
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7eb898ee-cc0c-4b45-a934-99f0a8ace39f.roa
File: 7eb898ee-cc0c-4b45-a934-99f0a8ace39f.roa (raw, json)
Hash identifier: 0ld/TgU+Q9wjKslrDCkoggu9TmmhN/gjxKtzP6njJvM=
Subject key identifier: B3:DF:D4:10:C9:A4:33:5F:87:88:61:C7:93:9F:83:78:18:C4:90:06
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 28622EB9F15ECABED28A8438F49417435CE8C81C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7eb898ee-cc0c-4b45-a934-99f0a8ace39f.roa
Signing time: Mon 26 Oct 2026 02:50:51 +0000
ROA not before: Mon 26 Oct 2026 02:50:51 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:62:2e:b9:f1:5e:ca:be:d2:8a:84:38:f4:94:17:43:5c:e8:c8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 02:50:51 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=32364de974c36a12e4c32e4c78c6023c1ce3e150c7237635de80b2fefd20f4c7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6d:61:0d:e6:32:58:e3:47:51:87:1a:16:dc:
c6:4b:43:75:49:4c:fb:8e:b2:1b:d5:eb:d4:d5:f6:
15:9f:0c:4c:e5:91:58:5a:3f:a9:c0:bb:cb:ce:c4:
8e:9e:76:bc:d9:03:3b:f8:9a:5f:ff:8f:20:23:82:
9d:a8:3e:c6:35:fc:c1:6b:5e:b2:5e:5f:60:a5:59:
ee:93:93:19:47:14:cd:d2:99:41:cc:3d:f2:54:3b:
62:07:5a:c3:56:68:05:8e:65:7d:77:e8:63:ec:92:
83:1c:68:6c:59:03:ea:bf:ad:7d:a0:2b:b3:8f:c7:
95:5d:12:ef:14:46:db:45:ed:4f:49:9f:2f:da:e5:
cc:43:e8:36:ab:e6:e7:6d:5e:2e:82:eb:29:8d:e2:
8f:1b:ad:93:c6:a1:2d:c0:e5:7f:82:f9:b8:9c:53:
4c:ea:32:66:d0:55:93:f8:a8:0b:18:a9:ec:6a:cd:
cb:45:17:a7:25:dd:6d:d5:1f:aa:bc:e4:8b:a2:a7:
c1:39:06:ac:10:a2:f3:3e:e5:71:e5:e1:6c:cf:0f:
ad:fb:c6:9d:3a:5c:c2:11:09:e1:e4:1d:50:59:d4:
b9:6e:e7:90:cd:16:df:5e:6b:4c:de:68:a3:37:d3:
26:84:23:42:ce:69:c9:58:6b:ff:7b:fa:18:ac:3e:
b0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DF:D4:10:C9:A4:33:5F:87:88:61:C7:93:9F:83:78:18:C4:90:06
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7eb898ee-cc0c-4b45-a934-99f0a8ace39f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:a2:6b:b3:01:4e:81:6e:6a:78:c0:27:09:33:80:1d:7d:bb:
5f:7b:fd:94:d0:38:39:9a:66:bc:49:c9:fc:cf:05:a3:0c:40:
c1:91:1f:75:24:ac:99:92:bf:b0:37:89:dd:98:45:ea:02:57:
88:49:1a:ff:ae:a9:01:9d:2b:3c:9c:53:59:7d:91:0d:39:b4:
80:5c:13:50:a9:04:b4:1d:34:0f:c4:b8:1f:a8:94:ac:cc:df:
a4:d7:2e:6d:20:bf:51:14:78:16:55:40:cd:11:f7:d9:7e:9a:
e7:35:ca:f8:ec:76:04:b7:ac:65:ef:6c:af:ab:96:df:3c:a0:
d6:5c:d6:57:93:92:d0:37:a8:17:84:10:7b:48:2b:52:0e:32:
86:02:a4:83:85:71:55:f1:b3:0e:6c:f2:44:9a:f1:ef:ee:e5:
78:84:92:24:fc:a2:e9:39:d8:00:f2:00:8a:02:cd:2f:22:39:
80:c2:07:dd:0b:31:ad:f6:72:91:35:9f:a7:1a:b2:51:6d:1e:
ca:7a:09:59:3b:4c:3d:9d:f9:fe:44:c9:5a:9d:a4:de:7c:98:
7b:e7:ce:63:c7:5e:9e:3c:88:63:e7:f0:15:c1:b8:d6:1d:d8:
4c:99:b1:66:20:58:a0:b8:e2:94:71:0f:94:8d:5e:7c:f8:1f:
b1:4b:b3:bf
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKGIuufFeyr7SioQ49JQXQ1zoyBwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDI1MDUxWhcNMjcwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMjM2NGRlOTc0YzM2YTEyZTRjMzJlNGM3OGM2MDIzYzFj
ZTNlMTUwYzcyMzc2MzVkZTgwYjJmZWZkMjBmNGM3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNbWEN5jJY40dRhxoW3MZLQ3VJTPuOshvV69TV9hWfDEzl
kVhaP6nAu8vOxI6edrzZAzv4ml//jyAjgp2oPsY1/MFrXrJeX2ClWe6TkxlHFM3S
mUHMPfJUO2IHWsNWaAWOZX136GPskoMcaGxZA+q/rX2gK7OPx5VdEu8URttF7U9J
ny/a5cxD6Dar5udtXi6C6ymN4o8brZPGoS3A5X+C+bicU0zqMmbQVZP4qAsYqexq
zctFF6cl3W3VH6q85Iuip8E5BqwQovM+5XHl4WzPD637xp06XMIRCeHkHVBZ1Llu
55DNFt9ea0zeaKM30yaEI0LOaclYa/97+hisPrC3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUs9/UEMmkM1+HiGHHk5+DeBjEkAYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzdlYjg5OGVlLWNjMGMtNGI0NS1hOTM0LTk5ZjBhOGFjZTM5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0X+YwDQYJKoZIhvcNAQELBQADggEBAEuia7MBToFuanjAJwkzgB19u197
/ZTQODmaZrxJyfzPBaMMQMGRH3UkrJmSv7A3id2YReoCV4hJGv+uqQGdKzycU1l9
kQ05tIBcE1CpBLQdNA/EuB+olKzM36TXLm0gv1EUeBZVQM0R99l+muc1yvjsdgS3
rGXvbK+rlt88oNZc1leTktA3qBeEEHtIK1IOMoYCpIOFcVXxsw5s8kSa8e/u5XiE
kiT8ouk52ADyAIoCzS8iOYDCB90LMa32cpE1n6caslFtHsp6CVk7TD2d+f5EyVqd
pN58mHvnzmPHXp48iGPn8BXBuNYd2EyZsWYgWKC44pRxD5SNXnz4H7FLs78=
-----END CERTIFICATE-----
Generated at Sun Nov 8 00:03:56 2026 by rpki-client