
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/75c78872-0da5-4ede-a4a2-6c0491a946f4.roa
File: 75c78872-0da5-4ede-a4a2-6c0491a946f4.roa (raw, json)
Hash identifier: miOo905OsQvKOmBXVkSYnEJZn/OVsxOzcJ0fIxXXIJ8=
Subject key identifier: 31:82:B0:B1:4A:8B:99:40:25:6E:70:B2:CD:2B:AB:18:84:CC:78:2B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3963D498B575652D50B4F30162A88AD5614274E5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/75c78872-0da5-4ede-a4a2-6c0491a946f4.roa
Signing time: Sun 18 Oct 2026 01:08:00 +0000
ROA not before: Sun 18 Oct 2026 01:08:00 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 15.158.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:63:d4:98:b5:75:65:2d:50:b4:f3:01:62:a8:8a:d5:61:42:74:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 18 01:08:00 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=dd03c17a2b7a9df0e38d3025a4f7ddb523f6492d6f0001f06ea9ae3d7f6f62fa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:e7:ae:4f:b4:97:73:61:12:58:42:a1:cb:
15:87:9a:0f:51:59:ea:83:61:cf:05:1c:97:27:41:
40:e4:75:d9:9b:a1:a6:da:05:12:9f:2f:38:6a:d9:
af:fe:57:fe:6d:d5:6a:9e:20:ec:3b:66:d8:a1:4a:
36:90:43:25:ce:68:c8:91:42:2d:b8:d4:8c:7b:ab:
23:2b:72:70:06:01:b4:51:5a:34:f4:9d:b0:f0:b4:
d7:0c:56:79:af:dd:c9:42:a3:40:47:bf:90:44:bc:
c2:94:80:d8:a6:f7:8c:6b:af:b5:01:da:2a:11:a2:
04:aa:90:7a:6a:e3:ee:7f:a9:40:59:3e:58:bb:13:
69:cc:79:15:d6:03:ec:f8:4c:21:95:42:b7:af:64:
2d:43:2b:83:cc:1f:93:63:8f:a2:30:85:23:7d:71:
5a:55:b0:ac:68:91:be:f4:f5:bf:4d:9e:1f:e6:51:
ab:ca:30:a5:46:86:5a:54:56:52:f3:5c:dd:e8:a2:
b5:23:c4:b0:ba:9b:83:ce:34:c0:3d:e0:ca:b9:c5:
3d:df:c2:77:e3:3c:39:08:56:20:a2:02:b5:dd:27:
ca:64:25:c4:35:3e:f0:51:26:f2:18:58:e0:4d:f3:
c2:d4:e8:6d:07:f5:bd:98:09:dd:21:65:57:b3:84:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:82:B0:B1:4A:8B:99:40:25:6E:70:B2:CD:2B:AB:18:84:CC:78:2B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/75c78872-0da5-4ede-a4a2-6c0491a946f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.158.190.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9b:7d:b0:29:97:af:e2:e7:dd:9f:54:63:0c:e0:71:fb:6a:
43:60:46:7c:84:8f:81:70:37:5a:d5:71:bb:8e:93:43:ac:d1:
22:97:46:1f:2c:c6:6e:d2:67:7c:c3:c7:0b:27:00:0a:3c:ab:
41:8d:ac:b5:82:e9:f4:0c:6a:41:a0:b7:2d:b0:dc:38:9a:77:
48:8a:2d:b5:66:97:5f:61:35:0d:a0:ff:a1:1d:b4:8a:40:36:
f4:1d:58:ea:f2:21:8d:b5:82:09:4d:76:4a:87:1d:6b:2c:47:
b2:f6:14:b2:13:23:34:b9:90:27:2b:c2:fd:af:98:3a:75:4e:
65:57:2d:98:ab:35:62:fa:c8:e6:14:f7:9c:ef:cc:90:b8:78:
e4:5d:06:56:13:b4:81:e3:b9:04:31:16:49:6f:a2:bc:db:d5:
7c:72:3e:6d:61:15:f5:86:ec:33:26:e3:f2:e0:22:5b:c2:aa:
29:9b:3a:eb:09:aa:d0:10:ee:d5:97:cb:20:84:9f:6d:88:6b:
a8:a9:2f:43:8e:6d:ef:18:5f:e5:57:0a:46:fa:86:fa:04:10:
41:68:c3:1f:07:63:14:db:ac:94:ae:91:92:05:78:88:9e:8e:
2d:a3:ef:a5:09:f9:f7:ef:5e:d2:08:ec:86:2c:4a:f5:3e:26:
37:21:62:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:56:03 2026 by rpki-client