
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5303b9e0-5f88-4817-99c3-85375a31cbe7.roa
File: 5303b9e0-5f88-4817-99c3-85375a31cbe7.roa (raw, json)
Hash identifier: oTTqPcJNuOPEVT8Do4wh5iOkHpFi5hzrAozL2UEFwZY=
Subject key identifier: 39:C3:4C:92:19:89:2C:44:50:E0:26:AE:5D:5B:DC:45:29:FC:1C:B0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 77151038C0CFB85F684C28165F23F331885C4FC8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5303b9e0-5f88-4817-99c3-85375a31cbe7.roa
Signing time: Thu 14 May 2026 01:20:52 +0000
ROA not before: Thu 14 May 2026 01:20:52 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.42.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:15:10:38:c0:cf:b8:5f:68:4c:28:16:5f:23:f3:31:88:5c:4f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 14 01:20:52 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=cb51adcf6c70db466f6cce7fde214702ca40ed9db643eb6d3226c2789e06b427, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c8:f7:31:89:6f:e5:a1:f1:0b:e6:39:3d:d3:
9d:ea:e9:f5:73:32:a4:3d:d0:37:25:37:da:35:d9:
43:52:90:0e:ad:18:93:fb:1f:50:7c:18:02:82:94:
2c:8f:f0:d6:00:61:d1:13:0e:db:1c:a0:a0:fc:db:
ca:af:cb:13:b1:a2:86:28:96:2a:9f:3e:f5:32:5c:
43:29:a7:b4:8a:f8:d2:e6:1d:0c:d6:91:96:aa:25:
e0:a3:fb:18:0a:83:b0:e8:52:8c:fa:5a:30:d5:7a:
48:56:82:f8:67:b4:21:a2:17:7d:59:88:6c:a5:d9:
86:53:dd:77:be:66:e2:e1:ee:ac:9e:ca:53:56:22:
6e:9f:55:fa:95:c1:f9:29:ac:54:e7:d1:ad:34:0a:
b0:97:da:59:39:15:1a:94:cb:7c:46:b4:39:df:f2:
6d:e4:24:67:c7:e3:a4:da:de:dd:2b:a2:41:73:a2:
ba:c7:f6:ff:5e:67:30:57:f9:2b:c1:4f:62:21:8b:
25:cd:fc:ab:6a:7f:44:31:32:25:78:1f:20:50:29:
1d:23:dc:43:46:11:6c:b3:62:e2:88:fd:8b:5d:6b:
23:39:f4:b3:41:9f:3f:36:54:20:6f:4d:5b:b9:8b:
54:0d:3b:bd:8d:ee:a1:f6:aa:21:7e:d8:5f:d4:25:
d3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C3:4C:92:19:89:2C:44:50:E0:26:AE:5D:5B:DC:45:29:FC:1C:B0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5303b9e0-5f88-4817-99c3-85375a31cbe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.42.192.0/18
Signature Algorithm: sha256WithRSAEncryption
5c:3e:5b:f7:98:22:d2:d3:8a:59:29:c3:e3:0f:e3:ca:54:e5:
94:81:d0:de:92:8f:35:28:86:51:bf:cd:ed:1c:fe:e3:3b:d3:
a4:58:c1:e1:1c:be:5f:88:11:49:5e:c7:07:3e:a1:65:93:d5:
7a:23:42:74:98:15:3f:65:46:ea:a3:87:77:8f:55:86:02:5c:
95:7e:6b:0e:b0:06:16:16:27:dd:96:3c:73:ee:8b:ee:2a:a7:
d6:55:15:dc:5e:15:00:33:d7:c7:1d:d3:c8:f1:b3:e6:c6:83:
17:1c:ea:d7:37:48:db:0c:7d:16:b1:fb:55:7d:37:f4:b5:ab:
b3:96:ef:e5:ca:bb:d6:33:22:30:bf:82:03:87:be:ee:12:61:
a8:71:59:0d:b4:be:e7:6e:6f:65:b1:ae:19:d1:66:74:58:05:
a3:8c:d4:3d:34:03:df:db:3c:29:7d:24:a1:17:78:46:b5:be:
80:d3:e0:76:f6:38:59:b4:67:60:e9:2e:1a:5a:de:40:ec:f0:
f2:8a:97:39:27:0a:92:7a:5f:ea:9a:a9:0c:cb:dd:b9:38:15:
c3:b4:0f:86:0b:65:38:cd:b4:25:e9:ac:c1:ce:13:e7:02:d6:
f2:83:e2:9c:ff:ae:39:18:9d:2f:df:89:d9:c8:d1:1b:1a:c1:
83:05:7e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:52:15 2026 by rpki-client