
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/753bfb8d-19c1-468a-9fe9-da4787da9f96.roa
File: 753bfb8d-19c1-468a-9fe9-da4787da9f96.roa (raw, json)
Hash identifier: rdeN8Z6fb+/ey6aWQRhTLa8scTyN+fYc5e1Ybouhos8=
Subject key identifier: 2A:F9:AB:C2:EA:B1:37:56:40:08:56:DA:40:D7:F8:44:4F:D4:3A:DA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0802E41297831830F1CE958910C2F69415E76B00
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/753bfb8d-19c1-468a-9fe9-da4787da9f96.roa
Signing time: Sat 28 Feb 2026 01:01:25 +0000
ROA not before: Sat 28 Feb 2026 01:01:25 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 150.222.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:02:e4:12:97:83:18:30:f1:ce:95:89:10:c2:f6:94:15:e7:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 01:01:25 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=00801df5f3757a3fe77673d302eb5148ebb2f4dea507607ac165765f09fd6a4a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:08:e6:a3:0d:23:3f:10:0f:1f:45:68:e0:25:
b7:7b:72:8b:66:82:5b:1b:2a:d4:95:0f:d0:49:db:
4c:b2:89:62:0d:28:0a:47:cd:54:45:13:fc:85:6a:
56:fa:59:43:89:09:c1:77:b0:66:cd:84:0a:2a:5b:
d4:6d:3d:bb:5d:51:30:39:d2:cd:6b:38:1b:b1:93:
4b:3f:b0:a8:3e:24:96:74:a0:64:16:4d:c9:4c:f6:
47:cb:1a:52:8d:62:f2:a3:cc:71:59:21:7d:bc:d1:
f7:dc:26:9a:d7:b3:d5:81:d0:f7:e9:ca:57:51:67:
79:8f:dc:14:bc:67:a4:7b:d3:93:27:22:50:99:a9:
19:a2:d3:6a:3c:8e:b3:d2:8b:22:64:d6:90:30:35:
5d:90:69:07:e5:80:70:36:7d:fe:76:b3:42:fa:82:
9d:be:99:b4:20:75:27:7f:0d:d7:7a:44:cd:1c:cd:
25:67:2e:cf:ce:8d:be:59:ca:36:96:db:ba:53:ad:
93:c9:65:93:73:c9:ff:91:cf:cc:da:b2:5f:bf:33:
1b:df:32:c6:67:d6:fb:c2:df:ed:f0:64:df:4f:58:
28:7d:b0:48:78:cd:a0:a1:df:52:c3:d3:10:80:7a:
d0:84:a7:25:de:28:c9:db:67:bc:44:d0:cd:36:95:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F9:AB:C2:EA:B1:37:56:40:08:56:DA:40:D7:F8:44:4F:D4:3A:DA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/753bfb8d-19c1-468a-9fe9-da4787da9f96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.224.0/24
Signature Algorithm: sha256WithRSAEncryption
99:cb:24:35:ad:2b:96:59:c5:5f:8f:69:54:42:f6:fd:3c:84:
35:41:27:49:07:15:d5:ca:ec:98:21:4c:8a:2c:08:d9:3f:54:
c7:8c:4b:a8:d9:1c:57:5e:7d:4d:72:4b:cf:84:78:5b:48:a1:
db:1f:d1:ea:32:50:54:58:8d:63:c9:3f:85:6f:ee:d2:0c:3b:
6e:ec:d4:39:65:98:72:dc:44:ee:ed:15:cf:e0:b6:4b:f5:52:
b4:0d:db:b3:df:49:21:cd:4c:fb:e1:35:42:ad:e0:7b:2e:f3:
36:7c:54:f9:2c:3d:e2:55:8d:fc:87:48:60:ad:91:8a:e4:14:
21:5a:6e:7b:e4:0b:bb:26:42:57:27:5b:73:cc:fe:57:43:95:
e3:77:4b:82:e5:74:24:1e:af:f0:b0:34:46:41:85:41:38:de:
95:c0:f2:b4:18:8e:c1:41:54:61:7e:cc:ce:a7:08:5a:40:25:
5b:de:cb:fd:26:f4:c3:af:9f:fa:0f:5b:0d:2f:93:c0:b1:8d:
0f:32:46:92:35:bb:f8:a5:0f:19:0b:b2:b8:05:9f:10:30:4e:
c6:85:b9:6e:07:7a:c0:2e:5c:ab:1b:1b:b9:47:c6:cd:77:07:
2d:11:03:ad:fa:0d:9d:7b:2f:54:48:14:7c:8d:35:bf:7b:ce:
30:3f:a0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:44:07 2026 by rpki-client