
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d011d6b-f996-44f9-9c1c-7540f44f2e0d.roa
File: 5d011d6b-f996-44f9-9c1c-7540f44f2e0d.roa (raw, json)
Hash identifier: PevISKuXNISQMV8/1iQuGNsJfQZTVYCSBG52SjJwWBU=
Subject key identifier: B9:AA:F0:5D:EA:6D:96:0D:B4:B9:B2:D6:42:7E:00:BA:2A:FC:8B:F0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4C0DDA6557EA4A2AB0080231101A8A546462F9B7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d011d6b-f996-44f9-9c1c-7540f44f2e0d.roa
Signing time: Fri 15 May 2026 02:30:15 +0000
ROA not before: Fri 15 May 2026 02:30:15 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.236.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:0d:da:65:57:ea:4a:2a:b0:08:02:31:10:1a:8a:54:64:62:f9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 15 02:30:15 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=dfce52eba870e293dfc9c9e4bae5fd4222bb57428eb08c15173eac288b154ab5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:62:0d:44:94:46:cc:80:8e:4b:fe:7f:9e:
62:da:0d:2a:5d:30:2c:ae:dd:87:d9:ca:e2:4d:76:
7b:3c:5b:21:97:b5:16:bf:98:ee:68:9a:95:bb:7c:
a7:d4:a7:10:cd:29:5a:82:76:84:b4:05:4a:02:be:
b6:c7:90:0a:3f:30:70:a7:c6:81:44:de:c1:6e:31:
de:31:b2:a3:db:3b:29:df:b4:4c:38:74:3f:2b:f3:
70:df:9b:16:53:38:a9:20:bf:1f:86:fd:3f:c1:3c:
8a:dd:29:b0:20:89:2a:48:af:98:72:fd:46:7c:8b:
e5:8f:01:45:5d:d8:a1:47:eb:76:ab:eb:eb:fd:19:
28:5d:22:eb:69:b6:d1:0d:09:8a:f9:af:49:b7:46:
dc:94:cd:28:5f:7a:06:e5:82:40:32:c2:7d:76:75:
f3:fc:7f:5f:69:34:f8:98:89:83:03:08:34:fa:f8:
4c:be:c3:4c:c8:66:2b:43:59:f7:64:ac:dd:85:ce:
72:c1:0e:62:89:c9:b8:3c:d0:db:29:1f:14:b6:23:
86:6b:06:8c:2f:aa:8d:08:b1:d4:7e:07:ad:9c:fa:
1b:a4:8d:91:c6:92:6d:ba:bf:51:73:1d:ff:26:53:
5b:c0:b4:ae:34:0c:92:ec:c8:cd:8e:f7:1d:2b:2e:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AA:F0:5D:EA:6D:96:0D:B4:B9:B2:D6:42:7E:00:BA:2A:FC:8B:F0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5d011d6b-f996-44f9-9c1c-7540f44f2e0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.236.128.0/17
Signature Algorithm: sha256WithRSAEncryption
42:1f:b5:71:e1:eb:7a:e3:46:e0:f0:f1:ac:91:f1:02:d8:bd:
ab:be:34:93:dc:ff:b9:72:40:d2:3b:3d:aa:fd:9d:1a:7b:c4:
0b:2f:92:09:43:50:13:62:b3:88:9a:c3:cf:76:39:34:9b:a3:
a0:04:18:25:96:54:ab:ca:4e:93:de:0d:d6:9e:bf:1f:23:7c:
ca:b8:d6:5c:33:6b:24:45:c8:34:26:2e:a4:b6:80:df:ff:2b:
ec:c8:7a:05:8e:77:37:4e:b2:3e:ad:be:cf:11:f0:0b:e3:b2:
c8:7e:79:05:d2:7b:39:b3:05:49:94:a4:44:dc:9d:d4:e9:bf:
2c:83:62:b4:49:b5:d8:da:59:c2:21:de:4e:2e:b8:7e:9e:e3:
0b:ec:c0:cc:f9:5d:ef:e3:09:66:99:eb:82:b3:8e:71:0c:3b:
c0:93:9e:27:e4:d7:d3:4d:56:81:13:ae:90:6b:18:4a:a0:8e:
dc:e9:1b:56:0c:c2:2c:09:9e:91:ae:64:b5:57:94:7a:90:ba:
71:c7:71:17:59:5f:32:fc:92:45:69:e9:85:35:4c:13:d7:de:
71:ad:c9:4f:2d:54:14:a0:5b:09:8b:cc:0b:b5:a0:cb:96:32:
7d:dd:e7:f2:f5:70:4c:76:77:a8:df:f9:35:62:c6:51:63:e8:
95:fd:d7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:38:08 2026 by rpki-client