
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8c06c56-93a4-4b56-87f8-00ffc5f3b8d5.roa
File: f8c06c56-93a4-4b56-87f8-00ffc5f3b8d5.roa (raw, json)
Hash identifier: m+4Y/QvC4M3x+09zG/YJ6dlGJ5G0giraRvJLrarvElQ=
Subject key identifier: 5A:D2:21:A3:DA:50:D3:DD:F0:39:B4:CF:59:BF:58:C2:68:45:83:5B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 38BEAA20338D4B2FA8C5ADD844C6E04DB13AD286
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8c06c56-93a4-4b56-87f8-00ffc5f3b8d5.roa
Signing time: Sun 17 May 2026 01:10:37 +0000
ROA not before: Sun 17 May 2026 01:10:37 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.24.0.0/13 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 31 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:be:aa:20:33:8d:4b:2f:a8:c5:ad:d8:44:c6:e0:4d:b1:3a:d2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 17 01:10:37 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=22382471780279fc4f013b4d4462d0712a1b7f1532f4e7ccd311ed874497c27e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:3f:36:46:b5:30:fa:ae:cb:75:70:63:1c:
f0:d2:5c:01:75:7f:37:db:db:29:5c:eb:bd:05:36:
0b:4f:e2:10:38:87:4e:12:34:6d:da:f5:60:cc:e5:
22:9d:f1:91:b1:09:bc:3d:3f:49:f3:54:87:0c:c4:
d6:51:ef:16:3d:e4:9d:81:1d:2d:b2:c6:e1:01:9c:
83:26:99:4a:a4:1e:e7:a4:96:0d:3b:d9:45:c7:c5:
c9:54:9a:b4:c2:67:08:c8:30:7a:e7:d4:2c:8c:d8:
50:1d:de:6f:3e:ae:c4:d7:d4:ec:a6:46:5e:96:17:
49:3e:f3:8b:7e:da:a6:2a:b9:ca:a8:06:be:a8:5e:
4c:6b:c4:80:ac:db:69:19:5b:df:88:f9:af:68:b7:
4d:9f:14:bf:01:31:67:51:56:99:1d:ed:39:62:ba:
98:51:10:33:ac:e7:55:1b:cd:42:a0:cd:83:1a:81:
01:08:39:29:74:a9:9e:8e:48:2b:35:c1:02:08:92:
75:9a:9f:fa:d2:97:e6:ef:10:41:db:4d:0c:b0:93:
8e:38:a6:e4:46:c6:f5:fe:d6:a2:9e:22:55:55:47:
79:75:4a:56:d1:eb:96:a6:10:81:02:88:51:16:bb:
1e:a7:a4:b4:54:21:93:04:ab:84:fb:e0:1f:67:50:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:21:A3:DA:50:D3:DD:F0:39:B4:CF:59:BF:58:C2:68:45:83:5B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8c06c56-93a4-4b56-87f8-00ffc5f3b8d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.24.0.0/13
Signature Algorithm: sha256WithRSAEncryption
3d:d7:62:ab:74:cd:d8:e6:12:62:97:39:33:51:31:1f:0b:f7:
94:01:c8:6e:19:53:a9:ce:7d:b1:2c:cc:01:f7:9c:26:c7:37:
fd:d2:d3:5f:3c:dd:d8:43:68:2d:d0:ed:eb:2c:2e:e7:3e:35:
bc:4e:b7:83:c0:5b:fb:ca:f6:f9:1d:38:f8:30:f6:8f:6f:4b:
e0:5c:f1:d1:a4:18:61:9b:f3:a9:71:a8:7d:4f:2c:4a:cd:8a:
03:95:a3:ff:c1:00:bf:00:27:e6:45:6f:f7:d8:c5:da:60:fa:
70:ff:be:a2:a9:a7:0c:59:49:4e:55:c2:6a:61:a5:00:6c:e8:
7a:ee:6e:5b:7a:8a:64:50:50:9f:f9:7a:9f:4d:84:d1:a1:7e:
29:38:dc:a5:0f:c1:7e:33:9f:d0:f7:f2:7c:7f:0e:1e:58:66:
d3:0e:12:97:78:3a:b4:0d:75:59:ac:87:57:24:0b:dc:ef:a9:
96:92:27:65:8d:05:e1:2f:b2:f2:60:01:1e:36:70:53:b8:f2:
d4:1c:40:1f:05:98:36:fe:0a:ba:de:f2:8d:b8:54:bb:91:73:
ed:62:d7:91:79:a8:cb:e5:59:09:fb:26:4b:22:88:e0:e1:1f:
09:17:28:17:4c:db:ba:0b:21:10:00:06:0a:e8:2d:23:e5:3d:
90:ef:79:58
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUOL6qIDONSy+oxa3YRMbgTbE60oYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE3MDExMDM3WhcNMjYwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyMjM4MjQ3MTc4MDI3OWZjNGYwMTNiNGQ0NDYyZDA3MTJh
MWI3ZjE1MzJmNGU3Y2NkMzExZWQ4NzQ0OTdjMjdlMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNkT82RrUw+q7LdXBjHPDSXAF1fzfb2ylc670FNgtP4hA4
h04SNG3a9WDM5SKd8ZGxCbw9P0nzVIcMxNZR7xY95J2BHS2yxuEBnIMmmUqkHuek
lg072UXHxclUmrTCZwjIMHrn1CyM2FAd3m8+rsTX1OymRl6WF0k+84t+2qYqucqo
Br6oXkxrxICs22kZW9+I+a9ot02fFL8BMWdRVpkd7TliuphREDOs51UbzUKgzYMa
gQEIOSl0qZ6OSCs1wQIIknWan/rSl+bvEEHbTQywk444puRGxvX+1qKeIlVVR3l1
SlbR65amEIECiFEWux6npLRUIZMEq4T74B9nUHKxAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUWtIho9pQ093wObTPWb9YwmhFg1swHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2Y4YzA2YzU2LTkzYTQtNGI1Ni04N2Y4LTAwZmZjNWYzYjhkNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwMNGDANBgkqhkiG9w0BAQsFAAOCAQEAPddiq3TN2OYSYpc5M1ExHwv3lAHI
bhlTqc59sSzMAfecJsc3/dLTXzzd2ENoLdDt6ywu5z41vE63g8Bb+8r2+R04+DD2
j29L4Fzx0aQYYZvzqXGofU8sSs2KA5Wj/8EAvwAn5kVv99jF2mD6cP++oqmnDFlJ
TlXCamGlAGzoeu5uW3qKZFBQn/l6n02E0aF+KTjcpQ/BfjOf0PfyfH8OHlhm0w4S
l3g6tA11WayHVyQL3O+plpInZY0F4S+y8mABHjZwU7jy1BxAHwWYNv4Kut7yjbhU
u5Fz7WLXkXmoy+VZCfsmSyKI4OEfCRcoF0zbugshEAAGCugtI+U9kO95WA==
-----END CERTIFICATE-----
Generated at Sat May 30 01:59:23 2026 by rpki-client