
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a38a3f1-e06d-4227-9cb8-5b76b8f2212a.roa
File: 7a38a3f1-e06d-4227-9cb8-5b76b8f2212a.roa (raw, json)
Hash identifier: cn4D2wkzJ26DQjecf0bicpx4FHyMUCQfqko2Q6cAJuY=
Subject key identifier: 71:D4:55:31:3A:A5:CD:A3:92:8C:B0:CC:55:DE:A5:A7:8B:30:34:0F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 239C2553E8D06ED0995B175F1753880C820976E9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a38a3f1-e06d-4227-9cb8-5b76b8f2212a.roa
Signing time: Mon 26 Oct 2026 02:03:19 +0000
ROA not before: Mon 26 Oct 2026 02:03:19 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 18.162.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:9c:25:53:e8:d0:6e:d0:99:5b:17:5f:17:53:88:0c:82:09:76:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 02:03:19 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=c6714399580b41eda78dedb61e966eb226ff7d74e04aab3c7c22a59d14f89c91, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:22:2a:2c:de:f0:08:35:fd:79:a6:94:cc:
87:8c:c1:6b:e8:2c:a5:be:86:46:8f:55:ba:14:6d:
94:78:44:10:da:6d:4e:92:7a:b8:b0:3c:86:0c:b5:
50:ac:9a:67:77:13:1f:98:df:37:77:e4:5c:15:ff:
be:45:a2:03:65:ef:11:31:7c:72:a0:6f:b3:a9:7e:
37:04:0c:3e:b0:06:b9:a1:c5:27:db:3b:30:d3:38:
f8:9e:54:f0:15:27:ad:cd:c5:00:3a:bd:21:51:4e:
13:56:3b:ba:77:3e:33:fe:72:69:d7:9d:41:c8:71:
7c:1d:03:08:53:7d:7f:3b:48:24:84:2c:b6:87:53:
25:81:a9:58:ad:80:1e:97:04:e2:30:b6:d4:00:3e:
a7:dc:a2:d3:0c:4d:79:10:03:8c:17:bc:95:bf:3b:
fe:a7:62:cf:35:fd:42:93:9f:0f:2b:a5:5d:8b:52:
33:ef:da:39:f3:9e:7e:f0:5b:8a:86:75:b4:ce:62:
4e:5d:2f:34:2b:3a:49:81:0e:1b:bb:95:59:4d:15:
e5:ac:59:4d:5e:34:1f:9e:b0:0b:e1:7c:43:83:f3:
bd:6e:39:d9:53:97:c7:fe:3f:f5:80:09:e6:96:4e:
b8:51:de:1d:10:6f:ac:b9:93:b9:bd:ed:64:8c:1f:
69:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D4:55:31:3A:A5:CD:A3:92:8C:B0:CC:55:DE:A5:A7:8B:30:34:0F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7a38a3f1-e06d-4227-9cb8-5b76b8f2212a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.162.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5b:c0:3a:b1:8e:f0:d8:5d:6d:f2:74:00:8d:40:21:27:6a:5c:
b3:91:b9:45:a8:8d:e4:c2:c5:06:b1:6a:d8:aa:57:12:69:9c:
55:e0:b3:3c:72:00:e0:15:3d:df:d8:37:2d:67:1f:0b:5f:4e:
e3:d8:10:9a:be:6f:9d:09:73:ff:35:7a:7f:fe:3b:fd:9a:40:
b4:5c:13:08:da:c7:63:da:6c:66:db:5c:95:bf:5f:76:a3:3b:
30:4e:96:24:fe:0e:79:48:3c:23:21:43:be:d1:53:fe:db:34:
15:38:27:85:7f:1b:c5:23:4f:45:b5:d3:c8:0f:61:22:18:82:
f8:cf:19:2c:92:f3:4e:7f:08:8d:05:b2:ac:97:f3:8f:90:dc:
d6:ab:f4:88:88:7d:38:84:e6:e4:8b:85:21:75:cb:fc:d6:94:
20:c9:86:af:d1:06:40:0c:10:1c:26:9a:6c:7f:05:b8:32:3c:
9f:cd:9c:ff:76:81:f9:c9:ef:77:52:1b:ae:81:b5:74:9e:e3:
a5:de:cb:21:0c:9a:d6:a7:d5:c7:59:c5:00:92:b8:ec:0a:97:
4e:78:8b:6d:a8:14:a3:20:ee:17:3e:5e:86:b6:1f:8a:48:93:
64:1b:67:67:2a:5d:b4:3f:4e:70:f4:9e:1d:57:14:66:b6:f6:
31:4c:04:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 18:50:23 2026 by rpki-client