
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5daea8af-a28e-443c-9709-e53f3fd59433.roa
File: 5daea8af-a28e-443c-9709-e53f3fd59433.roa (raw, json)
Hash identifier: qfEtW+zfEVH3iBaOzLhSdnJZmSAVACSCAeT3M+q2ZW0=
Subject key identifier: 93:36:EC:C7:64:D7:C1:B6:1C:24:CC:B7:3B:39:D8:74:4D:52:60:AB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 21609885C6FE8D19AD3B09698F2CF84B22F1992F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5daea8af-a28e-443c-9709-e53f3fd59433.roa
Signing time: Sat 28 Feb 2026 01:20:48 +0000
ROA not before: Sat 28 Feb 2026 01:20:48 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.92.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:60:98:85:c6:fe:8d:19:ad:3b:09:69:8f:2c:f8:4b:22:f1:99:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 01:20:48 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=2b64fe7408ca5ab6b2c5325052610fa0182022b14eec6ac9b730e8a2f27e6d87, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:cd:4f:81:37:e6:56:5b:cd:26:7e:e5:9e:
7f:7c:3b:e7:c2:cd:7a:26:de:a9:58:66:86:7c:45:
22:01:ee:e1:6c:04:ba:17:9f:ca:79:d9:36:f0:e8:
31:df:b7:f6:c0:78:df:90:30:b8:04:c1:3e:dd:cc:
57:2b:01:c8:3a:46:e4:e8:e8:26:6e:0e:5c:91:40:
9c:56:0a:3c:7b:7d:a8:1a:4d:74:25:21:48:c8:ef:
20:f2:70:25:d4:db:db:8b:e4:e0:b4:8d:45:ea:92:
62:e8:c5:53:9b:04:a1:05:63:09:80:f7:d6:14:1f:
70:e8:09:de:55:f1:1c:b2:70:55:bb:1a:f1:e0:83:
51:56:8f:2b:86:69:ac:01:0d:67:ba:9e:61:df:3c:
97:6a:8f:7d:3d:35:e5:cc:38:3a:c4:b0:c5:b3:3c:
59:87:aa:f1:62:95:8d:df:22:4b:a8:75:42:ef:49:
ba:59:34:b8:de:8e:59:55:e5:f7:ef:f0:6c:5f:ce:
c8:6b:16:01:49:4c:39:99:1d:e0:3f:55:35:29:a4:
a0:f2:2c:c5:98:0b:5c:f2:34:b2:26:38:a9:33:bd:
ac:bd:a3:dc:05:62:f0:97:1f:ef:e0:c7:4e:c5:44:
01:fa:64:23:9d:0b:6f:4f:60:bb:4d:a6:c1:13:a0:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:36:EC:C7:64:D7:C1:B6:1C:24:CC:B7:3B:39:D8:74:4D:52:60:AB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5daea8af-a28e-443c-9709-e53f3fd59433.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.92.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a8:3e:fe:99:c5:ed:89:c5:52:b7:ac:4e:2b:0f:c1:f6:c9:d6:
14:07:5c:44:59:6c:7a:ab:9e:4a:1e:ba:06:d5:a9:f8:15:3b:
dc:59:61:84:0b:cf:cf:31:39:54:4b:3a:da:02:f4:e3:a9:6d:
1c:00:57:aa:6b:7f:9e:05:4c:cb:57:62:10:33:88:49:14:57:
d5:c8:d4:53:11:85:f5:b4:3b:ae:7a:15:89:94:2a:27:80:f4:
cf:22:c8:a9:dc:7e:1d:b2:11:86:f1:d9:4f:0d:dd:6b:64:e1:
2e:c9:15:b2:1b:5c:49:c8:b0:5b:62:ba:d7:df:08:a5:bc:23:
d0:bb:d5:16:48:ae:3f:16:21:61:ed:f7:dd:1a:94:37:74:77:
31:b7:ef:46:37:e0:30:28:7b:b9:15:6d:de:9a:88:09:0a:b4:
18:95:4b:a9:0a:0b:05:d6:3d:c0:e7:18:8b:96:16:32:2c:89:
56:bc:99:e5:5b:86:72:e0:bc:9c:ed:7e:2e:ce:97:a4:39:a9:
60:58:e2:19:6c:f4:9b:26:7c:ac:7c:00:36:b3:95:29:b1:b8:
ad:fc:58:d2:bb:d8:3f:2e:e8:6f:db:de:87:bb:cb:a3:e5:2a:
07:a5:65:d9:d6:f2:b2:e4:ec:35:09:74:16:7b:d7:da:ec:d6:
47:b3:e5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:20:37 2026 by rpki-client