQe9nIOGbAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUH62t5yMQftnPcOLkMiivHiip0YIwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2YxMjdhYWVhLTBiYTItNGViNS1iMGQ3LWU5NDlmMTY5ODFlZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA0QTANBgkqhkiG9w0BAQsFAAOCAQEAk1DBZxcxBCPB4zba9MvobKrQ7TRK
62YTBX8/J+qN2jkcZ+yuoIp7LDLTPABAz3Mr2wafi18uuV4sLDmDrVFiTeP4VqQ3
kdJuiHyvur/7Z0zm6CFSXSX3iv2g7oAPaJdjud15lWUIRIJqrWzDa5pCysgr5na7
/DWXoDN5E+buUdoWSty5nM640aHYPSyYaeHkkwH1EdawfjQojyRzXaMDmiWSn8ab
dYaviihoCcHaV7HWDlA1unnyhKg1jPMlB63nH9H+tlEQDD1ywYcdVPkp5/CfbmSS
hXM83kPR9wAMNijHQuleqGYxV+wupzDlfamSQl2UQ5JLRJ5ZZp4VqUOheQ==
-----END CERTIFICATE-----
Generated at Sat Aug 8 08:03:22 2026 by rpki-client