
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb561ee2-1098-49fc-971e-7043adf429a2.roa
File: fb561ee2-1098-49fc-971e-7043adf429a2.roa (raw, json)
Hash identifier: 9paUEqjB3+i0QOAy+8a/MNNLFeifcOtm+JwuX8Intw4=
Subject key identifier: E0:F9:F7:CE:E3:23:18:7F:19:EA:90:1D:40:A0:CE:B4:E7:84:30:5C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4A51C359860070B38A8CB5B61B1BFC4A551A01F2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb561ee2-1098-49fc-971e-7043adf429a2.roa
Signing time: Sun 17 May 2026 01:11:00 +0000
ROA not before: Sun 17 May 2026 01:11:00 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 150.222.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:51:c3:59:86:00:70:b3:8a:8c:b5:b6:1b:1b:fc:4a:55:1a:01:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 17 01:11:00 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=e5aa2d49e1f6a24d052fd9def3507b1d7e4dc2fe908046b7ac66651255bf414d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:fc:0c:62:fd:21:50:bf:3f:fe:fa:4d:44:
4e:af:f2:e4:64:fe:58:76:07:58:95:08:a3:52:be:
a3:ae:57:cb:22:89:1c:04:7d:1f:5d:2a:44:91:01:
de:61:37:b3:ab:79:79:6a:2c:61:c0:58:39:80:eb:
25:fb:f1:54:9c:b8:bf:8c:e4:fa:95:f3:de:da:19:
db:d8:2e:ec:d0:fd:f1:36:ee:80:9f:c6:c2:da:04:
ca:80:22:f2:1c:ca:a5:b9:b9:69:6c:9f:79:88:18:
6c:e1:34:53:05:8e:80:38:1e:f3:6f:9b:7b:f8:61:
73:23:46:a4:2b:c7:e2:f1:b4:6a:71:ec:b9:97:ad:
b7:ef:91:14:7a:47:3b:e4:71:c4:8b:98:c8:0c:80:
73:57:66:38:cd:a5:39:25:0a:0a:84:98:3b:39:2e:
c8:54:b4:87:04:98:d2:2d:f0:9c:11:57:fb:f5:19:
68:5a:0f:1e:ab:76:61:a3:65:5b:45:95:ab:52:71:
56:ac:48:f9:0d:d6:12:2a:71:5d:d7:4b:80:8e:88:
69:71:70:b1:55:cc:bd:80:09:76:5b:3f:9a:84:c7:
cb:85:fe:cd:36:9c:b4:a6:29:9d:9d:5e:73:5a:51:
ed:69:20:d4:81:30:5a:ca:c2:0d:39:72:5e:27:17:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F9:F7:CE:E3:23:18:7F:19:EA:90:1D:40:A0:CE:B4:E7:84:30:5C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb561ee2-1098-49fc-971e-7043adf429a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.222.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ca:a9:b9:9d:7f:40:71:38:6c:0d:6d:20:36:42:fd:8b:7e:
58:d2:0e:e7:fe:d2:41:f1:20:9f:2d:82:59:fe:ef:f8:88:43:
de:5c:af:a0:0a:2a:77:20:51:0b:c0:f4:39:44:cd:80:36:76:
53:24:8d:93:43:2d:11:7c:39:5c:c7:ab:45:84:a1:11:00:f4:
c1:b9:15:45:1c:f6:df:59:a0:ea:ee:86:38:67:90:ae:c2:c4:
e0:49:1e:31:b5:2e:b6:0d:6a:51:5c:65:78:f4:9b:91:ae:74:
ee:88:41:74:e3:47:c8:75:4d:38:e2:ea:b5:c5:c4:c1:c9:ce:
bb:0c:a2:33:39:81:49:3a:d4:3b:ef:c3:2a:e3:89:cd:7f:4a:
d3:79:97:4c:e6:40:43:31:14:38:6f:8e:97:3a:87:33:4f:7d:
9d:cf:2d:fa:ba:ab:bc:d5:7f:2f:bf:a1:6c:c5:d5:01:2e:b0:
b9:69:5c:82:16:01:c0:21:b5:7b:7e:0c:c1:76:9e:5a:f6:13:
ee:db:2d:b5:70:df:4c:e9:e5:4b:a4:06:bb:5e:50:9e:c7:f4:
f3:6b:89:ba:75:67:ff:0a:78:f4:ee:ba:29:4b:fb:a7:7f:2a:
51:cd:2f:9a:3a:a0:28:14:48:ca:14:5a:53:cf:5d:4f:63:aa:
24:48:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:47:40 2026 by rpki-client