
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4fe19bb6-85a0-4b1e-91f8-bbe44da298e0.roa
File: 4fe19bb6-85a0-4b1e-91f8-bbe44da298e0.roa (raw, json)
Hash identifier: cwBrIjOc4W4WoC76X/vufJGGoggXsLOolvGtyfK0Ye4=
Subject key identifier: A0:0F:59:67:CC:D3:1C:14:0F:72:73:D0:27:91:09:46:71:78:15:E9
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 22CF4D2854BADB15001F12ED6C299A12B5CC3F88
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4fe19bb6-85a0-4b1e-91f8-bbe44da298e0.roa
Signing time: Sat 28 Feb 2026 01:40:39 +0000
ROA not before: Sat 28 Feb 2026 01:40:39 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.93.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:cf:4d:28:54:ba:db:15:00:1f:12:ed:6c:29:9a:12:b5:cc:3f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 01:40:39 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=4aa682aa3174a3c34688fc0169e5eda774f79f71fefa44df9febcfa72ca22866, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c5:95:ce:dd:b1:fe:65:3f:d0:17:f1:87:20:
94:17:c1:2b:42:89:47:6c:4d:86:0b:90:dc:f1:37:
0c:fa:f6:f2:23:35:9c:2b:93:46:a8:a7:5c:0b:41:
f5:5c:74:21:f6:79:50:2a:4a:99:e7:51:20:d7:2c:
dc:ca:22:90:e7:2a:8d:bb:fe:c9:db:98:dd:79:8b:
aa:b5:20:82:fb:0f:97:a9:16:d5:bb:1d:78:26:42:
b5:ae:39:23:80:fe:c9:22:39:59:da:8b:4e:76:76:
af:57:73:6b:c9:fb:dc:35:73:83:4e:3f:86:fa:1b:
6e:44:58:e3:0b:3e:f4:10:ed:bb:f7:32:6d:0f:87:
6e:60:62:ee:ca:2a:f5:b7:69:a0:23:a9:0b:05:18:
9e:45:bf:b5:6e:98:da:e9:36:f0:be:52:ba:27:e5:
9b:58:b1:82:b5:87:61:22:14:43:48:4d:b2:b3:ed:
6a:4c:0e:b5:18:33:5b:b3:c4:5b:91:e2:5f:3a:de:
9f:a2:c9:9b:3f:b8:8d:14:39:d3:19:f7:73:fe:5e:
03:6c:87:71:03:4b:82:57:b7:d3:a4:c4:6e:22:59:
d2:84:8f:16:39:33:41:e5:04:89:d6:f8:e1:7c:1f:
02:6c:2f:b4:31:16:63:e9:2b:1d:49:27:fc:de:15:
36:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0F:59:67:CC:D3:1C:14:0F:72:73:D0:27:91:09:46:71:78:15:E9
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4fe19bb6-85a0-4b1e-91f8-bbe44da298e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.93.97.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3d:36:f5:5a:41:97:c7:02:1f:70:91:88:89:8b:ad:bf:7c:
5a:95:8f:6c:4b:b4:d8:c7:89:2d:f5:5c:3f:b4:64:cf:16:e8:
1a:b9:a3:2a:fc:62:16:63:66:bd:e9:20:54:94:7a:6a:38:88:
30:28:48:75:6b:8d:b5:d7:f5:c2:97:55:67:6a:e0:29:74:fb:
2a:e4:de:28:76:bb:8a:85:c3:eb:18:1b:9f:29:c9:f3:06:96:
7d:67:c3:36:61:6b:d8:8d:0d:02:c5:84:62:5a:e6:84:03:10:
e4:e7:4f:da:c9:30:f2:54:5c:c8:c9:0d:eb:84:ce:07:2a:aa:
81:61:ff:c1:4d:e0:50:7a:71:fb:48:7a:2d:c6:c0:13:86:70:
c8:48:e3:c2:eb:30:7f:bc:f5:db:2f:ba:f8:46:b1:6c:32:86:
37:3d:3d:75:7e:a6:1e:fb:a3:93:3d:05:76:ba:c2:29:ef:e7:
a8:7c:bd:ec:c6:2d:7f:7f:8a:e4:5e:d4:25:5d:99:93:21:22:
8d:28:5e:52:1a:0f:31:27:f3:92:ac:fc:db:89:e1:0a:55:fa:
ab:85:81:5b:c2:54:09:77:0b:75:3a:98:d2:f9:a6:32:e0:2e:
2f:f1:c2:0e:43:a8:02:0b:6d:6d:25:61:2c:f5:7f:08:98:ff:
bb:f3:bd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:49:25 2026 by rpki-client