
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a8e9f4a-8040-45bf-8350-33fa02ee76d5.roa
File: 5a8e9f4a-8040-45bf-8350-33fa02ee76d5.roa (raw, json)
Hash identifier: r9xsWz/r8NG+DkA/oKr98OU44vfEP5RGhuOJNWNybvE=
Subject key identifier: BB:57:ED:33:C5:2E:42:26:A4:0A:F3:0C:CD:C1:C7:95:83:41:58:4F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4242A6A978DDE43DD084919ECE9C61AFA8678D7D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a8e9f4a-8040-45bf-8350-33fa02ee76d5.roa
Signing time: Mon 18 May 2026 00:00:46 +0000
ROA not before: Mon 18 May 2026 00:00:46 +0000
ROA not after: Sun 16 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.167.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:42:a6:a9:78:dd:e4:3d:d0:84:91:9e:ce:9c:61:af:a8:67:8d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 18 00:00:46 2026 GMT
Not After : Aug 16 23:59:59 2026 GMT
Subject: serialNumber=8ac1411e1a8f5089df5aac94cb0dd1c63f0c42d407daa33e516c5cc63caf4d78, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:61:2c:46:03:e4:27:9a:f6:6c:c7:16:fa:23:
49:ee:1a:8c:fe:6f:14:1f:d6:87:94:dd:9f:95:78:
90:c3:6e:a3:3a:a5:bb:63:ac:10:0c:9f:76:37:38:
33:87:58:7b:3e:ca:ec:47:6e:b3:6c:4b:d1:2e:e1:
8d:60:1e:fd:03:50:a0:41:5a:ee:c7:d0:6d:18:1b:
aa:f9:7d:0e:5b:4f:29:09:82:43:85:f5:88:90:2c:
0b:96:85:2a:c3:92:0e:10:79:86:a1:0b:46:25:d1:
94:94:ce:02:a3:2a:e1:79:ad:f6:10:66:4a:aa:c3:
6c:db:4c:fa:ad:c7:12:62:ae:d4:47:f8:70:f7:98:
46:aa:be:32:43:82:a0:4f:13:a5:af:db:00:c4:59:
75:60:a7:ff:a1:54:af:2f:51:6a:45:73:44:c0:91:
38:44:e1:d0:3b:9f:87:25:7f:b5:54:88:e7:22:0f:
9f:96:f4:a0:86:35:ce:a8:47:7f:63:ea:d9:62:ba:
86:c1:93:bd:73:ef:9b:30:cd:cf:f3:44:7c:8b:8b:
2d:00:bf:c9:3b:1e:c4:1a:e9:b3:01:ea:68:3a:f9:
8e:d1:e8:73:65:72:23:da:4c:f6:69:0e:98:33:36:
32:a2:bd:5b:19:a6:59:95:d1:ca:bf:37:4b:d4:a7:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:ED:33:C5:2E:42:26:A4:0A:F3:0C:CD:C1:C7:95:83:41:58:4F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5a8e9f4a-8040-45bf-8350-33fa02ee76d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.167.14.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:4a:f5:eb:a3:fb:3f:de:c3:e7:41:2e:fb:e2:b3:76:07:17:
66:f5:b7:10:c8:2b:ae:11:e0:cb:be:a4:0f:8d:b8:7d:76:17:
b7:17:b9:23:d5:1b:54:17:87:3e:86:d0:89:7d:99:12:ac:10:
c9:1b:77:b8:81:1f:2e:46:85:6b:b8:6b:ad:d9:c3:32:d0:ac:
8c:97:20:89:42:c2:a8:da:c2:a8:a5:13:4f:2d:36:70:bf:f6:
42:48:a1:f4:49:64:f7:a6:f6:75:41:b4:5e:ab:fe:83:0e:8c:
9e:1b:39:ff:00:e3:76:36:c0:bb:01:d2:5e:06:82:26:fa:3e:
6e:fb:32:37:7b:1b:d4:55:7c:31:a7:c5:ca:b5:cd:1f:89:c0:
59:2c:70:78:e9:13:22:49:63:73:12:2c:f0:f5:20:b8:2d:33:
21:70:f4:f1:31:81:00:df:20:56:d3:fe:31:d2:dc:d2:63:ae:
3b:ae:af:40:24:9e:8b:4c:f5:a2:b3:50:23:68:30:25:f1:d6:
40:0e:ef:12:6c:f3:4a:1e:2e:2d:de:46:01:0a:d5:85:93:6b:
78:32:03:5f:1c:ca:86:69:39:51:95:0b:0f:fc:e7:a4:da:ba:
75:f0:56:81:2b:72:ba:4d:91:0c:4e:5e:a4:f0:e9:85:f9:7b:
88:6c:7e:a5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUQkKmqXjd5D3QhJGezpxhr6hnjX0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE4MDAwMDQ2WhcNMjYwODE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A4YWMxNDExZTFhOGY1MDg5ZGY1YWFjOTRjYjBkZDFjNjNm
MGM0MmQ0MDdkYWEzM2U1MTZjNWNjNjNjYWY0ZDc4MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2YSxGA+QnmvZsxxb6I0nuGoz+bxQf1oeU3Z+VeJDDbqM6
pbtjrBAMn3Y3ODOHWHs+yuxHbrNsS9Eu4Y1gHv0DUKBBWu7H0G0YG6r5fQ5bTykJ
gkOF9YiQLAuWhSrDkg4QeYahC0Yl0ZSUzgKjKuF5rfYQZkqqw2zbTPqtxxJirtRH
+HD3mEaqvjJDgqBPE6Wv2wDEWXVgp/+hVK8vUWpFc0TAkThE4dA7n4clf7VUiOci
D5+W9KCGNc6oR39j6tliuobBk71z75swzc/zRHyLiy0Av8k7HsQa6bMB6mg6+Y7R
6HNlciPaTPZpDpgzNjKivVsZplmV0cq/N0vUpyUNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUu1ftM8UuQiakCvMMzcHHlYNBWE8wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzVhOGU5ZjRhLTgwNDAtNDViZi04MzUwLTMzZmEwMmVlNzZkNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEDpw4wDQYJKoZIhvcNAQELBQADggEBAA5K9euj+z/ew+dBLvvis3YHF2b1
txDIK64R4Mu+pA+NuH12F7cXuSPVG1QXhz6G0Il9mRKsEMkbd7iBHy5GhWu4a63Z
wzLQrIyXIIlCwqjawqilE08tNnC/9kJIofRJZPem9nVBtF6r/oMOjJ4bOf8A43Y2
wLsB0l4Ggib6Pm77Mjd7G9RVfDGnxcq1zR+JwFkscHjpEyJJY3MSLPD1ILgtMyFw
9PExgQDfIFbT/jHS3NJjrjuur0AknotM9aKzUCNoMCXx1kAO7xJs80oeLi3eRgEK
1YWTa3gyA18cyoZpOVGVCw/856TaunXwVoErcrpNkQxOXqTw6YX5e4hsfqU=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:57:12 2026 by rpki-client