
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49b5ec8f-d942-4926-a2b1-e521176a070b.roa
File: 49b5ec8f-d942-4926-a2b1-e521176a070b.roa (raw, json)
Hash identifier: MTM1uukfPmGGezWURzmIhetAom1DMAXa2nLaTGF5p3Q=
Subject key identifier: 41:F7:68:26:49:C6:C8:0D:B3:AD:5D:5F:5B:56:3D:D6:FB:6B:AD:AC
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0DA8A1464F596452A6FF53B5CBCDCEDCB3A3B02B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49b5ec8f-d942-4926-a2b1-e521176a070b.roa
Signing time: Mon 23 Feb 2026 00:30:47 +0000
ROA not before: Mon 23 Feb 2026 00:30:47 +0000
ROA not after: Sun 24 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.182.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:a8:a1:46:4f:59:64:52:a6:ff:53:b5:cb:cd:ce:dc:b3:a3:b0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 23 00:30:47 2026 GMT
Not After : May 24 23:59:59 2026 GMT
Subject: serialNumber=d082c7500d8e327dcefc45d98732f3d1d3e7b30174ab28c2cded4cf968918ff9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:12:06:35:39:73:8d:4c:5f:c4:cc:c0:00:
fc:4a:df:b3:2d:4f:bd:fe:6e:79:43:80:d4:5e:60:
24:92:03:a9:b4:df:27:70:8a:d1:29:28:0e:b3:96:
45:06:20:cf:f3:38:23:5d:0b:3c:e8:c5:7c:db:59:
a8:94:24:b4:f3:2d:2b:e2:06:7b:79:16:b5:27:d3:
1c:bf:21:1a:f7:ab:b8:06:2f:8e:1c:4c:1f:9b:66:
00:fb:f4:ac:8f:77:18:cb:9c:a8:db:fe:af:83:8c:
d3:a2:31:88:2e:01:59:db:a9:94:65:99:2e:c4:80:
fe:0c:07:4e:6b:00:9b:ba:a3:5e:3f:81:66:06:43:
87:f2:2a:1a:d1:7e:0a:d4:38:01:21:7f:67:cf:5c:
36:ee:5a:80:99:67:8f:4a:7d:af:67:f8:88:a4:16:
2c:f3:12:68:4d:6c:63:11:a6:d9:67:ee:b5:60:70:
f9:c8:99:63:04:43:cc:f1:d0:69:4c:0f:11:74:81:
c8:43:7b:7b:9f:83:1a:e2:d7:24:2b:ea:28:d5:df:
12:4e:13:3d:12:4f:89:b4:28:ea:bc:d0:1e:e1:8f:
2f:03:a6:75:e3:d5:5a:b2:43:8d:d1:31:e1:2f:b9:
0d:a2:5a:dd:d1:6e:7f:4c:da:1c:80:2c:da:de:29:
91:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F7:68:26:49:C6:C8:0D:B3:AD:5D:5F:5B:56:3D:D6:FB:6B:AD:AC
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/49b5ec8f-d942-4926-a2b1-e521176a070b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.182.162.0/23
Signature Algorithm: sha256WithRSAEncryption
93:d4:54:3e:49:80:f7:cc:2d:6e:a7:64:00:32:d0:04:40:8c:
f3:84:07:93:ca:d8:01:b0:a9:f9:59:c8:94:59:e3:9f:37:7a:
9f:34:bd:ff:0d:d4:c6:89:52:b4:8b:32:48:3d:3b:d4:a7:57:
0b:30:5e:6f:13:ce:03:25:af:b5:bc:88:c9:78:1a:0d:97:34:
0e:0a:57:b0:b7:73:fb:47:85:f1:c2:dd:a7:ab:be:46:9b:04:
cf:31:e2:52:d8:56:e5:46:0d:3b:22:cc:b2:11:ed:f4:50:45:
44:9c:74:cf:d7:b5:69:53:37:cb:b7:77:e9:21:38:ee:fb:03:
50:bd:a7:4e:3c:9d:a1:d4:7f:f7:1a:47:fe:65:bb:5e:94:de:
c2:8b:af:bc:26:01:49:48:ce:bf:54:c5:96:bc:a9:42:57:a5:
5c:97:f0:a1:f5:99:78:5b:b5:f8:f5:5f:15:f7:ce:50:a8:7e:
73:0d:5f:c3:02:12:97:70:0d:f4:bd:a5:91:1e:2c:ed:04:4a:
ca:0e:a1:b0:4f:cf:fc:0f:45:d2:50:66:f3:1b:a0:28:8c:33:
09:cc:6e:01:64:47:e3:8f:d2:e0:a9:a0:14:e8:6f:d5:a4:e3:
93:8b:99:7c:02:d0:13:ac:5f:7b:85:83:6e:36:29:f1:5d:65:
8d:e9:52:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:42:49 2026 by rpki-client