
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1aea2b82-0f79-4018-96b6-0d4df464db71.roa
File: 1aea2b82-0f79-4018-96b6-0d4df464db71.roa (raw, json)
Hash identifier: gtscl0ZgLGBNkl46rJDCrXoy2CfyzXod67TgyT2gUao=
Subject key identifier: AD:66:C5:FB:02:B0:D2:53:CF:5D:EA:BD:CF:3F:F2:0A:44:FB:03:63
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 78677F2C878D3BCCC74C2C50598E16DA0B582BA0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1aea2b82-0f79-4018-96b6-0d4df464db71.roa
Signing time: Thu 22 Oct 2026 03:07:48 +0000
ROA not before: Thu 22 Oct 2026 03:07:48 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.251.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:67:7f:2c:87:8d:3b:cc:c7:4c:2c:50:59:8e:16:da:0b:58:2b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 22 03:07:48 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=95da51fed8dd30189b037578cdb0890d3dec02b08a64537b17cdde3de2c2001b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:0b:e1:6c:a5:ff:61:48:5b:1f:6e:5a:e5:
3b:7a:bc:4f:dd:91:cc:62:a4:f1:ec:e3:9f:ef:14:
cf:76:25:fb:9e:e6:e4:9d:9c:e5:6e:66:9c:cd:ba:
90:ba:fd:5d:0c:03:75:a4:18:ec:e4:c7:04:40:f0:
6f:4f:29:93:9a:0a:d5:2f:68:62:d3:4c:19:af:32:
9f:c4:1b:d3:53:04:0b:76:2d:e0:c8:da:3d:c2:6d:
86:0c:de:b5:6d:8f:73:55:d3:6d:ce:12:ca:1c:d8:
2f:37:17:f6:a8:da:5e:b9:e9:b9:ac:72:ba:f3:9d:
c5:4b:fc:98:21:97:d8:99:a6:c9:3f:4e:ad:83:4e:
ad:35:83:58:63:0e:6e:61:37:48:bf:a1:9e:27:ea:
dc:37:a0:eb:0f:f8:b6:61:d5:cc:10:7e:95:6b:92:
a7:31:7d:04:23:b3:36:1e:ac:24:a3:ab:3e:55:f0:
c3:c2:4e:bb:91:bc:b5:d7:f5:e0:b8:fe:40:ae:18:
01:de:f5:a8:fc:89:20:f3:ef:dd:b3:5e:88:bc:8a:
b6:3d:7e:f6:25:46:a5:a5:df:74:5d:42:fc:6f:84:
74:80:e3:da:46:c1:6d:9c:96:e8:5b:e7:d9:7e:38:
21:ec:8c:db:51:71:a3:48:23:dc:c4:63:53:85:dc:
04:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:66:C5:FB:02:B0:D2:53:CF:5D:EA:BD:CF:3F:F2:0A:44:FB:03:63
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1aea2b82-0f79-4018-96b6-0d4df464db71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.251.248.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:77:0a:e1:c2:47:1c:8e:65:1f:86:f9:87:ec:c5:8f:bd:71:
dc:71:49:59:9d:13:83:d3:dd:9b:ad:3b:3b:e6:20:2c:36:68:
79:cd:b0:ae:d3:e9:d0:29:bc:b8:ba:23:cd:32:b6:85:09:df:
19:b7:01:b6:db:20:28:d4:cb:83:00:1b:e2:88:32:4f:43:c5:
bd:df:c6:be:a7:53:d5:ba:42:c7:95:53:c8:74:6e:d9:6a:bd:
41:fe:26:c3:26:01:29:0a:d8:7a:a1:09:45:3c:e7:5a:a8:d8:
66:e3:9e:9d:28:c9:71:b7:7f:f0:48:dc:63:45:2a:3b:bd:03:
87:b8:37:06:1c:32:f4:48:67:78:87:6a:f6:51:e6:aa:1c:2f:
a4:74:5a:f1:a0:20:9e:95:78:8e:03:51:c8:f3:37:b9:27:0a:
5a:71:ad:b8:9c:cb:00:11:36:e4:7f:e0:8a:4d:5a:1a:3f:bf:
ce:04:56:9b:08:37:f7:98:53:40:8c:db:05:c0:07:c8:ad:1f:
1c:06:4d:a1:70:2a:0a:15:05:c4:2e:c6:40:f2:36:f8:1a:6e:
d9:09:7e:28:ff:5d:f1:ff:85:e6:d6:18:ed:4c:68:72:1c:dd:
16:56:5e:26:cb:7e:db:89:af:89:45:c9:f5:d8:c6:77:92:64:
1e:ac:62:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 00:05:49 2026 by rpki-client