
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44f5e870-ef5a-4681-a2fb-c5a77a19ea66.roa
File: 44f5e870-ef5a-4681-a2fb-c5a77a19ea66.roa (raw, json)
Hash identifier: ptd0G86a/UU6kzzt34XC13oN39FqNEZQARzVaYfqUDI=
Subject key identifier: A9:FD:29:F9:6F:54:E4:36:7C:BE:A7:A9:43:F2:F8:44:1A:BC:A0:49
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 68C36735C191A2034F747230E4B108E791AB1812
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44f5e870-ef5a-4681-a2fb-c5a77a19ea66.roa
Signing time: Wed 21 Oct 2026 01:10:35 +0000
ROA not before: Wed 21 Oct 2026 01:10:35 +0000
ROA not after: Tue 19 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.150.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c3:67:35:c1:91:a2:03:4f:74:72:30:e4:b1:08:e7:91:ab:18:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 21 01:10:35 2026 GMT
Not After : Jan 19 23:59:59 2027 GMT
Subject: serialNumber=d57b0f1fd749ae2b84d0700a4bf3d0021c657c3e3c6694d1e6a91a2b57f76053, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:de:27:82:3c:de:04:d1:c8:cb:37:d5:f5:db:
d4:4a:ff:ab:45:46:8f:b2:d4:67:04:12:f3:df:d5:
0d:31:98:a9:2b:f4:a3:e3:51:16:eb:14:0f:a4:36:
a8:22:49:3c:b5:04:fb:7c:29:43:09:34:11:c4:d3:
b5:47:79:ce:cc:02:be:aa:72:78:67:24:19:20:72:
dc:8c:8a:6b:71:1d:c6:1c:bb:2e:41:be:8d:d0:2c:
32:5f:6d:25:ca:9f:01:d3:be:48:d8:1e:b2:5b:90:
7c:9e:a4:06:9b:e7:d6:99:41:a3:9d:67:45:40:b7:
f2:85:97:d1:ad:1b:a6:03:59:bc:9e:fd:05:9b:05:
53:67:d0:6d:51:79:f1:fe:9f:72:ab:cf:a2:1d:eb:
1a:b1:eb:6a:eb:1f:6e:45:c3:f0:79:cc:01:45:15:
e4:58:d5:3b:de:9c:6e:fe:45:33:b1:aa:5c:86:4b:
d4:a4:bc:78:84:6a:94:14:20:25:6f:b8:a0:9f:51:
38:c1:45:95:60:21:49:19:e2:98:25:54:2b:0d:ff:
b4:42:84:8f:a2:69:09:dd:52:84:74:de:6c:bd:a6:
a7:d5:ea:cb:dc:35:82:0c:28:8f:bb:22:40:b7:be:
fd:e6:ac:a7:f6:b7:b1:db:60:82:de:04:e8:31:01:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:29:F9:6F:54:E4:36:7C:BE:A7:A9:43:F2:F8:44:1A:BC:A0:49
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/44f5e870-ef5a-4681-a2fb-c5a77a19ea66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.150.136.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:64:c0:16:a6:87:ca:bd:95:e3:0c:ce:02:3e:5f:e2:9a:ac:
db:7e:20:d2:76:0d:a6:18:e8:79:5b:3d:d3:12:52:d6:3c:2b:
fd:98:b3:c1:6f:52:58:24:7e:53:ad:70:01:cb:06:7e:1f:fb:
4c:52:b7:8f:50:83:53:7c:7e:b2:64:41:cb:9d:7a:62:14:9e:
db:8a:e5:da:60:ee:a7:02:81:1a:20:90:fc:87:94:ec:b5:96:
27:21:c8:d2:ad:02:a3:9b:03:30:dd:28:1e:99:2a:da:02:93:
7b:bb:32:f7:4f:86:10:3d:c0:51:ac:55:03:df:c7:99:00:30:
86:e1:e0:4b:25:91:03:17:92:02:cf:53:4c:3b:46:06:59:c4:
39:e8:a8:9e:17:4b:05:3b:23:3c:ff:1b:a7:35:b3:c3:09:f3:
e2:39:5c:d3:42:6a:78:54:27:23:21:9b:3b:4c:3e:da:78:f6:
56:a2:b1:fb:8e:1c:ed:95:65:ba:17:b5:3d:09:f0:b9:f2:4b:
3e:47:9d:18:c0:d4:54:87:f6:d2:57:9b:64:70:dc:69:78:01:
16:06:7f:23:15:9a:25:32:05:3b:73:b3:9f:bf:e3:b7:6c:3d:
37:92:fa:06:f6:ed:7c:4d:ae:92:b7:fc:e9:08:5d:fc:de:19:
49:2a:2a:81
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaMNnNcGRogNPdHIw5LEI55GrGBIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIxMDExMDM1WhcNMjcwMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNTdiMGYxZmQ3NDlhZTJiODRkMDcwMGE0YmYzZDAwMjFj
NjU3YzNlM2M2Njk0ZDFlNmE5MWEyYjU3Zjc2MDUzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCI3ieCPN4E0cjLN9X129RK/6tFRo+y1GcEEvPf1Q0xmKkr
9KPjURbrFA+kNqgiSTy1BPt8KUMJNBHE07VHec7MAr6qcnhnJBkgctyMimtxHcYc
uy5Bvo3QLDJfbSXKnwHTvkjYHrJbkHyepAab59aZQaOdZ0VAt/KFl9GtG6YDWbye
/QWbBVNn0G1RefH+n3Krz6Id6xqx62rrH25Fw/B5zAFFFeRY1TvenG7+RTOxqlyG
S9SkvHiEapQUICVvuKCfUTjBRZVgIUkZ4pglVCsN/7RChI+iaQndUoR03my9pqfV
6svcNYIMKI+7IkC3vv3mrKf2t7HbYILeBOgxAcuTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqf0p+W9U5DZ8vqepQ/L4RBq8oEkwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzQ0ZjVlODcwLWVmNWEtNDY4MS1hMmZiLWM1YTc3YTE5ZWE2Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAM2logwDQYJKoZIhvcNAQELBQADggEBAK1kwBamh8q9leMMzgI+X+KarNt+
INJ2DaYY6HlbPdMSUtY8K/2Ys8FvUlgkflOtcAHLBn4f+0xSt49Qg1N8frJkQcud
emIUntuK5dpg7qcCgRogkPyHlOy1lichyNKtAqObAzDdKB6ZKtoCk3u7MvdPhhA9
wFGsVQPfx5kAMIbh4EslkQMXkgLPU0w7RgZZxDnoqJ4XSwU7Izz/G6c1s8MJ8+I5
XNNCanhUJyMhmztMPtp49laisfuOHO2VZboXtT0J8LnySz5HnRjA1FSH9tJXm2Rw
3Gl4ARYGfyMVmiUyBTtzs5+/47dsPTeS+gb27XxNrpK3/OkIXfzeGUkqKoE=
-----END CERTIFICATE-----
Generated at Sat Nov 7 23:45:57 2026 by rpki-client