
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60d35832-d398-4156-b80b-63c2f7f67892.roa
File: 60d35832-d398-4156-b80b-63c2f7f67892.roa (raw, json)
Hash identifier: 31Ujs75JoBwmBneeTqhLyLe7ZarR4W5sEmn0aTTdHMs=
Subject key identifier: B4:B0:94:E4:9C:9E:F2:6A:4B:8E:CA:20:E1:4E:65:E2:0F:DA:D7:67
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 63CFB02569229BB16C99ECAAB3C39B090AD8B474
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60d35832-d398-4156-b80b-63c2f7f67892.roa
Signing time: Mon 26 Oct 2026 02:10:53 +0000
ROA not before: Mon 26 Oct 2026 02:10:53 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.224.0.0/12 maxlen: 12
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:cf:b0:25:69:22:9b:b1:6c:99:ec:aa:b3:c3:9b:09:0a:d8:b4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 02:10:53 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=76471441ad35deb48a2bf48ba78dae8ffcc8018e6f886a8b162067040287bb9f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:ec:fd:c3:58:c9:25:63:56:55:1b:b7:65:
ea:51:aa:77:75:af:be:44:7b:b3:b2:57:a1:63:93:
03:af:17:2c:99:ea:f4:5a:6b:07:5d:1a:c0:28:e0:
65:a3:91:8a:2a:6c:91:5e:e8:95:64:e9:64:1e:e4:
96:ea:1b:c0:64:31:8c:fa:b0:14:ba:0a:94:d0:1d:
6f:04:cb:f3:cc:fa:ae:2e:68:d2:fa:ec:cb:cf:e7:
0b:66:60:d1:b9:0d:ed:46:bd:f7:47:89:64:db:33:
67:d2:c3:c9:fd:2b:cf:93:aa:23:af:8f:d3:4b:f5:
f1:54:af:23:7e:7c:63:5f:8d:cf:41:11:a2:34:f3:
be:b4:26:7e:48:82:8f:7b:55:f0:da:49:16:57:a2:
20:d0:d3:8d:1f:d7:c5:7e:98:01:43:a4:8a:57:a4:
e3:d0:96:4e:71:c8:f8:8c:99:78:0b:14:40:d0:66:
f5:fb:72:23:d9:21:fc:e5:fa:41:f9:59:93:f0:5a:
ca:ad:12:5a:ab:aa:ac:47:ec:30:50:05:30:7c:d0:
93:59:62:25:d0:29:5b:5c:eb:11:d1:39:2d:5d:0b:
20:2e:46:6f:26:ee:82:b9:76:47:1f:cf:a4:ae:6d:
41:f4:8c:8d:89:b7:7d:7c:7f:ec:1a:89:e0:e6:61:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B0:94:E4:9C:9E:F2:6A:4B:8E:CA:20:E1:4E:65:E2:0F:DA:D7:67
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/60d35832-d398-4156-b80b-63c2f7f67892.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.224.0.0/12
Signature Algorithm: sha256WithRSAEncryption
93:e1:e7:ee:b2:c6:0e:85:1d:c6:64:17:c4:74:66:b0:53:a3:
df:b9:aa:ec:81:68:ac:88:8c:28:32:58:e4:e9:fc:58:51:fa:
0a:80:ea:02:c5:8f:17:86:2c:02:99:dd:7b:c7:47:50:fc:2d:
23:7c:77:8f:d4:fc:d9:62:93:f6:f7:30:33:57:38:60:fd:a6:
c3:67:ef:01:b6:5e:5f:03:cc:7f:03:15:96:b3:a2:99:bf:21:
f0:26:8d:6e:35:10:21:72:f2:bf:c9:7a:d5:df:1a:11:dd:9d:
bd:44:07:af:3a:c2:2b:7c:1b:14:32:ab:92:f7:aa:df:c3:44:
14:7b:85:34:58:6e:f2:44:69:d5:b9:8a:95:0d:5a:30:54:d3:
9d:7a:6e:81:55:b6:8e:92:71:db:de:87:08:6e:79:ac:23:06:
5f:dd:68:4b:07:80:64:e9:9a:8a:86:aa:b2:9e:a9:69:2c:94:
d5:ad:fa:46:a2:20:a7:77:a4:e6:22:65:63:44:91:af:76:9f:
f2:8c:ad:49:fa:9f:ec:93:92:fe:f6:00:57:83:2b:7c:af:9c:
fd:5b:76:2d:1a:56:42:a4:35:07:69:bb:9c:e4:07:b4:71:3d:
c3:c4:33:1d:66:f3:81:35:d5:d9:3f:e8:c9:fd:6e:d6:db:36:
66:14:d4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 01:07:55 2026 by rpki-client