
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f45e6156-f302-402a-8d62-879168465870.roa
File: f45e6156-f302-402a-8d62-879168465870.roa (raw, json)
Hash identifier: clgkH1gIipoIXFJOI0BSWrO2GF2LZqFToaNxN0/jR7w=
Subject key identifier: 17:06:3D:C0:4C:54:7D:EF:7E:DE:33:23:32:E7:39:4C:79:5E:B8:61
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4EB40B7AA77BA3CC3406C0AAB284ABD04F41C2C6
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f45e6156-f302-402a-8d62-879168465870.roa
Signing time: Sun 02 Aug 2026 00:10:28 +0000
ROA not before: Sun 02 Aug 2026 00:10:28 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.68.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b4:0b:7a:a7:7b:a3:cc:34:06:c0:aa:b2:84:ab:d0:4f:41:c2:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 2 00:10:28 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=e422a413b3bc4aa0f208d2e7967eee6d0c9226a559e5296af1fbbe3329a24704, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:7f:da:4a:da:f6:9a:35:eb:95:3b:fa:93:
69:cf:f4:60:e7:2f:0a:4e:d1:00:ab:29:07:c3:f8:
01:c8:db:d2:51:b2:85:7c:b9:7f:5d:de:96:b8:96:
51:56:b4:8e:38:64:63:08:7b:42:88:35:8b:fc:e0:
60:47:96:a2:32:ee:93:cf:e5:c9:8e:31:48:26:92:
52:c8:78:bf:ac:f2:fd:ac:ab:0c:b9:54:c5:60:1e:
0f:f6:b5:0d:9a:e2:ee:3d:2e:58:ad:af:3b:ab:2b:
cd:38:83:f9:31:80:ee:d5:ba:10:0b:2e:d3:ce:ff:
5b:d9:2a:4a:f4:95:32:e5:da:25:31:34:0d:b8:7c:
8a:d7:54:85:68:3f:9e:c1:49:bd:ae:66:f8:cd:00:
22:29:87:06:c9:85:4f:f0:d0:83:e2:dd:6f:65:36:
ae:ee:38:49:e7:0c:80:d8:42:21:72:5e:fb:a1:ae:
3d:4f:6f:8b:f4:37:89:ef:b1:dd:8e:5c:ab:9f:0f:
a9:d7:71:d9:3c:39:bd:77:13:d5:09:b0:e0:08:8d:
6b:93:2a:0f:ec:88:b2:88:6d:67:c5:27:4a:79:d5:
66:62:c5:d6:63:00:ea:98:e4:1c:3d:0a:3f:89:5e:
09:f6:a2:f8:0b:c2:d6:cb:74:7e:5c:bb:8a:d5:06:
8d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:06:3D:C0:4C:54:7D:EF:7E:DE:33:23:32:E7:39:4C:79:5E:B8:61
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f45e6156-f302-402a-8d62-879168465870.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.68.219.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:cd:a5:aa:81:4b:c2:d7:d7:2e:94:75:66:f2:e3:a4:09:06:
4f:b0:15:09:a9:18:a3:d5:a8:11:e9:ad:4d:e7:68:64:53:0e:
77:71:92:e4:ed:91:a6:11:4d:2c:9d:fc:5c:07:b1:f6:bc:e5:
a4:64:12:0b:87:f5:4a:13:da:f5:28:18:67:29:d4:5b:ec:4f:
f1:07:f4:17:0b:65:05:31:6f:97:b5:3f:37:a4:a0:fe:76:21:
b6:ca:0e:c0:0f:19:60:db:95:de:97:8a:ad:55:d0:f9:f1:57:
91:8a:a6:69:88:b2:07:39:e0:8c:e7:6c:4a:69:15:c7:03:e9:
77:35:68:af:d0:ec:79:61:ce:b1:0a:7a:3b:77:55:36:ca:77:
8e:35:ad:93:14:4b:78:37:a3:7a:ba:9d:51:18:5b:c7:cf:57:
fe:8d:9a:99:ac:7b:09:09:4c:0b:8d:8a:60:40:9c:34:24:0a:
21:49:6a:f3:cd:c9:8d:03:ae:13:9d:5f:0c:fd:0f:b5:80:58:
26:aa:f4:87:97:39:0a:17:e7:1b:31:30:c8:cf:87:7d:6a:21:
b6:18:39:3d:12:6b:13:3c:70:e4:7b:98:22:3b:b7:1b:1c:7b:
1c:1b:86:3f:b9:98:ef:43:1d:3e:3c:64:41:a5:99:60:b5:31:
61:06:46:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:03:31 2026 by rpki-client