
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/228b17b7-fba9-4020-946e-20e02fe86c63.roa
File: 228b17b7-fba9-4020-946e-20e02fe86c63.roa (raw, json)
Hash identifier: vTM06SEuH1OlOgvvvdpWY7pMGcmcshI1Y5hVzSv1z7E=
Subject key identifier: 29:7D:30:5B:29:82:02:A3:2F:80:26:B1:00:2E:08:70:2A:87:D4:50
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0563B1BC5DB710B29D8327482B2AFF5EEE255825
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/228b17b7-fba9-4020-946e-20e02fe86c63.roa
Signing time: Sat 24 Oct 2026 01:41:05 +0000
ROA not before: Sat 24 Oct 2026 01:41:05 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 15.166.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:63:b1:bc:5d:b7:10:b2:9d:83:27:48:2b:2a:ff:5e:ee:25:58:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 24 01:41:05 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=5f360a849d2982f04653abed15451de21a0fe22a2f8ab9dcb380e7a6072715a7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:d8:1f:d9:3b:2a:8b:c7:4d:27:45:55:34:
10:06:c4:a4:12:0f:c1:d9:6b:8c:9e:20:48:bc:63:
bb:3b:97:38:66:fd:9c:4f:12:ff:e5:cc:6f:49:aa:
aa:4a:21:0b:25:b6:8c:6a:13:41:6b:22:d7:bf:2b:
21:d7:03:2e:ad:36:73:0a:4d:b0:2f:04:9e:d3:f8:
30:11:f5:62:c0:56:e2:1e:6b:0d:5f:45:17:b3:21:
26:ea:bc:94:24:f8:fa:63:02:08:b9:0f:ee:19:c9:
da:57:ee:4e:d9:40:04:a6:43:c6:3d:56:8d:95:fb:
b6:63:5f:2c:86:38:3d:8a:70:07:f0:27:7d:91:2a:
1f:46:62:c7:39:6e:b7:cf:d8:c8:9f:40:7c:16:66:
48:ed:e4:03:92:06:33:44:85:ff:60:26:5c:8c:b9:
c5:ca:7f:dc:24:b0:6a:3d:e0:97:df:7f:e0:4a:45:
05:5b:5e:85:dc:c9:4f:64:d0:ea:48:5c:1a:be:cd:
1a:c1:45:57:90:55:71:04:cb:ea:b7:52:e7:3d:bd:
8c:01:5e:ae:3a:9a:0e:72:c6:6b:35:4a:34:a1:9d:
aa:a4:a1:05:73:47:d3:93:14:63:d5:c3:86:da:a5:
1c:53:7a:53:ba:46:ad:18:f5:97:97:8c:1d:a3:cd:
46:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7D:30:5B:29:82:02:A3:2F:80:26:B1:00:2E:08:70:2A:87:D4:50
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/228b17b7-fba9-4020-946e-20e02fe86c63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.166.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:d7:52:f1:33:01:08:ef:4d:04:19:96:bd:f1:14:a6:2e:5b:
ce:7d:94:96:4c:a1:b7:f8:7e:92:db:67:79:cd:44:2e:d9:e2:
c4:7d:da:da:6f:08:2d:d9:97:a8:9f:b7:c9:ae:cd:c8:d5:48:
3b:c9:c3:f2:b7:18:30:1d:35:97:e9:4f:f2:d0:9f:56:15:fb:
8b:9c:5a:d4:c8:b3:b7:46:70:57:93:dd:ff:17:6a:2b:f2:bc:
08:cb:8f:70:20:58:68:f8:d1:de:b3:2f:cd:50:e5:d6:68:08:
6e:79:06:35:38:81:93:77:88:67:a7:82:54:ad:96:75:c3:6b:
f3:2c:60:ea:d2:d8:33:5f:d7:4e:7e:cd:5b:ed:51:59:ec:47:
93:bb:f1:26:b6:bb:d8:47:95:32:c7:26:84:14:1d:a4:76:7f:
b5:18:86:35:13:c4:94:39:18:02:44:4e:08:19:7f:60:b8:03:
5f:1a:50:6b:47:17:eb:96:1c:1a:a2:41:45:03:ce:26:3c:bf:
8e:92:16:b4:c4:26:3e:30:44:20:b6:2b:26:30:50:50:09:07:
63:51:21:13:dc:dd:21:e8:73:b1:d6:65:06:f8:85:d8:5f:89:
dd:ad:d9:05:42:c2:b6:99:77:d2:9c:bc:72:54:50:17:12:9c:
ee:2b:a4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 10:30:32 2026 by rpki-client