
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/315b53bc-c49b-4b88-b4d4-80075254ebde.roa
File: 315b53bc-c49b-4b88-b4d4-80075254ebde.roa (raw, json)
Hash identifier: D1TDeFwcVv1WDKbugDOMEum4gEIluVs7dI6kcjZx14A=
Subject key identifier: 62:EB:AF:F2:1C:10:18:46:BA:03:62:13:FF:B5:33:86:79:93:49:B9
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 52FB4B15D081511F0D348A67981A787C3DA7D526
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/315b53bc-c49b-4b88-b4d4-80075254ebde.roa
Signing time: Tue 24 Feb 2026 03:20:58 +0000
ROA not before: Tue 24 Feb 2026 03:20:58 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.237.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:fb:4b:15:d0:81:51:1f:0d:34:8a:67:98:1a:78:7c:3d:a7:d5:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 24 03:20:58 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=251da6cb33231c5ba4e85daeecdad8c9b0128224ef51ff8df524f3eb0027e343, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:18:41:5f:cf:99:a6:95:9a:bf:21:1f:d7:e6:
2d:eb:3b:cc:8a:b5:ef:f6:1a:ea:0c:63:59:cf:a8:
74:2a:1b:af:bb:ac:74:3a:b7:de:32:a7:80:2e:c2:
9d:c3:79:0e:5e:39:33:51:f6:88:88:81:25:02:9b:
91:0b:37:a9:69:9f:68:f0:98:89:78:d4:b0:91:d4:
f3:77:53:cc:19:ba:e1:ef:43:69:18:a0:51:2f:5f:
8a:ea:c1:87:90:aa:51:46:79:00:7b:1b:1c:3a:37:
e8:e8:0e:e0:79:4f:05:df:d9:30:d2:4d:86:be:86:
85:f7:72:47:55:4f:04:9b:58:92:2f:61:7c:7e:f8:
f2:26:4f:35:72:68:df:58:6d:3a:63:d2:b7:cf:ec:
37:8e:02:11:fa:6c:c3:53:e3:7e:68:8f:40:2a:36:
fc:ed:8e:fc:45:ee:7d:26:79:ff:de:6e:b6:0f:b9:
66:bd:06:5c:ce:eb:2c:dd:95:6c:65:cb:d5:6c:e3:
e7:85:7c:8a:7e:1a:c6:ca:07:8b:25:23:2a:6c:6b:
47:38:67:12:18:24:13:a2:f9:df:94:d2:06:1c:33:
fb:66:90:52:6e:3e:63:c7:cc:57:05:96:e3:1e:63:
67:56:87:c5:46:82:95:1e:77:91:79:03:6a:02:5f:
96:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EB:AF:F2:1C:10:18:46:BA:03:62:13:FF:B5:33:86:79:93:49:B9
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/315b53bc-c49b-4b88-b4d4-80075254ebde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.237.128.0/18
Signature Algorithm: sha256WithRSAEncryption
72:86:5e:b4:31:fc:2d:7a:58:5d:4c:0c:52:db:93:d0:6c:48:
c4:20:24:fc:f3:7e:99:a6:20:f6:ea:63:cc:ca:6b:fa:e4:2f:
06:88:74:69:5a:11:49:ea:b0:d0:bb:41:a1:9a:09:1a:c9:c7:
fd:b4:a4:b7:29:1a:89:c1:cc:60:21:29:27:33:5c:4c:c2:3e:
ad:0e:80:22:7a:6d:5d:d6:2b:5a:35:5a:3f:d2:38:86:6a:81:
a4:75:50:32:24:35:30:98:5d:82:25:da:fd:95:67:fc:f2:93:
42:2a:fc:52:e0:92:43:d0:e7:80:37:33:f3:44:d6:e0:06:0e:
b8:b3:a9:a9:fb:4e:41:2f:9b:85:b8:8e:55:00:30:52:cb:54:
45:98:86:10:b5:b3:52:56:d7:9f:0f:1e:b9:32:e6:b0:39:e6:
cb:9f:8f:94:75:f9:c1:9f:5a:c7:f5:a8:b2:36:90:2b:9b:1a:
3c:a3:65:84:9b:b3:7c:86:7a:8f:64:20:6b:07:20:55:14:51:
e7:d5:6b:1d:5f:39:e2:14:34:0c:6f:14:3d:e3:b2:4b:d8:ba:
16:ec:87:85:d5:40:9e:ab:d1:7d:3e:c5:a9:b8:b8:92:4c:3f:
5c:32:60:76:77:24:36:80:fd:17:09:13:c4:b9:a3:cd:18:a9:
0e:2b:40:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:36:36 2026 by rpki-client