
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1058a76c-b523-4a25-ae05-5112c75345f0.roa
File: 1058a76c-b523-4a25-ae05-5112c75345f0.roa (raw, json)
Hash identifier: ZcsqeuUMmOlRV84wBW74DR5XoIZMbXp3hzZgBViaED8=
Subject key identifier: CD:EF:92:BD:4F:B5:46:D0:DC:A3:A0:0D:D5:4B:A3:C7:8D:15:70:C4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 55D40E85EB11355C3035845671D265073A8F3328
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1058a76c-b523-4a25-ae05-5112c75345f0.roa
Signing time: Mon 23 Feb 2026 01:51:09 +0000
ROA not before: Mon 23 Feb 2026 01:51:09 +0000
ROA not after: Sun 24 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.68.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d4:0e:85:eb:11:35:5c:30:35:84:56:71:d2:65:07:3a:8f:33:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 23 01:51:09 2026 GMT
Not After : May 24 23:59:59 2026 GMT
Subject: serialNumber=eeba3f521e22ffc5f36408c3d3efe56f281797b10c3890af668c4caa3c380d2d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:1d:60:71:0e:3f:7b:2c:e8:dd:02:f7:85:
2f:5b:62:28:35:4d:ec:5c:d1:73:92:bc:d4:a7:1d:
7e:33:99:b2:10:ed:fc:78:1a:25:0b:c5:26:8f:2e:
f1:c5:55:3e:8b:91:dc:d2:3e:a0:a6:f1:4b:2f:9d:
8e:89:f7:89:ab:fb:da:b8:41:23:1a:37:90:7e:ca:
5a:3b:ab:d3:01:64:89:9d:b7:d5:88:6f:c9:1f:4b:
9c:4b:dc:ba:3d:3d:f5:0d:bb:28:d8:8b:58:2f:8b:
85:fc:15:de:36:9e:ac:a5:6f:72:26:69:e1:70:46:
95:a8:f0:4e:60:06:89:ba:d7:8b:04:5e:c8:9f:ae:
7d:f3:94:1e:e5:9e:40:32:bb:12:4a:a6:c1:5a:79:
b5:45:e8:70:28:39:4c:f8:88:bb:cd:e6:3f:11:14:
9f:19:82:12:0f:d5:cf:ce:2a:f1:65:e5:1e:8e:2b:
8b:01:98:54:a8:10:37:54:de:b5:07:d0:bc:35:cf:
c0:ee:60:a2:b3:e7:36:04:59:4d:b7:dd:da:67:44:
47:30:20:28:d6:33:84:13:07:92:c3:5f:7b:ec:fb:
a5:6a:dd:4b:2a:81:1f:99:92:fc:f1:3e:01:e6:9b:
3b:7f:c9:64:59:d8:40:4b:9e:b5:de:21:e0:30:e2:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EF:92:BD:4F:B5:46:D0:DC:A3:A0:0D:D5:4B:A3:C7:8D:15:70:C4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1058a76c-b523-4a25-ae05-5112c75345f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.68.224.0/24
Signature Algorithm: sha256WithRSAEncryption
69:bf:dc:02:ce:20:07:40:d4:5a:9e:fd:90:a9:e2:d7:cc:69:
bc:0d:6b:29:6a:d9:03:cd:ba:91:06:17:9b:40:b5:cd:c8:57:
50:f9:df:66:ec:34:7e:91:e5:02:25:5c:5e:51:4e:12:96:fe:
e9:fb:f6:32:11:5e:1b:05:44:5d:7e:0c:e1:88:7d:c6:4c:84:
d8:9c:d7:d4:fa:0d:3a:7c:81:47:b3:3e:a2:c3:6b:1c:a8:44:
af:e3:0f:de:a2:7e:2c:15:6f:43:3f:38:f5:26:a1:ae:5e:26:
99:72:5e:1f:ff:6d:5a:e3:87:83:1d:ce:11:6a:15:e0:a4:e3:
0e:f2:e5:64:99:85:00:50:37:f3:7f:3a:5e:a1:c5:ae:b6:b5:
87:02:73:0e:23:96:a6:e7:b2:62:73:10:b6:a8:5f:15:a3:75:
fe:b3:a8:6a:02:b3:25:d4:3f:8f:fc:eb:17:c1:eb:17:6a:48:
2b:96:9e:12:60:40:b4:45:25:a7:3b:1e:6b:08:d5:45:c5:b4:
1b:b1:35:40:d2:4c:ad:e6:91:5a:2a:54:d2:28:75:d5:ed:45:
10:93:0e:c4:b6:a5:d6:4a:00:08:77:5a:2a:71:eb:8a:b5:2c:
cc:0b:59:b6:0b:32:6a:5e:ae:fa:d9:5d:4a:0a:7d:ce:4c:76:
56:c3:be:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:53:08 2026 by rpki-client