
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8cab1659-de7c-4978-90e0-3df497387c42.roa
File: 8cab1659-de7c-4978-90e0-3df497387c42.roa (raw, json)
Hash identifier: bjoqMRBiSqQStU0a0Zcj6Yctwuh7Kx63rkbyVDlFqUI=
Subject key identifier: E3:13:35:11:CC:1D:28:DF:58:C2:C9:DE:9D:01:7D:51:71:E8:15:93
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3A6A31F6580C3AD34AA171154F985814B3603638
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8cab1659-de7c-4978-90e0-3df497387c42.roa
Signing time: Thu 14 May 2026 00:31:18 +0000
ROA not before: Thu 14 May 2026 00:31:18 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.88.0.0/13 maxlen: 13
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:6a:31:f6:58:0c:3a:d3:4a:a1:71:15:4f:98:58:14:b3:60:36:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 14 00:31:18 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=7cd4197dc8955aba53646925bb8e37f904d46d280a166f61656c3811a2b251fc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:c9:2e:b1:df:7c:e1:15:1d:80:85:6c:73:
44:c5:25:c2:bb:06:6a:4d:58:f4:1d:7f:36:a5:a8:
7e:51:14:44:63:ed:f8:0c:7d:ae:0c:46:bf:e2:44:
c4:6f:ac:26:9d:d0:15:33:16:2a:03:1a:3a:97:a7:
1c:a8:1b:ab:b5:84:f7:90:a6:92:e5:b5:28:b5:08:
b9:44:45:95:3f:5f:38:7e:f7:d3:58:06:76:f9:6c:
d1:16:e2:c3:f1:6b:36:23:52:3d:11:4a:7b:83:87:
26:83:f0:58:73:20:91:a5:80:54:5a:1b:50:8f:60:
55:3a:a8:45:2b:0c:8b:9a:c4:7a:4a:b8:dc:e3:7c:
ea:69:83:71:fd:c3:a8:ca:13:52:1d:97:87:e7:ee:
ba:59:2d:d6:e1:a5:b5:98:2b:35:a7:94:3d:b4:19:
81:89:88:74:f0:f7:b7:d2:7e:7a:bc:19:c9:b4:f0:
4a:db:ee:3d:03:e9:20:e1:bc:61:0e:e0:60:ac:95:
8f:3e:f6:7f:17:e6:b3:ea:a0:3a:17:59:4c:bf:c2:
69:3b:a8:64:83:4b:53:60:0a:95:94:2a:22:49:f1:
48:a3:a2:c6:db:bd:7f:22:3e:17:5b:f6:c9:ee:91:
f6:c3:62:c8:8c:6d:36:57:64:2f:5b:85:81:98:64:
41:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:13:35:11:CC:1D:28:DF:58:C2:C9:DE:9D:01:7D:51:71:E8:15:93
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8cab1659-de7c-4978-90e0-3df497387c42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.88.0.0/13
Signature Algorithm: sha256WithRSAEncryption
4e:f8:f9:8d:2b:5b:e9:cd:e7:a5:f7:60:d4:5d:f2:2b:f7:48:
be:5b:7b:b5:31:5a:7e:62:85:5f:f6:81:4d:af:b1:f4:92:33:
11:87:4d:36:ff:9d:95:e0:7a:9b:3e:cd:67:6b:69:7c:e4:ac:
e7:98:3c:69:d5:ee:72:bd:51:83:3f:0f:e4:a0:65:8b:c0:63:
b3:a1:75:f5:22:68:27:3d:9b:e6:c1:28:fb:b7:87:77:06:6e:
62:5f:30:b2:38:0f:6f:08:2a:5a:26:08:84:3b:8a:e2:70:bf:
1a:b9:d6:87:e7:f4:9f:be:e0:70:17:55:8a:6b:1d:70:34:49:
bc:ed:1b:95:f5:4a:69:62:5a:69:08:83:4e:58:c8:39:12:ee:
b3:31:c0:40:76:38:b0:93:b6:d7:18:b1:f0:47:cc:a4:e4:75:
13:93:6d:62:a3:91:6e:89:5f:e0:ff:3b:98:61:5d:3a:d3:80:
ee:13:56:a7:e8:f4:31:bd:ef:61:65:03:6d:74:04:2f:a8:3c:
13:d6:fe:6c:5c:ad:c9:b0:48:f8:0d:7a:ba:c8:02:61:75:a1:
df:19:d5:8f:d9:82:88:f9:e9:3e:10:66:98:41:cf:de:bf:1a:
27:9a:ba:15:86:bd:06:b4:84:39:46:90:04:3b:9f:00:fa:90:
e8:51:82:73
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUOmox9lgMOtNKoXEVT5hYFLNgNjgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE0MDAzMTE4WhcNMjYwODEyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3Y2Q0MTk3ZGM4OTU1YWJhNTM2NDY5MjViYjhlMzdmOTA0
ZDQ2ZDI4MGExNjZmNjE2NTZjMzgxMWEyYjI1MWZjMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDJackusd984RUdgIVsc0TFJcK7BmpNWPQdfzalqH5RFERj
7fgMfa4MRr/iRMRvrCad0BUzFioDGjqXpxyoG6u1hPeQppLltSi1CLlERZU/Xzh+
99NYBnb5bNEW4sPxazYjUj0RSnuDhyaD8FhzIJGlgFRaG1CPYFU6qEUrDIuaxHpK
uNzjfOppg3H9w6jKE1Idl4fn7rpZLdbhpbWYKzWnlD20GYGJiHTw97fSfnq8Gcm0
8Erb7j0D6SDhvGEO4GCslY8+9n8X5rPqoDoXWUy/wmk7qGSDS1NgCpWUKiJJ8Uij
osbbvX8iPhdb9snukfbDYsiMbTZXZC9bhYGYZEFhAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU4xM1EcwdKN9YwsnenQF9UXHoFZMwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzhjYWIxNjU5LWRlN2MtNDk3OC05MGUwLTNkZjQ5NzM4N2M0Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwM0WDANBgkqhkiG9w0BAQsFAAOCAQEATvj5jStb6c3npfdg1F3yK/dIvlt7
tTFafmKFX/aBTa+x9JIzEYdNNv+dleB6mz7NZ2tpfOSs55g8adXucr1Rgz8P5KBl
i8Bjs6F19SJoJz2b5sEo+7eHdwZuYl8wsjgPbwgqWiYIhDuK4nC/GrnWh+f0n77g
cBdVimsdcDRJvO0blfVKaWJaaQiDTljIORLuszHAQHY4sJO21xix8EfMpOR1E5Nt
YqORbolf4P87mGFdOtOA7hNWp+j0Mb3vYWUDbXQEL6g8E9b+bFytybBI+A16usgC
YXWh3xnVj9mCiPnpPhBmmEHP3r8aJ5q6FYa9BrSEOUaQBDufAPqQ6FGCcw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:35:59 2026 by rpki-client