
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb73506d-c5c8-49dc-8577-435451fdbf13.roa
File: fb73506d-c5c8-49dc-8577-435451fdbf13.roa (raw, json)
Hash identifier: SMAt6LACjh5hZYKmkY/dBHjxYkw3zplCrnlsDLd2DC0=
Subject key identifier: 2B:04:95:11:C9:CC:BA:E7:6B:6B:D2:24:1A:A3:5B:D8:CB:A4:6C:7D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1B81ACB7402C1AA4C92A39A210F7150963D1C7E2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb73506d-c5c8-49dc-8577-435451fdbf13.roa
Signing time: Sun 02 Aug 2026 01:10:36 +0000
ROA not before: Sun 02 Aug 2026 01:10:36 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.94.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:81:ac:b7:40:2c:1a:a4:c9:2a:39:a2:10:f7:15:09:63:d1:c7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 2 01:10:36 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=0a0ff7a76fc454cb79986ea3d1049d7d96b8fc7da0f5541c3afe9dba257aa58b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:2c:9e:53:87:7f:e7:7a:1b:99:0f:83:8b:
cd:8b:5a:48:40:64:be:f2:58:3f:2b:77:17:d6:93:
98:0b:78:83:26:51:94:8d:d1:fd:3d:6d:94:64:ba:
0b:a6:ab:f1:a5:99:05:17:09:81:e2:b9:7e:43:04:
e8:5d:8c:2d:73:a1:83:a2:74:3e:ed:40:38:65:4d:
90:a3:3a:36:b8:74:54:1b:c1:35:c5:1f:ab:bb:b7:
7b:ec:d7:a8:1a:40:97:df:42:f4:76:4f:30:e4:c3:
ab:ca:9f:71:4d:a1:6b:cd:88:36:7b:db:75:b8:a2:
7b:ff:c5:49:1d:7e:2a:96:c1:66:80:df:49:1b:5f:
6d:f2:c9:01:5e:c8:7d:b6:57:ca:9a:f7:5d:29:35:
b5:78:a9:22:3a:bd:ca:43:5c:1b:32:6f:80:5c:91:
51:e5:f0:8c:04:63:bd:43:8c:d5:33:a1:49:3e:48:
95:2c:20:4b:0a:88:5b:c2:f5:c6:dd:b3:2e:0d:36:
36:34:93:ef:dd:e3:49:2d:11:aa:db:7c:4f:2d:89:
01:80:88:f5:41:d1:31:93:aa:23:61:28:d9:eb:dc:
45:93:72:cd:8f:57:08:08:e7:1f:2d:8f:55:17:0e:
b0:98:e0:dc:a5:1b:1d:ee:14:1f:dc:4a:c5:72:c2:
bd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:04:95:11:C9:CC:BA:E7:6B:6B:D2:24:1A:A3:5B:D8:CB:A4:6C:7D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fb73506d-c5c8-49dc-8577-435451fdbf13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.94.70.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:8b:d5:d8:bf:d5:82:f7:55:9f:c0:d0:25:0a:6e:9d:03:cb:
1b:1f:ba:4f:d8:a3:e3:36:4c:78:a6:7d:12:8d:66:1f:a3:80:
f3:be:18:2b:f2:81:89:ad:d1:e9:82:1a:05:0c:4d:0a:15:a3:
11:be:fb:ab:00:5c:4b:cf:a3:b6:d7:80:23:c2:17:31:e2:e4:
87:37:f3:d1:fe:00:d4:29:b2:1b:e0:3c:39:17:62:6d:10:26:
53:26:95:82:0b:d3:da:a6:cd:a4:2c:8b:9a:b3:7e:67:1b:37:
97:e7:bd:2b:6f:d3:f5:3e:89:28:20:55:50:06:0c:34:03:ee:
9a:5f:e5:eb:c9:54:aa:9d:04:a5:16:b0:1d:63:79:65:cb:43:
2d:40:cb:c2:77:0b:e4:e5:74:c8:23:31:2b:13:94:8b:fa:03:
a1:27:d8:1c:64:cf:dc:c7:16:0a:10:24:85:3f:a7:92:ea:f6:
87:3c:63:9b:c6:54:d4:8e:2c:8b:0b:08:7b:42:0c:29:f3:dd:
b3:f7:59:72:45:5d:f7:91:c9:b9:46:ea:12:0b:b0:fe:48:a9:
40:40:61:93:72:cc:35:6c:21:49:c5:68:21:14:01:b0:72:93:
b4:26:73:d8:91:f9:71:7d:54:12:dc:bf:9b:b9:07:a9:0f:b9:
1f:89:31:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:19:26 2026 by rpki-client