
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8dc4749-e2fa-4bc5-a84b-f3fc25b6538a.roa
File: f8dc4749-e2fa-4bc5-a84b-f3fc25b6538a.roa (raw, json)
Hash identifier: 6I+PFm1nsnDPNB1A5aixIsWEq7gm4cWRSS8P/VE2ZuY=
Subject key identifier: DE:6F:D4:D4:03:4B:08:C7:AB:4B:24:49:1F:D1:65:1D:95:BF:C8:DB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 68148D79F13068047EE2E0EF47E61B7786319E2D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8dc4749-e2fa-4bc5-a84b-f3fc25b6538a.roa
Signing time: Mon 03 Aug 2026 03:40:33 +0000
ROA not before: Mon 03 Aug 2026 03:40:33 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.254.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:14:8d:79:f1:30:68:04:7e:e2:e0:ef:47:e6:1b:77:86:31:9e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 3 03:40:33 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=a49c6f1a59a17d0278300199718f24406a7ca7b07fdd7bfc0290da5a472e5652, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:04:f2:b1:cb:dc:e9:74:4d:e4:0c:8c:39:c7:
71:47:e5:af:a5:d4:7e:e5:23:b5:7e:93:14:93:cb:
e1:bb:f5:b2:3c:ae:2e:bc:fd:88:5f:54:d0:1a:97:
d2:f0:cc:03:0b:28:38:8d:31:86:d9:7b:f2:45:c2:
63:29:45:a8:98:f4:80:b0:56:0c:a4:e9:31:76:b5:
77:c2:18:70:8f:65:84:0e:c3:07:ee:40:f4:c4:2f:
59:78:48:8c:3b:aa:92:7f:6b:9e:6b:4c:61:c3:5a:
03:8b:6a:e2:89:e0:76:38:b8:21:ae:12:c4:1a:a3:
81:c6:fc:fd:e9:25:54:68:79:23:c9:d3:9d:e7:5a:
83:f8:3e:70:58:a2:8a:0e:8f:e8:e8:da:09:7c:43:
db:6c:e2:38:22:d2:e6:31:99:47:70:71:7a:29:50:
2b:92:a7:a6:3e:8a:db:c8:44:d1:68:3b:0b:a7:17:
e6:42:57:99:cb:09:65:bf:a5:29:fa:8f:c9:60:34:
95:99:33:96:65:20:2d:28:63:ac:56:ef:77:18:74:
18:fd:06:f5:48:13:b2:e3:96:bc:62:f9:69:64:c2:
bb:0a:81:4f:fe:31:89:82:53:6d:d7:8d:d0:88:17:
53:10:a2:81:bd:60:8b:b8:b5:28:de:5c:08:d8:f4:
ff:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6F:D4:D4:03:4B:08:C7:AB:4B:24:49:1F:D1:65:1D:95:BF:C8:DB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f8dc4749-e2fa-4bc5-a84b-f3fc25b6538a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.254.112.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:cb:cc:6f:87:c3:03:7f:87:4b:cd:f2:9f:36:b1:05:84:fb:
65:07:d2:d1:80:ef:a5:5e:4f:96:6f:e9:4c:0c:e6:9e:89:2b:
0b:5d:ca:e4:19:f7:97:1d:39:34:62:9b:ac:7d:de:25:1a:0b:
35:7b:40:17:42:f3:a4:0c:59:2f:e4:c6:f1:6c:71:9e:b5:d5:
e0:f4:6d:9c:46:79:40:23:d9:bf:e2:d5:cc:e1:19:8c:b6:c9:
88:f4:65:c8:a7:aa:aa:42:18:2d:7c:af:82:6f:fd:db:53:75:
31:2e:57:1f:77:2d:da:0d:02:a8:29:2d:40:68:df:7d:2e:34:
59:0b:b3:79:d5:83:53:57:95:6d:f3:11:71:58:c2:a7:be:a9:
99:eb:31:6a:cd:87:81:82:73:47:de:ca:17:11:7f:f1:7a:52:
09:01:38:20:8b:0f:08:d8:67:46:f4:12:96:60:3b:bb:fa:29:
3f:8a:88:cf:bc:25:1b:8f:28:33:c5:9c:39:f5:81:b8:f9:be:
7d:df:b8:fe:87:60:e1:38:16:70:18:cc:bf:76:b1:91:25:9a:
a2:fc:60:fc:cb:84:05:5c:5f:f2:be:87:0d:9f:e0:4f:0d:fc:
5b:92:97:d7:a7:a2:59:0f:24:30:1c:8e:09:8a:47:d3:8b:fd:
ae:fa:ea:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:00:22 2026 by rpki-client