
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/064c10d9-997d-4c8c-9e12-ba413e54ae9b.roa
File: 064c10d9-997d-4c8c-9e12-ba413e54ae9b.roa (raw, json)
Hash identifier: fe/YYM7+62zoj/WGNfBWH7WsdFzvOpQY52kE+r1vQak=
Subject key identifier: D3:C5:48:CE:F7:28:A0:12:21:03:A6:FE:25:83:2B:B2:02:FD:14:18
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6EC2A3E0D5E67F0A2C03046567A295A66B885CD5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/064c10d9-997d-4c8c-9e12-ba413e54ae9b.roa
Signing time: Wed 21 Oct 2026 01:30:12 +0000
ROA not before: Wed 21 Oct 2026 01:30:12 +0000
ROA not after: Tue 19 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 52.124.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:c2:a3:e0:d5:e6:7f:0a:2c:03:04:65:67:a2:95:a6:6b:88:5c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 21 01:30:12 2026 GMT
Not After : Jan 19 23:59:59 2027 GMT
Subject: serialNumber=e7c221d2b683d7c4be7349f1019e4f228b5f67bc3154593d5b8269bef7f70a27, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e4:7e:7a:e5:25:54:58:76:d9:6e:68:f3:95:
82:b6:7e:d8:29:a5:11:fe:84:45:42:d5:18:93:37:
f6:d3:29:d6:2a:1f:ad:49:3b:7f:f2:eb:32:c8:84:
aa:c4:f1:44:18:8f:87:ec:91:8a:0a:84:89:c0:aa:
3d:c2:a8:99:58:09:ef:e3:2e:8c:3f:62:3e:5c:3d:
d3:ba:0c:d4:79:b4:31:4d:21:32:23:36:58:ef:5c:
bf:6c:64:dd:2e:ad:45:6a:e7:c0:c3:f4:2c:c1:2f:
84:b6:77:68:e8:60:27:32:65:61:32:3b:77:10:00:
a9:b7:73:c9:47:fa:88:5b:ed:e5:ef:3f:4a:fa:ea:
f7:28:5e:cc:29:27:f8:74:3d:a9:ed:c5:19:4d:fb:
b7:23:c9:a8:00:83:09:ae:0b:0d:65:64:3f:e1:88:
01:7a:93:76:9d:95:ec:b2:cc:b9:db:ff:1d:f5:aa:
fc:e0:95:f3:29:db:71:1f:83:b8:c5:8d:0a:1a:57:
9d:62:29:6f:84:9f:f7:5a:bb:f6:13:c1:8e:df:cc:
78:00:30:f5:58:b1:50:ed:b5:f7:ff:b2:c7:c9:01:
78:c6:6a:9d:1b:df:a3:4d:87:3c:be:d2:37:d2:3f:
92:59:bc:b5:58:2d:93:06:a8:3e:2e:04:02:e6:e4:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C5:48:CE:F7:28:A0:12:21:03:A6:FE:25:83:2B:B2:02:FD:14:18
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/064c10d9-997d-4c8c-9e12-ba413e54ae9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.124.175.0/24
Signature Algorithm: sha256WithRSAEncryption
93:21:c0:7e:53:40:da:b7:84:08:0e:2b:62:ed:db:35:2b:00:
39:a6:fd:26:e0:97:30:51:1c:b1:21:69:27:3f:9d:61:63:5e:
7e:2f:43:c4:c2:5c:bf:8e:56:da:79:4e:eb:cf:63:ae:f0:73:
b9:07:5c:ae:31:b9:2d:31:13:ad:ea:d5:69:bc:e3:97:36:20:
b9:c7:3a:85:a2:9b:63:2b:c3:89:3f:59:92:6d:63:d9:44:8c:
b9:23:37:24:cb:29:ad:16:dc:30:b1:8b:1e:e4:04:0b:1a:33:
aa:1c:1b:b6:ce:b2:8c:11:38:d1:6e:00:4b:8a:00:32:db:76:
59:f3:f6:88:b5:e8:b3:63:d7:9f:2d:29:00:e7:fb:1a:b8:a3:
52:20:35:e5:d9:5e:d1:7e:9e:84:c5:d7:86:48:23:37:58:20:
b0:8e:f7:43:fc:3e:94:59:17:36:6b:93:a7:57:8a:54:0f:b5:
43:99:6b:c2:38:56:cc:87:93:a0:4a:55:c6:e4:50:14:fb:55:
09:f3:e9:87:a4:d2:3e:e3:e8:46:d1:ba:df:dd:f0:30:89:a7:
48:2d:3a:ec:04:f7:74:d0:e5:27:7f:66:4e:db:dd:fb:43:d7:
29:56:12:dc:bc:1a:30:08:01:bd:24:1c:7d:3e:2d:67:00:bc:
b7:62:9c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 20:07:29 2026 by rpki-client