
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19e30596-c121-4ef5-8ec2-cefe9d9d3ae9.roa
File: 19e30596-c121-4ef5-8ec2-cefe9d9d3ae9.roa (raw, json)
Hash identifier: emQ0inJOa3SycxUZlCPAwlTM84umiUtvYpAj5J+gNu0=
Subject key identifier: FA:EB:AA:41:F3:25:6F:CD:A8:FD:3B:D5:81:FB:63:66:8C:AA:A2:ED
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 311A9CCD27E93A2E2186B35ACC1C0A9275B88740
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19e30596-c121-4ef5-8ec2-cefe9d9d3ae9.roa
Signing time: Mon 27 Jul 2026 00:10:08 +0000
ROA not before: Mon 27 Jul 2026 00:10:08 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 129.47.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:1a:9c:cd:27:e9:3a:2e:21:86:b3:5a:cc:1c:0a:92:75:b8:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 00:10:08 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=236f71057500d672a715e7d2e224dd01f87e5416c139389629f4039d89e130df, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8f:61:8c:2c:3f:31:87:23:50:55:c7:5d:af:
b8:0c:f4:00:59:83:a8:c1:69:60:e4:08:43:89:50:
4f:94:77:03:ba:b6:43:cb:89:e5:c3:59:8b:6a:4d:
bf:2d:04:df:da:7f:54:fb:6d:4f:32:8e:ed:b2:9b:
c6:23:a9:f6:e2:cd:3c:66:29:49:4a:86:6d:d6:f9:
fc:2d:78:ad:1c:3a:53:98:e2:54:5b:a7:1d:21:6f:
8e:e5:3d:7c:56:ac:74:14:db:d3:e7:fd:6e:0f:69:
56:86:d1:4d:ce:8b:1c:92:d1:45:42:5a:e3:ee:a1:
9b:9f:37:46:d2:3b:31:97:7f:bc:8b:63:0a:cf:9e:
8c:16:e2:52:7a:11:64:44:21:f3:32:dd:bc:0e:a9:
86:7c:95:f1:55:a7:a6:0e:76:c1:c1:e8:4b:1f:f0:
09:8b:d9:5d:68:8c:7e:7c:db:1a:44:b8:d9:e8:39:
4e:dd:31:e4:91:da:3e:88:07:41:95:09:f9:5e:41:
38:09:92:6e:d8:21:15:c1:1d:48:8c:86:50:18:22:
b4:f5:84:d4:11:a7:60:cc:1c:b6:03:f4:3b:2c:8e:
56:82:2a:17:83:fe:09:7a:14:01:d1:82:86:0f:8a:
02:e7:53:76:7f:7e:ce:83:f1:73:81:63:73:e5:3d:
ed:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EB:AA:41:F3:25:6F:CD:A8:FD:3B:D5:81:FB:63:66:8C:AA:A2:ED
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/19e30596-c121-4ef5-8ec2-cefe9d9d3ae9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.47.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ab:fc:31:82:93:c0:ed:84:84:00:ef:ed:fe:39:df:be:35:7e:
5b:d7:1b:fb:6c:ba:36:26:2a:2d:fc:08:ec:d1:85:ee:1c:2b:
e6:7e:86:b1:a0:58:a7:c8:00:49:67:80:89:1b:5f:a3:45:ac:
10:03:3d:83:8d:cc:fa:bf:9a:5c:0a:89:72:f2:11:7c:ad:c5:
48:dd:84:72:76:74:61:76:10:ab:c0:d2:20:36:72:07:3e:44:
9c:a6:7a:1d:fd:45:ca:f9:cb:8e:6e:7c:1d:2b:d1:e7:fe:2c:
8b:0e:38:93:6a:a1:92:3e:31:7b:ff:ca:8b:f1:3f:3b:65:e9:
3d:12:b5:1a:c1:fd:6e:23:b1:da:e9:d3:ec:15:ee:d3:6f:55:
5e:6e:84:3e:c0:cd:25:c6:48:6b:77:77:5d:e4:b7:4e:5d:61:
47:ba:39:bb:4f:d1:1d:7b:9e:62:39:e4:4d:b5:88:9e:87:c4:
fc:d3:20:1f:2b:69:57:89:32:61:da:46:71:54:75:d9:ef:d5:
eb:7a:41:66:3b:75:94:5e:ca:df:54:da:6c:e0:c8:c1:be:ca:
6d:5f:6c:8d:98:50:47:a8:70:6d:6e:1a:80:09:ab:97:ca:8d:
c1:65:fc:83:dc:89:3c:fd:5e:06:08:fd:42:31:be:af:0c:47:
20:0b:e2:3f
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUMRqczSfpOi4hhrNazBwKknW4h0AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzI3MDAxMDA4WhcNMjYxMDI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AyMzZmNzEwNTc1MDBkNjcyYTcxNWU3ZDJlMjI0ZGQwMWY4
N2U1NDE2YzEzOTM4OTYyOWY0MDM5ZDg5ZTEzMGRmMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDdj2GMLD8xhyNQVcddr7gM9ABZg6jBaWDkCEOJUE+UdwO6
tkPLieXDWYtqTb8tBN/af1T7bU8yju2ym8YjqfbizTxmKUlKhm3W+fwteK0cOlOY
4lRbpx0hb47lPXxWrHQU29Pn/W4PaVaG0U3OixyS0UVCWuPuoZufN0bSOzGXf7yL
YwrPnowW4lJ6EWREIfMy3bwOqYZ8lfFVp6YOdsHB6Esf8AmL2V1ojH582xpEuNno
OU7dMeSR2j6IB0GVCfleQTgJkm7YIRXBHUiMhlAYIrT1hNQRp2DMHLYD9DssjlaC
KheD/gl6FAHRgoYPigLnU3Z/fs6D8XOBY3PlPe3XAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU+uuqQfMlb82o/TvVgftjZoyqou0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzE5ZTMwNTk2LWMxMjEtNGVmNS04ZWMyLWNlZmU5ZDlkM2FlOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwCBLzANBgkqhkiG9w0BAQsFAAOCAQEAq/wxgpPA7YSEAO/t/jnfvjV+W9cb
+2y6NiYqLfwI7NGF7hwr5n6GsaBYp8gASWeAiRtfo0WsEAM9g43M+r+aXAqJcvIR
fK3FSN2EcnZ0YXYQq8DSIDZyBz5EnKZ6Hf1FyvnLjm58HSvR5/4siw44k2qhkj4x
e//Ki/E/O2XpPRK1GsH9biOx2unT7BXu029VXm6EPsDNJcZIa3d3XeS3Tl1hR7o5
u0/RHXueYjnkTbWInofE/NMgHytpV4kyYdpGcVR12e/V63pBZjt1lF7K31TabODI
wb7KbV9sjZhQR6hwbW4agAmrl8qNwWX8g9yJPP1eBgj9QjG+rwxHIAviPw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:09:52 2026 by rpki-client