
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0731da9a-006f-4848-a9ac-ce5cc640ac38.roa
File: 0731da9a-006f-4848-a9ac-ce5cc640ac38.roa (raw, json)
Hash identifier: eJliExfDIhzEmuGvbTpV8Wv/JVQ9+yD3KkE5DOkHvfo=
Subject key identifier: 53:56:DE:70:98:AC:14:C5:7E:1D:F5:A6:B7:08:56:4D:06:5A:3D:08
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0DD7176FDE60CFC3876138B08D270298B852578F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0731da9a-006f-4848-a9ac-ce5cc640ac38.roa
Signing time: Sun 12 Apr 2026 00:00:45 +0000
ROA not before: Sun 12 Apr 2026 00:00:45 +0000
ROA not after: Sat 11 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.71.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:d7:17:6f:de:60:cf:c3:87:61:38:b0:8d:27:02:98:b8:52:57:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Apr 12 00:00:45 2026 GMT
Not After : Jul 11 23:59:59 2026 GMT
Subject: serialNumber=c3ef541e490ffbc3b55403bc07408c32f9ee7f252f7d9e4cb0303f3791611008, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:15:32:45:80:5d:80:cf:e5:f9:f2:a9:c4:
d8:b5:bd:b5:07:82:7d:00:d7:09:e7:3b:5a:ea:65:
bf:89:f8:ee:ab:76:b4:5e:1c:c6:e8:3a:3f:66:e3:
fc:ff:0b:75:bc:fe:e2:2e:dc:31:f6:69:5a:4a:a0:
cd:0d:06:72:af:61:ad:15:8d:b1:47:85:c0:92:87:
4b:af:8a:bb:76:fa:ec:e8:c0:86:99:e1:d0:2b:e8:
dd:f4:81:5d:67:72:2f:3d:3e:92:0b:05:4a:13:f2:
0e:5b:6b:71:6a:87:a7:53:fa:d4:5d:82:7f:1b:64:
e5:58:90:31:e5:9f:e3:fc:b5:40:fe:e7:94:8b:0d:
08:28:0f:cf:88:27:0b:d0:35:f6:14:d4:46:43:8d:
f2:9d:66:16:e0:b6:d1:a9:3d:2f:f3:6b:7a:e2:a8:
c5:80:81:0f:3a:fb:7c:e8:fe:b4:9d:c6:dc:56:dd:
01:6f:03:ea:41:88:71:2d:29:ca:31:d9:ee:72:61:
80:bf:bd:68:65:a9:b4:cc:a8:4b:66:c0:10:1c:79:
18:60:c7:f0:85:33:7c:29:3f:1f:52:19:0d:cf:53:
c1:ba:1d:3c:7d:94:d8:ea:14:d4:fd:98:ad:96:2a:
96:89:b7:ed:c9:8a:1b:e9:10:80:1d:ee:b7:be:f6:
f9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:56:DE:70:98:AC:14:C5:7E:1D:F5:A6:B7:08:56:4D:06:5A:3D:08
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0731da9a-006f-4848-a9ac-ce5cc640ac38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.71.203.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c0:dd:ce:da:12:d8:ef:3b:af:a2:50:3f:fe:ba:bf:37:b4:
fc:5e:6a:b8:c9:72:42:9a:94:8f:81:3d:95:e2:44:ae:b1:7d:
7a:eb:11:86:09:41:26:a1:8a:59:47:0d:9c:51:3b:60:50:e4:
e4:71:90:ae:6f:96:c8:85:d3:f5:2b:15:d1:78:0a:6c:0e:45:
44:5b:60:a0:95:ca:ea:22:7c:7c:14:9b:5e:e6:b6:44:c8:8c:
4d:35:ab:81:f7:51:0b:b2:11:58:be:c1:bb:fb:bf:eb:7a:f6:
08:8f:35:25:f0:3b:52:fa:64:5e:67:a1:87:b8:7a:77:34:8b:
c1:a3:c8:96:7e:02:2b:26:36:43:6c:b8:cc:a5:a2:5b:03:e2:
98:fd:9e:4d:f4:7f:87:1e:db:01:43:59:ba:9a:0d:fb:6c:8a:
c8:f6:d6:2b:0f:74:6f:a4:cc:a8:9f:43:dc:5e:18:c8:16:db:
50:d7:aa:d7:58:fa:80:9d:3c:f0:2b:77:8f:49:49:7b:08:6f:
63:71:61:ee:c2:b1:a5:db:84:05:c2:ed:bf:0b:9f:d2:d8:bd:
ce:c3:aa:77:0c:2a:5d:70:e3:08:ee:0e:e4:7e:85:aa:64:ee:
65:cb:03:88:6d:4a:4c:58:74:0f:d1:20:a2:2f:75:ce:d0:79:
a8:5a:cf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:44:31 2026 by rpki-client