
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07e84567-c881-4fb4-aacb-f201a75cfab3.roa
File: 07e84567-c881-4fb4-aacb-f201a75cfab3.roa (raw, json)
Hash identifier: JzGW8GBDmqYOaDhw7eoWIrCF8xm4TfqDn6ZMyJAox5Q=
Subject key identifier: 32:D0:50:1B:7E:3D:0B:A0:03:CE:69:A3:BC:D3:30:E3:5E:BF:D6:B9
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7B1F3498A0E976976DC87CBD89D45B8141D00C6B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07e84567-c881-4fb4-aacb-f201a75cfab3.roa
Signing time: Tue 24 Feb 2026 03:21:20 +0000
ROA not before: Tue 24 Feb 2026 03:21:20 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.225.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:1f:34:98:a0:e9:76:97:6d:c8:7c:bd:89:d4:5b:81:41:d0:0c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 24 03:21:20 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=49492e6f8a722df60da04c37d8be67a04da424bc0219a98c31fc9f94adf67aa7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:d1:40:79:40:ca:e4:72:91:c7:b5:5c:33:
67:9d:59:5e:5c:16:e5:ed:0a:14:9e:cd:c8:fd:e9:
07:3a:a1:29:4d:7b:48:82:16:d4:f1:f4:81:e6:de:
69:ec:0d:e4:94:27:4a:b4:b5:2d:7e:26:27:3c:f6:
f6:57:e4:d8:d7:40:01:e0:a3:5a:bf:58:46:df:fe:
6e:39:e3:a9:78:25:b6:59:7c:3f:3b:91:48:a7:e5:
fd:b1:9a:4d:ac:be:40:79:da:d4:7c:a2:8e:76:1c:
9d:31:30:da:aa:ad:76:3a:d6:34:e3:2a:ff:5e:8b:
56:4f:79:31:ef:10:c2:fe:46:e3:bb:e6:fb:20:1c:
e6:e6:45:d6:e0:ca:bb:ea:54:ba:a7:48:94:4e:74:
bd:fc:d9:7d:25:92:59:b6:f2:e0:76:44:4e:d7:5e:
f8:b1:82:b0:d6:9e:1c:22:6a:23:75:94:f7:0c:e3:
13:e2:89:8e:64:b9:5b:c8:e5:44:39:e9:cb:67:aa:
06:9a:b0:4a:d3:c7:98:9c:31:d3:d5:5a:c4:1e:a9:
62:4d:2b:a6:c1:72:6c:55:d0:a8:76:85:84:93:cd:
fa:86:e1:00:07:dc:29:36:c8:b1:20:bf:15:a5:ca:
03:a7:72:37:bc:69:f3:15:dd:94:5c:85:cc:c5:d7:
da:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D0:50:1B:7E:3D:0B:A0:03:CE:69:A3:BC:D3:30:E3:5E:BF:D6:B9
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/07e84567-c881-4fb4-aacb-f201a75cfab3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.225.0.0/18
Signature Algorithm: sha256WithRSAEncryption
41:1e:78:e1:76:a8:22:e4:b0:60:ec:64:57:0e:6d:78:39:44:
ab:34:d5:82:1a:9e:a2:81:1d:60:7f:f5:08:ec:05:a2:87:17:
81:19:c2:5f:5e:a9:fa:d1:ca:19:fb:e4:4e:75:62:d6:0c:56:
0d:11:20:13:5e:6c:a2:a1:1e:b3:6d:90:da:89:7b:77:09:14:
2b:f6:d7:65:57:7f:e9:5e:e4:48:bb:df:7d:33:7d:ea:21:5e:
ab:39:32:3c:77:68:8a:c5:65:5e:be:48:50:3b:75:81:d1:d5:
f6:d5:1f:84:cc:53:8d:ff:7f:f0:39:1e:e0:4f:7c:21:3c:ac:
a2:b2:4d:81:3b:cb:e9:a5:6e:a4:37:f1:00:93:e1:76:35:b2:
c3:fe:5b:ae:50:2b:c4:bb:d3:68:92:6b:ec:f9:e0:12:fc:31:
02:76:8b:f6:7c:04:a0:33:96:d3:3e:b6:30:48:9e:c2:06:9e:
a4:c8:a2:ab:55:f0:6c:6e:fb:e4:46:86:1e:d3:b5:53:47:d6:
dd:30:83:eb:5a:dd:c7:03:d8:ff:b8:50:47:4e:94:71:ac:a8:
d6:93:35:17:df:90:c8:8a:ae:bc:b0:77:08:9f:1d:25:99:b5:
cd:0a:8d:68:3b:80:9a:cb:da:34:6e:4a:f4:11:ee:cc:72:5e:
9a:37:be:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:36:16 2026 by rpki-client