
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/249123d0-09f2-4884-9c7d-31b33b073069.roa
File: 249123d0-09f2-4884-9c7d-31b33b073069.roa (raw, json)
Hash identifier: T1RIbfzMlE1qo9kqrOuPDzB7FdPyeGFaxeT4jdR1hyA=
Subject key identifier: 22:2E:9D:DE:5B:AA:6C:A5:CA:07:7B:55:2B:33:5B:7A:7B:0F:A5:23
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 09CEC2B640B02F4A3579CD89FE933360C55039F1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/249123d0-09f2-4884-9c7d-31b33b073069.roa
Signing time: Fri 23 Oct 2026 02:30:14 +0000
ROA not before: Fri 23 Oct 2026 02:30:14 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.252.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:ce:c2:b6:40:b0:2f:4a:35:79:cd:89:fe:93:33:60:c5:50:39:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 23 02:30:14 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=5348fd8f87fc7baa6adba8a53b781dd45d103905f71bf1fe33e869a05c7638fb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:57:b0:ff:6c:14:6c:e7:c8:f6:a6:23:c4:
3d:22:86:98:f5:de:71:42:9c:0e:aa:0e:fb:51:40:
69:11:f7:8c:2c:15:48:77:df:5d:3c:3c:75:1e:33:
67:54:25:d4:33:c9:1f:0f:ab:da:9e:54:27:71:3b:
77:fa:5b:c9:9e:91:fe:dc:b0:c6:66:2d:33:86:ee:
32:2a:10:6d:f4:83:ce:f5:ff:e8:00:32:f5:bf:4d:
7a:4c:32:12:e1:88:26:22:59:74:45:92:9a:ad:54:
05:ec:0f:81:5c:4e:23:2b:6e:f0:f0:33:87:e7:62:
d7:25:91:82:ae:a0:79:6c:cd:c8:f1:a2:52:ac:2b:
cf:7c:53:c9:95:1d:dd:3c:72:4f:70:ec:e2:55:81:
28:27:31:ca:73:b7:b1:8c:80:0e:0b:ca:93:f9:94:
ea:78:f5:c4:c7:a4:f8:55:45:81:6a:60:99:71:85:
58:d3:e5:29:25:3a:ac:9d:b0:91:a3:62:c4:5a:4c:
36:53:44:a0:38:b2:62:92:b1:40:c3:a2:0f:8d:ab:
2b:b2:8b:e5:7d:71:8e:05:f5:58:d4:0b:eb:ca:02:
8e:f4:9b:10:2e:3b:86:5b:25:e7:e0:e4:83:f8:6a:
81:6e:51:40:7f:a1:76:1d:9c:1f:c3:a0:3b:68:c2:
d4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2E:9D:DE:5B:AA:6C:A5:CA:07:7B:55:2B:33:5B:7A:7B:0F:A5:23
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/249123d0-09f2-4884-9c7d-31b33b073069.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.252.88.0/21
Signature Algorithm: sha256WithRSAEncryption
85:94:84:70:a0:1d:68:a0:73:74:1a:6d:de:20:b1:13:0c:c8:
cd:9c:ca:8f:88:7c:76:f1:e8:19:7d:8f:c4:9e:fc:7d:a0:52:
fe:34:6f:31:62:f1:bc:79:7b:ac:9e:7c:fc:ab:d7:08:0a:cc:
83:28:04:6b:56:e4:f8:09:ee:f5:25:58:0c:ff:52:f1:64:4a:
64:0c:42:44:3f:67:5f:b7:76:8f:37:9a:9a:8b:4b:c5:c9:81:
fe:54:af:fb:93:5a:07:c8:73:3b:dd:dc:fc:38:93:82:7b:2b:
3b:18:7f:0c:3d:48:1a:37:11:8a:bf:a4:c1:7c:9c:67:80:d7:
3b:59:34:6d:d1:12:43:10:a6:98:f2:d3:b2:34:db:39:dc:76:
3e:b6:67:e0:8a:2c:b6:45:08:27:51:14:7a:a2:fc:dc:94:1a:
58:4a:61:79:fe:fe:a3:10:7a:68:20:e5:7b:05:d3:7c:bf:87:
09:8a:08:2b:c7:63:82:6a:47:bd:bb:f1:3e:44:9c:39:40:8a:
c4:b9:2e:ed:e5:f9:fb:4c:18:00:ec:ab:7e:ae:16:c1:36:77:
db:b1:4d:60:05:99:ad:31:a8:d8:7f:52:1c:b3:dd:c8:17:27:
54:c9:a3:f6:26:51:77:33:73:78:3b:e3:bd:23:9a:e0:21:f0:
77:58:0b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 04:12:12 2026 by rpki-client