
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/315b53bc-c49b-4b88-b4d4-80075254ebde.roa
File: 315b53bc-c49b-4b88-b4d4-80075254ebde.roa (raw, json)
Hash identifier: QFt/HO7BOZ1IQJEvVxtVCxIxhL71Mi0aJHRLf7JiOQI=
Subject key identifier: 7E:DB:D6:40:91:CC:02:FF:6E:B9:E8:DC:E1:44:82:DC:12:FF:DD:96
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 24ED4852F72E3F540818E5D2C406F396BBF2DC3D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/315b53bc-c49b-4b88-b4d4-80075254ebde.roa
Signing time: Thu 22 Oct 2026 03:11:05 +0000
ROA not before: Thu 22 Oct 2026 03:11:05 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.237.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ed:48:52:f7:2e:3f:54:08:18:e5:d2:c4:06:f3:96:bb:f2:dc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 22 03:11:05 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=a139b72bcea034fee1339f4d2dac77f7a4d53ef3621ea6f11898d2495186763b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:c4:97:9f:35:db:38:fb:6b:9a:07:ee:99:
a6:2c:5f:b6:21:d3:e7:36:df:cb:13:8c:45:3e:23:
17:bc:1e:dc:ee:2e:73:56:c8:94:a0:92:28:7e:a0:
a2:f7:f7:44:14:b6:67:e3:c2:cc:bc:e1:8c:db:c7:
9a:b6:f0:fe:04:16:69:d7:61:2f:5c:a4:7d:d6:9e:
c1:e7:8f:6b:6b:f8:e8:cf:1f:ac:b1:31:4a:79:f2:
a1:ee:7f:7a:9a:bb:41:11:02:8f:f8:e2:d3:1c:76:
4a:6b:9c:0b:78:90:6f:a8:14:43:87:18:19:fb:e4:
57:54:8a:13:90:09:7e:9a:cd:43:bf:2f:d6:4c:bd:
a9:65:0f:cc:5a:bb:28:57:a8:de:da:b0:1b:95:da:
9d:b7:c9:27:22:74:ee:45:02:ba:ff:c2:99:8c:59:
8c:75:27:72:a9:79:c8:a5:46:0b:7c:40:e7:d8:0b:
2b:c9:fa:d4:d4:78:2c:94:9d:01:ff:44:61:7c:99:
5a:6e:c5:79:66:09:51:22:2c:75:c1:0d:d7:80:2f:
68:f2:ff:52:c1:a1:92:a7:91:37:e4:d0:9e:6f:89:
18:13:76:8b:39:5d:10:8f:59:e5:3b:6b:65:25:ab:
09:64:98:2d:03:ff:ed:df:31:eb:c4:96:35:16:4d:
ed:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DB:D6:40:91:CC:02:FF:6E:B9:E8:DC:E1:44:82:DC:12:FF:DD:96
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/315b53bc-c49b-4b88-b4d4-80075254ebde.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.237.128.0/18
Signature Algorithm: sha256WithRSAEncryption
58:74:55:f4:99:3d:b0:5b:d4:83:67:24:e9:0e:a2:fb:f8:46:
17:e6:2f:cf:aa:02:d2:58:e2:b6:d2:b9:d9:c2:58:b0:ce:9e:
e3:68:a5:64:91:b0:72:3e:35:4b:73:11:f8:c3:a3:f6:63:e6:
6a:ca:c9:14:f1:96:2c:17:7f:e9:64:e6:7f:7d:03:be:03:e7:
10:20:60:27:46:ec:6e:e6:b4:08:65:64:ce:92:85:9a:d7:51:
c8:fa:6a:c9:f1:46:1f:88:d1:74:4d:1e:28:9e:fa:b4:e8:ac:
90:b0:da:e6:30:30:74:36:96:c3:0e:b3:e3:6a:c1:d0:46:c9:
47:bf:c9:56:a6:1d:c9:eb:82:3b:68:94:d6:c2:29:bd:bc:80:
95:c6:27:e5:2f:1f:ce:cb:20:0d:3e:cb:8d:06:6e:46:16:85:
cd:df:41:e9:5d:69:1a:13:60:86:68:f3:ce:2a:ba:78:16:d7:
84:62:77:e5:2a:ce:f2:10:a8:bc:72:f0:76:28:b5:e2:ca:c4:
5d:65:e3:00:7d:0f:55:41:00:5b:f4:08:bc:3a:f3:49:53:f7:
6a:8f:af:d7:99:83:64:62:02:ec:cd:4b:94:5f:7f:49:0b:a7:
b8:6b:83:0a:c3:c1:88:c1:5a:6a:77:ca:85:3f:d6:f0:24:53:
50:c4:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:49:59 2026 by rpki-client