
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/375bec59-50ce-4b8d-bfec-1b7e81a69f16.roa
File: 375bec59-50ce-4b8d-bfec-1b7e81a69f16.roa (raw, json)
Hash identifier: /FR0P5xDlZGGX7G/ivumXU/5LiXFItoRGSItOD0KdC0=
Subject key identifier: AC:D6:0C:0C:21:59:74:5B:86:21:F0:1E:50:65:0A:15:22:3A:DE:87
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 72E85DFD036194DF4199570826F9CBEECAB29643
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/375bec59-50ce-4b8d-bfec-1b7e81a69f16.roa
Signing time: Sun 18 Oct 2026 00:51:00 +0000
ROA not before: Sun 18 Oct 2026 00:51:00 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 15.158.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:e8:5d:fd:03:61:94:df:41:99:57:08:26:f9:cb:ee:ca:b2:96:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 18 00:51:00 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=536053409ad935ca00b720b8ce09a4de4bdc2663abdcaea4798f30b6aabff20b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:63:9c:b6:26:b1:08:79:99:bc:a3:9f:03:
06:c9:bb:f4:d0:0a:db:0a:ba:d8:96:63:47:63:1c:
33:33:40:72:b5:b3:09:30:8f:02:56:ad:ee:6c:b9:
9a:83:52:24:98:b9:c6:ec:33:e9:51:5e:81:0e:c8:
fb:e8:cb:d0:17:f2:5f:ca:2f:5e:da:5c:30:47:bd:
f3:53:c8:d5:60:ce:3a:8c:36:d1:5f:cf:e7:67:62:
ed:a6:01:87:88:e4:35:aa:45:6a:61:1b:22:3c:c3:
f8:b9:08:e0:35:1c:94:b9:04:29:77:98:eb:d1:fc:
83:ad:72:d2:9f:8b:4e:55:d9:a2:8b:1c:2b:58:c3:
b6:73:43:44:95:0e:cf:31:a9:c9:33:69:34:81:44:
28:6e:be:bf:66:6c:d7:69:2e:ff:4b:3e:54:7d:96:
e6:ce:f5:00:8d:fa:ba:2f:2e:51:7c:2c:13:8f:49:
a0:c4:98:89:74:27:75:d5:2d:06:82:8a:15:3e:c2:
5f:81:f3:3f:ae:5e:de:93:da:32:55:77:d6:6a:cc:
3b:5b:62:40:ba:1b:9f:1a:02:0c:92:a8:db:ac:31:
40:62:7a:8c:d5:5e:7d:9b:13:43:e5:47:a0:c1:2f:
f3:ce:f8:e8:07:5f:6e:96:a8:2a:7e:82:84:db:fd:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D6:0C:0C:21:59:74:5B:86:21:F0:1E:50:65:0A:15:22:3A:DE:87
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/375bec59-50ce-4b8d-bfec-1b7e81a69f16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.158.124.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:51:29:9a:13:56:9d:50:3b:48:eb:2c:c5:5a:b1:a5:e5:50:
b9:a3:f9:e9:47:8d:ce:0a:b7:37:02:56:81:7d:77:88:0d:d4:
d9:b6:42:53:78:9d:a2:85:6c:59:50:f0:16:21:e0:10:09:1f:
13:e0:23:ad:74:15:83:5a:f1:37:7d:58:77:5b:76:7c:ea:a9:
0e:d8:38:f9:7a:ff:22:17:0f:37:c6:db:3a:aa:ab:31:1d:77:
17:64:6f:d6:74:a7:9f:49:27:55:99:5b:55:39:95:37:ad:57:
31:1f:a8:7e:ca:ee:1f:2a:ed:b7:37:53:4f:db:1d:a8:8f:e6:
b2:ef:ec:b5:ac:fb:0a:df:37:98:34:e4:0a:ac:f6:c2:bd:ab:
3b:28:82:b4:37:31:e7:a9:58:c1:63:ca:b3:5a:2f:a3:30:f8:
f8:52:7f:3c:e8:3d:df:31:3f:dd:74:c0:e9:5e:13:ff:c0:55:
a4:3e:56:45:22:2c:56:85:f8:c9:17:99:00:37:34:bf:84:d7:
97:db:0c:b6:89:f0:af:66:20:1d:5d:2a:1a:96:cd:e0:39:41:
7d:e1:32:c2:a7:ac:fb:0d:75:0e:b0:01:04:c4:b1:75:de:31:
7a:3a:9a:db:9c:94:71:0d:e6:80:da:b5:e3:85:46:41:71:3a:
46:7e:b3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 20:48:34 2026 by rpki-client