
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/439bdb3b-6a6d-473b-89eb-2205b40adf79.roa
File: 439bdb3b-6a6d-473b-89eb-2205b40adf79.roa (raw, json)
Hash identifier: hB8SxDV6yaMKIMjp7Nh/ph26mSgMG/yXz3ILgwV/yxA=
Subject key identifier: 5E:CA:EF:52:77:DF:3C:50:23:9E:0B:8C:B8:63:80:87:A4:6F:BC:AE
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3956C4FBDD3C97AE4EA153D7E328371B44F83119
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/439bdb3b-6a6d-473b-89eb-2205b40adf79.roa
Signing time: Thu 22 Oct 2026 03:31:13 +0000
ROA not before: Thu 22 Oct 2026 03:31:13 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 54.197.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:56:c4:fb:dd:3c:97:ae:4e:a1:53:d7:e3:28:37:1b:44:f8:31:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 22 03:31:13 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=04a90c00cdc88055ad23d8f50430f4d5c6c706c1e0d0d596647f79b66489baf6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:c8:b4:60:15:32:ff:5f:df:59:16:47:90:
da:cc:a8:2c:fa:10:d4:ef:cd:b9:87:35:3d:4d:d0:
db:6d:c9:8d:ce:bb:0f:d7:99:ef:67:7c:13:ed:f0:
57:71:32:d4:ad:0f:fb:21:9c:80:a4:03:ad:33:dc:
9b:c3:25:9c:0d:f0:13:7d:75:ae:5f:89:70:48:9c:
95:67:35:0e:31:7f:b2:7c:93:d8:59:2b:82:e2:33:
7e:db:a1:67:17:39:31:8d:00:8e:c0:46:8c:02:b2:
14:8d:1f:79:6f:eb:80:07:e5:e8:47:34:1b:26:ab:
15:06:7d:2e:d8:b7:41:2d:58:a4:d0:51:dd:1b:38:
eb:99:5f:72:06:46:de:8e:29:67:b2:f8:6b:2c:eb:
03:af:1b:56:00:f6:c1:cf:d4:4d:be:14:b1:56:08:
ed:fc:27:af:cd:6d:11:19:94:b3:08:fc:af:61:4e:
4f:9e:77:ac:51:0e:41:94:97:e0:82:11:66:32:45:
5e:5b:d1:4b:46:36:11:a4:34:5b:75:04:ec:d2:6c:
bc:75:19:3a:33:c0:2f:6d:04:d6:39:90:a4:a0:e7:
b5:01:9a:65:10:dd:39:46:74:ad:4e:73:68:1e:1e:
0d:d8:ae:78:13:1f:05:c1:5f:1e:df:62:13:07:72:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CA:EF:52:77:DF:3C:50:23:9E:0B:8C:B8:63:80:87:A4:6F:BC:AE
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/439bdb3b-6a6d-473b-89eb-2205b40adf79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.197.196.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:3f:64:90:84:32:7a:65:12:9b:6a:9e:81:20:3d:8e:6f:39:
bd:05:8b:60:37:65:ac:c5:ea:f0:81:d9:b8:90:7d:bd:af:9c:
16:79:6e:c6:0f:4c:6c:ea:18:64:98:5d:5e:14:d7:be:94:90:
e3:ea:00:ae:bd:0f:c7:93:29:c0:3d:72:f4:b7:ae:9c:ed:32:
d4:df:35:f0:a3:8f:13:41:ef:96:07:38:a4:7e:e6:31:b4:4e:
5d:f7:63:31:7e:c3:fa:a8:36:36:8e:cc:e7:2b:5a:67:1c:86:
30:32:eb:2a:38:1a:5c:e4:3b:b0:83:5f:2c:4a:03:aa:d6:52:
9a:28:46:4b:14:95:52:ac:84:a6:62:ce:dc:7a:49:4c:40:b9:
96:37:b0:b2:0a:9d:53:58:18:08:11:f0:f6:63:11:56:33:d9:
5e:90:d0:fc:55:44:f0:a5:2e:06:ba:c5:23:c7:32:65:0c:51:
3d:7f:c4:a2:ce:41:96:79:10:e4:e0:92:39:77:c7:c9:62:23:
56:a0:1b:f3:82:0e:02:12:e3:27:7b:55:22:94:b4:90:74:20:
87:b8:dc:b5:98:c8:ee:88:87:e4:1d:c3:e7:28:8f:3b:fb:3a:
c9:60:bd:cf:bd:f9:23:c6:35:2f:0b:ad:cb:60:ad:cf:17:ba:
53:58:0c:7f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOVbE+908l65OoVPX4yg3G0T4MRkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIyMDMzMTEzWhcNMjcwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AwNGE5MGMwMGNkYzg4MDU1YWQyM2Q4ZjUwNDMwZjRkNWM2
YzcwNmMxZTBkMGQ1OTY2NDdmNzliNjY0ODliYWY2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDbBMi0YBUy/1/fWRZHkNrMqCz6ENTvzbmHNT1N0NttyY3O
uw/Xme9nfBPt8FdxMtStD/shnICkA60z3JvDJZwN8BN9da5fiXBInJVnNQ4xf7J8
k9hZK4LiM37boWcXOTGNAI7ARowCshSNH3lv64AH5ehHNBsmqxUGfS7Yt0EtWKTQ
Ud0bOOuZX3IGRt6OKWey+Gss6wOvG1YA9sHP1E2+FLFWCO38J6/NbREZlLMI/K9h
Tk+ed6xRDkGUl+CCEWYyRV5b0UtGNhGkNFt1BOzSbLx1GTozwC9tBNY5kKSg57UB
mmUQ3TlGdK1Oc2geHg3YrngTHwXBXx7fYhMHctpNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUXsrvUnffPFAjnguMuGOAh6RvvK4wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzQzOWJkYjNiLTZhNmQtNDczYi04OWViLTIyMDViNDBhZGY3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAI2xcQwDQYJKoZIhvcNAQELBQADggEBAIs/ZJCEMnplEptqnoEgPY5vOb0F
i2A3ZazF6vCB2biQfb2vnBZ5bsYPTGzqGGSYXV4U176UkOPqAK69D8eTKcA9cvS3
rpztMtTfNfCjjxNB75YHOKR+5jG0Tl33YzF+w/qoNjaOzOcrWmcchjAy6yo4Glzk
O7CDXyxKA6rWUpooRksUlVKshKZiztx6SUxAuZY3sLIKnVNYGAgR8PZjEVYz2V6Q
0PxVRPClLga6xSPHMmUMUT1/xKLOQZZ5EOTgkjl3x8liI1agG/OCDgIS4yd7VSKU
tJB0IIe43LWYyO6Ih+Qdw+cojzv7Oslgvc+9+SPGNS8Lrctgrc8XulNYDH8=
-----END CERTIFICATE-----
Generated at Sun Nov 8 01:04:05 2026 by rpki-client