
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c127b82-aa8a-4531-874e-d09d0dca0074.roa
File: 6c127b82-aa8a-4531-874e-d09d0dca0074.roa (raw, json)
Hash identifier: RkTPRpND0S/w5ZoTiHxLxZEg2VBfBRhpNHzFvueoT/k=
Subject key identifier: A4:63:D8:FE:30:C9:A0:2D:16:2E:7E:27:C9:98:DF:91:D2:2B:E4:3B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 41083DA44DF39E806522330047159BF43B397CDD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c127b82-aa8a-4531-874e-d09d0dca0074.roa
Signing time: Tue 19 May 2026 02:01:23 +0000
ROA not before: Tue 19 May 2026 02:01:23 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.161.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:08:3d:a4:4d:f3:9e:80:65:22:33:00:47:15:9b:f4:3b:39:7c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 19 02:01:23 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=18d251ade385be4c8e9876a225c863921774e6176de794e01af77252192781e9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:de:78:93:d7:70:de:cd:f0:25:03:21:fb:
63:d7:9c:6d:79:f0:0e:08:d8:b1:43:a3:f7:75:2a:
7c:37:aa:e6:52:d0:1e:eb:13:21:0b:74:33:ce:20:
a9:14:d5:f2:bf:be:ad:d8:af:37:a4:b2:56:47:e5:
9f:1f:8b:07:78:24:40:11:53:57:08:c0:57:af:cc:
ce:03:fa:82:ec:9f:24:41:a3:07:06:79:e7:d6:f4:
1b:fd:9c:09:eb:65:49:d8:4d:cd:3e:39:18:6f:7e:
73:3f:00:17:74:91:34:e4:80:e2:b7:a3:92:b9:95:
31:a7:79:66:8f:e4:9f:3c:39:b8:99:b9:d8:ba:b4:
ea:26:c6:27:6e:c7:31:e8:fc:5a:95:03:09:75:ad:
a1:ad:a5:31:ee:19:51:7f:26:21:43:d0:1b:9b:4d:
45:6c:f7:77:8e:59:a9:84:0e:f6:41:15:f5:5b:ac:
04:0b:4b:9d:8b:17:0e:56:00:c0:ee:cb:c9:fa:9d:
c2:b9:55:dc:61:82:30:d7:6e:6c:fa:0d:d8:76:b8:
e6:6b:61:3c:50:7a:f8:68:84:4d:15:b3:91:54:d1:
41:10:69:cf:77:b2:85:44:33:8a:a8:28:e3:20:b1:
b7:0e:fb:52:31:2b:21:02:d3:ac:54:e9:c0:39:a2:
69:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:63:D8:FE:30:C9:A0:2D:16:2E:7E:27:C9:98:DF:91:D2:2B:E4:3B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6c127b82-aa8a-4531-874e-d09d0dca0074.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.161.136.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:54:51:d8:8a:3d:7d:1d:8c:97:81:a9:49:06:4e:46:ac:b9:
48:58:95:cc:2a:55:68:80:29:59:ee:be:24:01:83:6e:03:bd:
aa:16:62:d6:53:95:f7:63:3f:2a:d1:be:27:20:24:f2:de:73:
df:a6:d4:41:e1:37:0a:67:9d:05:6c:95:a0:f6:33:b1:cb:15:
47:53:bf:f3:0f:d4:05:f5:5f:0d:e0:1f:5b:c7:9e:d7:1e:cc:
8e:ae:c7:de:19:65:b1:f6:c4:26:a4:71:ef:c1:05:ff:27:6b:
f9:96:b6:fd:a1:ae:e2:d9:e0:57:d2:d8:f4:27:e3:57:f2:cf:
6b:63:2a:6f:c3:1c:61:af:f9:cb:4f:c5:90:b1:37:1a:30:3e:
8c:18:e2:30:73:01:a3:1b:90:a7:ba:3c:49:6a:32:8e:53:c3:
89:a5:b9:cc:6d:66:cb:7a:c4:b3:e3:9a:44:0d:45:ed:ae:3f:
92:55:d1:e4:96:b3:77:be:09:7f:7f:e6:1b:16:da:aa:1f:55:
39:be:46:e9:a1:a5:6e:29:5e:8d:39:50:a0:c2:69:7a:78:ab:
76:5b:d1:ec:c1:00:da:76:4e:a8:86:77:22:ff:0e:95:53:df:
c8:e7:34:88:a4:b2:5b:63:46:b9:4c:ab:07:71:ec:af:af:4f:
66:d1:1c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:31:17 2026 by rpki-client