
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80880214-f2cb-4edf-bc41-dd2edd36e075.roa
File: 80880214-f2cb-4edf-bc41-dd2edd36e075.roa (raw, json)
Hash identifier: sK/3rhk60hkT3EfOypLgcmkgEbI9cdMpLI1XX4BDr14=
Subject key identifier: F9:60:F9:BD:D8:33:73:85:18:53:7A:61:5C:58:3B:CE:1F:28:0C:F4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 70AB0416D17B08831408FF4A7EB7E4EB4D7CFBC8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80880214-f2cb-4edf-bc41-dd2edd36e075.roa
Signing time: Sat 28 Feb 2026 01:50:55 +0000
ROA not before: Sat 28 Feb 2026 01:50:55 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.230.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ab:04:16:d1:7b:08:83:14:08:ff:4a:7e:b7:e4:eb:4d:7c:fb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 01:50:55 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=189b38006785831a9b28f0d63df567b34a99198afc78bcdd0d6f3d4b842703b7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6c:73:da:ac:dd:f2:c8:6b:ca:84:89:4b:19:
1b:a0:69:eb:a2:22:7c:e5:4f:49:0e:9a:07:85:5e:
a0:ff:31:8c:2a:3c:fa:02:5b:c6:77:ec:8b:1c:87:
09:25:2c:66:25:54:21:03:88:57:18:47:04:ac:24:
96:47:92:75:c6:60:c5:1f:80:fa:19:3d:50:69:8d:
63:55:00:0b:37:06:98:2a:d0:93:52:f0:4f:29:92:
d4:bc:ef:80:7e:78:15:26:fd:2b:8e:54:a0:0c:1f:
22:d0:e6:cc:75:19:79:5a:cc:8b:3e:97:18:7f:22:
e2:a9:e2:3a:c2:55:1c:f5:24:ad:f5:2c:8c:f1:b4:
f5:84:93:46:0e:4c:f1:2d:8b:fe:fe:fc:5c:b0:1c:
a6:99:aa:c5:af:46:d4:5f:6f:d3:4e:b6:8d:19:3d:
cc:62:76:a5:89:dc:fc:99:06:e6:b1:d8:9a:97:c5:
25:ef:a0:c5:e0:2e:23:8f:e7:39:6f:b6:49:6c:93:
7a:ed:9d:45:ca:d0:84:e5:ec:e3:dc:e6:f1:78:e4:
21:95:95:1f:21:0e:2a:0c:f0:79:00:d6:b8:b3:01:
34:12:e7:ad:57:31:a2:79:00:60:48:ea:fe:26:1b:
bf:3e:9c:12:7f:8a:77:67:df:17:ba:d2:0a:41:da:
61:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:60:F9:BD:D8:33:73:85:18:53:7A:61:5C:58:3B:CE:1F:28:0C:F4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/80880214-f2cb-4edf-bc41-dd2edd36e075.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.148.0/24
Signature Algorithm: sha256WithRSAEncryption
65:a3:ca:de:c4:17:ec:ed:a0:22:37:39:28:38:be:a9:fb:94:
c8:5b:7f:0e:71:ea:90:d8:e6:b1:83:f5:be:c2:af:c1:e8:5c:
ec:52:d6:9e:77:0b:00:3b:75:8d:bc:fa:3e:a4:3b:7d:ad:53:
46:25:a2:33:62:e4:f0:fa:45:71:98:4f:7c:13:6e:8d:eb:0f:
0d:4e:71:e4:57:a0:c0:c9:f6:25:2f:93:9c:d1:c6:57:32:d3:
a7:1d:f9:c7:5a:10:9e:e7:ad:69:c2:c3:e7:b9:08:ce:52:b1:
45:0c:19:21:b3:16:1f:28:d6:df:e4:10:97:36:e2:88:65:87:
b8:0f:55:30:ad:77:7f:0b:67:53:4e:ba:e0:e6:3b:e1:ea:ef:
bc:f3:3e:e0:b5:a5:8f:9a:32:3a:9f:7b:89:71:af:ed:9a:93:
e9:3e:f2:d2:61:36:fe:2d:83:17:d0:be:f8:44:95:0f:83:fb:
4d:5d:fd:df:83:8d:96:a6:60:12:d7:1b:60:0f:95:be:64:6c:
1e:bf:39:2c:df:54:91:14:cc:86:dd:62:a4:ca:25:6b:ab:a4:
83:d6:7f:de:49:a9:62:e5:75:02:ed:d4:ab:eb:b9:85:36:4a:
73:10:83:93:e1:fb:7f:d6:a8:b2:e0:8e:e5:ad:e4:e3:b6:0c:
03:d0:5e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:34:48 2026 by rpki-client