
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c157a5e-1159-4133-9bae-c9baa7b72147.roa
File: 0c157a5e-1159-4133-9bae-c9baa7b72147.roa (raw, json)
Hash identifier: e4HcQ0uZEculzKGRXBdyxoUR+QA3yWnjyYEcpgD8EWo=
Subject key identifier: AC:33:F1:3D:DB:2E:64:17:92:55:B1:04:D1:BF:B2:80:B6:C4:A3:DB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3287990A23FDD54D2FAD49C91AB7F98E11C8D3E9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c157a5e-1159-4133-9bae-c9baa7b72147.roa
Signing time: Tue 19 May 2026 01:00:28 +0000
ROA not before: Tue 19 May 2026 01:00:28 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.220.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:87:99:0a:23:fd:d5:4d:2f:ad:49:c9:1a:b7:f9:8e:11:c8:d3:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 19 01:00:28 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=4205b8b52dbcc84156c37187b6147bc46442d776c2e8d53b69f0011139954525, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:6b:9b:f5:bf:af:d0:ab:06:ba:61:ad:a6:
5d:b0:08:33:83:98:6f:1e:8f:33:ed:89:4b:17:76:
8a:f2:ec:e9:d3:28:e7:ec:44:ae:29:2a:27:eb:12:
e0:50:0f:a1:ca:14:38:9f:93:cd:de:cb:6f:e3:9f:
9f:84:ca:95:d6:41:93:68:fb:c8:89:57:a1:63:2d:
92:04:a9:50:7f:5b:27:ab:4d:8d:05:48:42:97:cb:
c9:a6:1f:f2:9f:9c:3d:0b:f5:4c:78:3c:05:b4:35:
0d:f4:22:c5:7a:49:55:39:86:dc:84:be:14:75:db:
75:da:3b:ba:56:4c:5d:98:63:a9:d8:7d:ee:ec:2a:
46:50:6e:89:fd:57:54:f8:90:4f:44:77:8a:71:9e:
9d:f9:d5:be:97:f0:65:72:91:83:03:2e:da:49:82:
ca:eb:1a:e6:63:c3:88:fd:d8:88:76:ab:fd:09:44:
cc:97:4b:0c:90:bf:f7:ea:ff:54:f0:be:5d:b6:b5:
cb:6e:82:28:b9:21:ac:0a:81:c9:85:b0:28:e6:55:
53:6f:87:01:e7:97:e5:e7:f5:d2:4f:1a:cc:07:dc:
8d:d5:1b:37:95:a3:3d:18:10:2f:15:c5:af:ed:02:
c8:f0:2e:d2:19:f0:c3:ba:60:3a:1a:6b:1c:45:ce:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:33:F1:3D:DB:2E:64:17:92:55:B1:04:D1:BF:B2:80:B6:C4:A3:DB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0c157a5e-1159-4133-9bae-c9baa7b72147.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.220.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:3b:f7:21:69:46:42:4a:8f:39:df:24:7d:f1:b3:6a:6a:45:
6e:8b:b0:4c:49:f2:c8:66:3b:0c:ee:98:0f:e4:7d:f1:fa:75:
59:bd:b5:3d:1e:f2:c5:f5:2b:58:2f:86:96:b6:eb:e4:98:51:
e0:82:41:f0:6e:fe:07:73:91:9e:17:d9:ee:ab:e7:67:72:7b:
58:30:f9:d8:9d:b2:bb:33:b3:8d:41:c4:e7:ad:4c:6d:7b:47:
b6:9c:b7:57:de:63:d1:df:2b:96:6d:c1:a9:61:aa:c4:6e:7a:
f4:90:53:71:e0:16:0e:f3:3a:38:fb:00:97:39:ae:a1:cf:fc:
7c:e9:01:81:3b:e7:6e:88:23:9b:34:45:cb:0a:14:ab:3b:a5:
b6:a2:36:ee:cc:16:94:a2:c3:70:48:b7:88:28:4f:8d:7a:8f:
b5:a8:4d:62:b2:30:15:d6:6b:32:6a:59:f9:b2:11:cb:d7:ea:
bc:58:20:ab:b8:6d:5a:6a:8e:54:16:fc:fc:67:9e:30:83:bd:
c5:ea:1a:43:23:eb:27:66:85:db:bc:47:f9:8c:53:f3:f8:7b:
ed:f6:cb:d4:6e:9b:83:b3:2f:6f:60:e5:86:40:2f:7c:b7:57:
a2:c3:22:ac:15:95:6d:84:3e:2d:43:fb:95:50:c5:c1:83:b0:
c3:c9:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:44:39 2026 by rpki-client