
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55d136f6-1761-4324-9084-1c5f7cd6a3c2.roa
File: 55d136f6-1761-4324-9084-1c5f7cd6a3c2.roa (raw, json)
Hash identifier: hovr40FwYu0EDkm+dzCkY+9J0XPgRdsPPWv1Cd+TiNA=
Subject key identifier: 7A:40:6C:84:4C:F5:4F:3A:7D:16:E4:BD:18:DF:27:C8:31:3E:27:51
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1CD09AE0B57B8A930BB670D37F98A59D9218AE81
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55d136f6-1761-4324-9084-1c5f7cd6a3c2.roa
Signing time: Mon 18 May 2026 00:00:07 +0000
ROA not before: Mon 18 May 2026 00:00:07 +0000
ROA not after: Sun 16 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.173.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d0:9a:e0:b5:7b:8a:93:0b:b6:70:d3:7f:98:a5:9d:92:18:ae:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 18 00:00:07 2026 GMT
Not After : Aug 16 23:59:59 2026 GMT
Subject: serialNumber=2bcf8322d0bdfa1ea626e09b539ed52c5f1119769edd462258715f504dce16df, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:46:c7:c0:d0:85:b5:ff:45:3a:16:3e:12:
94:ce:05:bc:72:c1:73:2e:94:10:68:6d:fb:56:8a:
f4:4a:31:e5:6b:93:89:7c:ab:76:cb:9f:34:b6:04:
ef:80:f6:de:fb:8d:53:bf:e0:02:af:1f:8f:70:0e:
dc:35:0b:f2:7f:45:a1:95:85:2d:e8:31:fa:15:cf:
e6:20:8a:4b:05:b8:d5:f2:d9:e9:48:a6:c3:e5:4f:
61:2b:af:86:b9:0c:39:07:2f:16:a6:d3:48:5d:b0:
3b:d7:eb:ed:c8:49:e9:0e:71:8d:41:b1:33:0e:1d:
83:2a:93:8f:a0:88:28:40:37:cf:d6:84:5d:aa:af:
47:49:19:4d:98:23:eb:dd:b0:72:88:7f:0c:4d:a0:
cf:34:37:e5:c2:61:06:26:1e:d9:d0:92:98:6b:fe:
05:1a:7f:e8:79:57:75:d1:7a:96:66:35:94:4b:c2:
7f:57:34:b3:48:38:3d:44:58:2f:07:df:9a:67:c1:
fb:8d:89:20:f7:5b:90:97:f7:4c:88:d3:72:ac:32:
d0:3f:d8:7d:62:68:ba:5b:18:9a:66:80:08:46:50:
62:c2:bd:7a:66:13:1f:84:2f:36:07:3b:4b:f1:18:
93:58:a6:18:7b:f2:d7:6f:2e:cb:89:d2:4b:7e:36:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:40:6C:84:4C:F5:4F:3A:7D:16:E4:BD:18:DF:27:C8:31:3E:27:51
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/55d136f6-1761-4324-9084-1c5f7cd6a3c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.173.156.0/23
Signature Algorithm: sha256WithRSAEncryption
67:cc:d0:89:89:d6:9e:1c:14:41:a4:ed:87:17:d7:0e:8e:5e:
cc:c0:95:f0:55:c0:95:c2:5d:a3:40:80:08:08:3b:a6:bc:c7:
8b:d0:0a:17:3c:4d:45:de:40:7d:e3:76:20:d5:04:a8:b2:64:
72:05:cc:f7:30:dd:a6:7a:7d:bd:a0:56:6c:dd:ad:8e:e6:3f:
af:5e:af:99:62:4d:f8:24:bb:70:90:ac:ca:52:06:5b:16:35:
28:a9:b6:66:7a:a1:f3:9d:8a:fb:e5:5d:7d:26:c2:11:4f:3e:
ab:23:42:f6:76:05:c6:42:95:21:eb:62:69:4a:07:bd:d5:68:
d9:d4:7d:29:a6:33:63:6c:54:3c:6a:4a:a5:d0:76:18:7c:b0:
bc:3a:83:1d:db:5a:8a:2b:c0:d6:e0:a2:2b:ca:dd:ea:21:64:
98:ff:b6:59:19:d8:ec:77:0c:76:07:0a:4b:3c:00:2c:c4:af:
29:fb:c4:4c:e4:ab:fb:e7:20:dd:b6:97:6d:db:a4:4e:94:89:
3a:a3:df:1a:70:13:ae:c8:05:41:1a:d7:27:c2:9d:8c:5d:19:
48:9a:dc:14:c2:45:56:07:ed:6a:b6:28:59:0b:7a:01:43:7e:
97:5e:b2:e0:eb:25:c3:31:a0:80:a4:d0:e4:55:6f:83:d4:d3:
3c:44:d7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:22:10 2026 by rpki-client