
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6843de4b-e8b8-4856-8c54-8134815f6a17.roa
File: 6843de4b-e8b8-4856-8c54-8134815f6a17.roa (raw, json)
Hash identifier: 7VFww05tL4ZGNrgnH/CBPWH/abS0gdzAu8uU/2GpiwQ=
Subject key identifier: DF:60:83:14:6D:37:C4:EB:55:ED:55:B7:97:AC:7A:6A:EB:76:46:E3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 56FA9F3E5FCE5568A38483FECB1C068B0B6AA0D9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6843de4b-e8b8-4856-8c54-8134815f6a17.roa
Signing time: Fri 15 May 2026 03:40:07 +0000
ROA not before: Fri 15 May 2026 03:40:07 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.244.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:fa:9f:3e:5f:ce:55:68:a3:84:83:fe:cb:1c:06:8b:0b:6a:a0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 15 03:40:07 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=1491c30088e554f426e6ad7f4c2dd99ebe3bc04579fd725bab786c9af59fc521, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:ac:1d:2c:a8:72:15:71:0e:2a:22:06:f7:
46:15:d4:b8:8e:ba:48:3a:df:29:c3:79:b2:10:eb:
63:8d:50:b0:d8:22:8e:42:75:8b:1e:a7:c4:66:70:
bd:45:ec:86:c1:d7:14:fc:5f:1c:88:65:43:47:f9:
12:8b:54:73:11:8a:ef:b9:2e:81:9d:b2:ed:fc:03:
de:52:51:09:5c:76:28:2f:a8:6b:28:63:34:4f:8f:
31:65:38:89:41:96:48:2c:20:07:12:39:1c:02:e2:
5d:6a:6d:61:2b:be:00:72:8f:fc:b7:39:51:e6:db:
90:55:3b:85:15:3f:68:4d:fd:f3:ff:0d:96:48:a8:
04:7d:23:d3:1e:1a:95:09:39:2d:86:02:5e:52:41:
e7:76:2a:48:f5:d8:af:0c:67:4d:fa:2d:fe:88:e6:
96:52:79:73:f0:44:4c:ab:c9:9d:92:e6:00:01:06:
27:e6:cc:83:8e:55:88:35:e8:39:14:66:2f:59:d8:
5a:ae:43:93:d7:41:ca:e8:81:4e:c5:49:5b:bc:cd:
f1:35:bd:9f:df:b7:92:37:63:90:88:3c:21:a9:a1:
ac:d1:e4:5d:27:07:97:ee:95:d3:df:90:62:c1:ca:
2a:64:f7:33:af:d1:f3:22:17:86:35:d6:52:cc:48:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:60:83:14:6D:37:C4:EB:55:ED:55:B7:97:AC:7A:6A:EB:76:46:E3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6843de4b-e8b8-4856-8c54-8134815f6a17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.244.0.0/18
Signature Algorithm: sha256WithRSAEncryption
82:e9:44:af:99:db:fd:4a:2f:ef:01:b8:93:b8:63:b4:b8:af:
44:c2:2d:89:14:fa:7c:da:9f:93:2b:6b:c1:45:68:75:8d:a9:
4f:e9:51:e6:e2:52:ed:70:73:1f:9c:c8:77:d1:ef:5f:ae:42:
2d:06:2e:db:63:be:4f:62:88:d1:ab:66:f9:f4:f5:da:6e:95:
b7:ed:02:5a:c3:fe:ba:b2:92:fe:3d:de:2e:6b:d5:62:f8:c3:
25:dc:51:c9:41:70:74:f7:76:31:35:61:57:41:e5:bb:db:70:
b3:2d:ea:20:15:bf:7b:7a:5a:5f:d3:a4:95:2c:03:c3:7e:6f:
e7:3f:1e:80:62:f3:ca:ac:91:3a:19:48:62:2d:10:28:aa:0a:
7f:15:2e:bf:9f:0c:d9:e0:14:3d:18:13:97:e7:d4:14:12:ba:
af:35:22:e6:f8:62:d5:04:33:d8:1e:79:57:8e:fb:61:16:e3:
d1:fd:c6:9a:68:7e:90:e2:f9:c0:0b:73:1e:f0:93:f0:17:20:
d2:bd:75:fd:7b:3f:21:57:69:3c:b6:4a:ea:28:a3:de:e2:f8:
40:fc:82:a4:5d:8b:50:0f:a7:2e:df:7b:8c:2a:e0:89:4a:0e:
e8:d7:2b:57:5f:07:5c:89:b9:9c:62:6d:63:14:ee:45:67:5d:
ed:8d:3b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:33:43 2026 by rpki-client