
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77cba330-c6c9-4603-a5ac-a810a9a8dd20.roa
File: 77cba330-c6c9-4603-a5ac-a810a9a8dd20.roa (raw, json)
Hash identifier: eommSDzi2oAYaZlKfWFhX7O1NSiEv5S/qaPKiIdronY=
Subject key identifier: 1E:05:26:36:1C:6B:12:11:07:13:99:4D:BD:8C:EE:F6:D1:8A:FE:CC
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6410603AFE7F7A3311F3BB9E70712899FDF72B71
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77cba330-c6c9-4603-a5ac-a810a9a8dd20.roa
Signing time: Sat 14 Feb 2026 00:30:14 +0000
ROA not before: Sat 14 Feb 2026 00:30:14 +0000
ROA not after: Fri 15 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.220.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:10:60:3a:fe:7f:7a:33:11:f3:bb:9e:70:71:28:99:fd:f7:2b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 14 00:30:14 2026 GMT
Not After : May 15 23:59:59 2026 GMT
Subject: serialNumber=03bf057ee7815bd34408fd8a2f720ced9163f93f9656c306ab3b2a23dd1909a6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d2:7c:6e:61:07:47:0d:21:a8:e0:37:20:bd:
c5:4c:9b:79:00:8c:b4:4c:7c:dd:e4:1d:82:34:04:
32:41:2d:0d:e7:27:7a:e7:62:7d:a8:e6:97:30:0c:
15:37:cb:bf:ba:f7:a2:00:a5:10:b7:aa:83:24:48:
e8:08:2e:e3:a2:16:dc:98:99:0d:d3:e2:44:49:23:
c8:8d:42:2e:f1:ce:cb:d4:f8:3c:cf:d7:01:72:ee:
bf:1d:34:bd:21:bd:90:11:e6:ac:20:d5:10:73:1f:
e4:e5:8f:7b:7b:0f:ca:3b:c0:21:42:f5:1c:fc:dd:
fc:a5:89:83:b6:fe:6c:e0:6f:4d:22:88:f5:e7:50:
d7:94:99:df:5f:b7:b6:62:28:a0:a9:0e:73:aa:2e:
12:2d:e8:44:b5:aa:b3:f2:4a:9a:17:03:da:de:e4:
56:52:52:cd:2b:02:e8:37:c3:87:43:9e:91:21:b4:
53:ab:81:fe:68:8c:fa:e3:b4:fa:b4:24:5d:42:74:
4b:6f:30:93:98:c8:9f:8f:25:81:a9:0d:4c:62:e9:
ed:40:fe:5f:ef:e9:05:6a:15:49:08:e7:08:8b:1f:
58:dc:ff:75:9c:4b:b5:45:df:7c:9a:1c:31:02:e4:
59:9d:d8:5e:16:be:a6:15:33:74:1f:f0:e9:2e:20:
62:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:05:26:36:1C:6B:12:11:07:13:99:4D:BD:8C:EE:F6:D1:8A:FE:CC
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/77cba330-c6c9-4603-a5ac-a810a9a8dd20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.220.0.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:d7:46:6a:df:6f:f5:4c:32:93:35:a5:0a:3d:bd:67:1f:12:
f2:7d:93:8e:bf:b8:3f:d1:66:1a:3f:ae:25:11:e1:22:39:df:
e2:ec:1f:3c:b5:f5:75:60:e6:d7:31:86:af:06:d3:51:72:e5:
46:95:77:88:b8:0b:73:c6:22:2a:b2:30:9a:af:86:da:54:6e:
20:bc:50:22:0f:37:22:5a:e3:f8:ed:19:a2:ce:7a:02:de:b1:
2c:81:68:9f:a9:8f:a7:0c:83:d5:0b:5a:38:3a:d3:e5:3e:22:
91:9f:8a:f2:5d:d1:c7:5a:33:3a:3c:0a:43:e8:8a:4b:13:79:
d2:3f:ea:e9:5c:24:8f:b2:2c:58:c5:8c:bb:f6:3f:14:b1:2a:
e0:82:87:ef:17:df:ce:a6:5f:61:0d:df:da:29:ac:70:4b:8d:
7f:ac:53:bb:e2:62:cf:a8:54:a4:fd:7f:5e:07:8c:c5:0a:c9:
52:7d:df:19:9e:4b:9d:dc:67:a5:d5:df:e0:4c:f2:e8:7b:58:
31:4c:43:84:c5:73:76:5c:16:39:79:b4:81:d1:b8:fb:94:bc:
27:bb:21:13:bc:d7:05:94:b7:6e:92:df:86:54:ad:1e:18:20:
e2:17:a5:47:61:ed:ff:c1:82:73:88:74:d4:22:e3:7a:6c:99:
56:f9:62:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:50:05 2026 by rpki-client