
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd57296f-c533-4b03-bef5-199a752c4a3e.roa
File: fd57296f-c533-4b03-bef5-199a752c4a3e.roa (raw, json)
Hash identifier: AjKiQ3RwLWJsBd4rqpkRo4SMEbzfL7/Ah+3PYQQXA+Y=
Subject key identifier: 78:1D:97:F2:71:EB:2B:7A:C0:8B:D1:26:E2:1E:6D:1A:74:AC:3E:F8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2C4166287A9AC5E49DF5E12E20C75E0E38BE567F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd57296f-c533-4b03-bef5-199a752c4a3e.roa
Signing time: Mon 23 Feb 2026 00:41:07 +0000
ROA not before: Mon 23 Feb 2026 00:41:07 +0000
ROA not after: Sun 24 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.147.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:41:66:28:7a:9a:c5:e4:9d:f5:e1:2e:20:c7:5e:0e:38:be:56:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 23 00:41:07 2026 GMT
Not After : May 24 23:59:59 2026 GMT
Subject: serialNumber=660df6334a9771d7f6ac5c6e8ef53416445aac06ef8415dd0e228c8d34660b66, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:7b:43:b7:ec:69:98:a6:e5:c6:23:de:5b:
f1:e5:03:c4:7d:c7:37:9e:2f:36:e3:1b:5c:07:c9:
74:4e:bf:ad:b9:4d:c3:7a:ad:55:31:f6:39:0b:d5:
78:36:59:3e:18:1b:56:82:57:43:64:e9:20:e2:81:
f2:c5:0e:7d:d9:a6:c5:e4:17:f6:ac:96:cf:ed:85:
89:13:76:07:fd:45:2d:44:4a:9b:49:e1:e7:a0:ad:
f3:32:12:59:2d:a9:60:37:e4:52:be:71:7d:a6:fe:
ae:35:91:4c:61:48:97:8e:cf:2a:fd:53:b3:21:d9:
e5:c0:48:bb:85:6e:7f:73:f4:34:2b:09:c7:35:04:
b2:e0:f1:1f:16:82:12:1f:1c:05:0f:8c:04:d6:4b:
55:7d:cb:5d:4f:55:0e:b6:18:4a:4f:d4:df:0e:9d:
d8:1e:2e:4b:c9:a6:27:61:f0:42:4f:6f:84:b6:72:
af:aa:3d:02:a6:0c:74:01:d0:26:c8:be:84:2c:33:
1e:0a:6d:0a:6e:c8:fa:ca:80:a6:e3:22:e4:04:3f:
a7:a5:02:bc:9d:02:da:ed:b4:7e:b1:fd:1f:76:15:
b5:73:33:e8:3b:b0:78:45:9f:72:71:5a:5b:f2:30:
a0:cf:3c:49:1d:43:0d:34:44:e3:5a:c4:cc:1f:31:
73:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1D:97:F2:71:EB:2B:7A:C0:8B:D1:26:E2:1E:6D:1A:74:AC:3E:F8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fd57296f-c533-4b03-bef5-199a752c4a3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.147.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9f:22:43:52:97:82:b2:b6:72:4a:9a:c6:4b:5c:7a:d4:bf:ca:
55:a2:a5:9d:77:4b:c6:b4:9e:78:3c:f2:99:02:f8:32:12:3d:
94:40:0c:4f:a1:98:98:16:9e:d7:f8:d2:26:a1:3f:25:23:27:
41:ba:56:51:b7:45:a1:de:18:16:45:4a:79:15:a8:22:a5:f5:
d0:cb:b5:80:78:2f:b7:8d:c5:12:0c:52:5e:3f:71:6a:c7:e0:
22:31:d6:5d:7c:99:91:16:d8:1e:23:2c:da:7a:13:91:62:ff:
01:98:b1:38:02:20:96:58:71:68:80:74:d8:ae:e7:1c:4d:7a:
38:bb:0e:9f:bb:51:93:50:6c:97:73:b8:72:6d:23:33:6b:5e:
5d:06:f6:74:9b:6b:6e:de:06:07:9b:b8:5a:bf:b3:c3:cd:7f:
0b:04:16:de:04:c2:72:9e:7a:e2:20:2c:5b:d7:1e:a2:16:53:
e9:06:5f:7e:36:5b:83:54:39:d9:7e:a9:8b:c9:e3:a4:1e:15:
36:63:c6:a8:16:2a:e2:14:cc:03:3e:a1:98:83:2c:13:e9:5d:
d2:87:2d:18:dd:49:e8:ba:61:ce:be:fa:7d:8d:fd:94:da:f8:
f1:36:79:76:b3:0b:10:0b:fc:b0:9a:dd:5e:28:a1:47:bf:6c:
af:17:03:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 02:08:43 2026 by rpki-client