
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/299f6195-9a22-44f0-8ab7-14e6e1d8cb5e.roa
File: 299f6195-9a22-44f0-8ab7-14e6e1d8cb5e.roa (raw, json)
Hash identifier: 3r2+SAWAU6zyMDcuZF1MlDaffDLgcMKePtkp4MAYCFY=
Subject key identifier: D5:35:16:1D:0E:43:A3:65:71:D1:02:C6:07:D1:59:A9:13:06:21:B2
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0B75C52F6EAA73603BE5B8DD8D2883E051C676CA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/299f6195-9a22-44f0-8ab7-14e6e1d8cb5e.roa
Signing time: Mon 26 Oct 2026 01:02:53 +0000
ROA not before: Mon 26 Oct 2026 01:02:53 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.230.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:75:c5:2f:6e:aa:73:60:3b:e5:b8:dd:8d:28:83:e0:51:c6:76:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 01:02:53 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=3af266a7bb11bd86e7a2f0b4f216cc9b4f9b6ddf3d5fd1f432a02e3d28a749fd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:3c:35:bc:b6:12:56:d8:bb:3d:75:ef:41:
b1:45:ae:53:eb:03:32:ca:8b:2e:12:25:3e:3e:90:
8b:86:78:9b:c2:da:3f:a3:77:c4:0c:44:f0:68:77:
8a:e5:13:41:da:cb:e5:d1:bc:ae:e8:88:92:96:08:
59:3e:a5:2c:a7:21:78:40:66:f8:2f:3a:ed:df:7f:
72:e6:12:44:f5:56:b8:f2:bd:42:30:2a:e0:34:89:
83:b5:aa:ef:8b:4b:74:8d:95:39:35:e7:ab:ff:ae:
0a:ca:eb:86:fd:84:4d:1c:fa:95:4a:ff:30:c7:34:
48:9c:06:12:d0:42:f4:9e:4d:80:bc:15:b1:81:1b:
a3:07:a9:9f:15:d3:14:cc:2e:1e:00:2b:4f:51:93:
8d:4f:27:59:df:48:a2:c7:1d:4b:bd:53:00:a5:39:
e5:6e:df:41:3b:c3:3c:d7:9a:22:de:b7:20:61:1a:
6a:83:07:aa:80:be:79:c5:05:d0:83:2b:72:f4:b8:
f7:95:ba:e9:26:37:ab:8b:83:90:6d:d1:7d:48:d6:
48:fd:ca:0f:a4:a4:37:8d:af:8b:9b:61:08:5e:c1:
bd:8a:51:c5:1d:cf:f9:c7:19:8e:9a:83:c2:33:bf:
16:31:cf:28:8c:3f:60:eb:29:60:9f:72:c7:ae:0a:
fa:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:35:16:1D:0E:43:A3:65:71:D1:02:C6:07:D1:59:A9:13:06:21:B2
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/299f6195-9a22-44f0-8ab7-14e6e1d8cb5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.230.128.0/19
Signature Algorithm: sha256WithRSAEncryption
13:cd:84:13:bf:2d:9c:f6:26:0c:23:35:be:fb:2e:38:a9:3f:
0e:a8:3c:12:49:af:34:d2:c8:1c:fe:8f:ac:92:65:c3:32:59:
ba:ec:b9:d7:94:5d:55:5d:d7:e4:bf:58:c0:7f:98:74:4a:cb:
ea:05:d0:3c:09:b7:7e:a6:ef:91:4f:4a:3c:4f:0c:17:a5:e8:
27:af:37:6c:f2:1f:80:09:62:6c:84:a1:43:da:2e:f2:76:72:
bf:70:fd:e0:35:b5:ca:dc:10:0f:d1:73:39:19:c2:03:43:fd:
6f:ee:2b:26:9d:a0:36:74:9e:65:39:e0:c7:58:ac:04:79:f3:
fe:00:42:8b:8d:ca:22:c3:0f:0d:02:c2:e1:f4:be:10:69:cd:
85:14:0d:a7:59:8f:ab:89:0a:3d:2a:21:88:37:32:81:99:d0:
21:9c:d5:8b:c0:79:df:ec:ff:a5:5c:aa:c3:1c:19:10:0d:f6:
75:19:6e:52:17:fa:f9:4b:4c:3d:f9:fe:e5:ba:79:9a:4a:c3:
3f:ba:57:32:42:a6:44:e2:ed:d6:03:1c:0c:ea:bd:a0:90:e5:
a2:44:71:a1:4d:ee:6a:d0:51:8c:b7:63:3e:75:99:0b:03:02:
69:c5:26:ce:a5:34:3d:d7:c8:9a:58:86:89:5f:b3:ae:82:7d:
50:ba:b5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:39:02 2026 by rpki-client