
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8dfc3efa-af33-4519-bd1f-766f0553538b.roa
File: 8dfc3efa-af33-4519-bd1f-766f0553538b.roa (raw, json)
Hash identifier: YPU5049mSE87n8Pm97AGIt1sRbkx+2VdFzCl+kB5m8U=
Subject key identifier: CE:7C:43:C6:B0:3F:ED:FE:1F:84:8E:09:52:42:E3:C5:4E:9E:36:B6
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 27FE01B1370D2373F0168D193543C56287E10F5B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8dfc3efa-af33-4519-bd1f-766f0553538b.roa
Signing time: Thu 15 Oct 2026 01:07:47 +0000
ROA not before: Thu 15 Oct 2026 01:07:47 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 15.181.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:fe:01:b1:37:0d:23:73:f0:16:8d:19:35:43:c5:62:87:e1:0f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 15 01:07:47 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=b61871bda33ae025af0552dc4dcef2b3b1b5597e5c06a28736894109df5e0a71, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:b3:d2:c3:8b:ad:ae:c3:9e:3b:6d:39:90:
7a:69:8a:10:b3:e0:21:a8:85:d6:de:8d:cf:d7:b3:
61:3d:02:68:4e:b5:6e:5c:cd:7f:ec:95:f3:e2:1a:
25:97:3f:f5:75:44:46:f3:dd:09:ef:49:95:ef:c2:
6c:8a:5e:c9:ef:ca:81:04:c9:b7:e8:45:ce:62:19:
ee:53:8e:61:ba:73:24:43:cf:4c:a5:29:a2:a3:a3:
42:77:a7:97:1d:1e:04:de:94:27:d3:09:51:87:c1:
b0:e8:86:6d:0b:d9:02:91:c3:51:38:47:78:3b:24:
88:c5:ec:7c:11:24:30:d4:08:a3:85:1f:28:a8:80:
35:bf:8b:62:b4:9b:b9:40:17:0b:42:71:e6:d5:19:
30:8b:3c:55:5b:d4:d0:85:8b:2b:22:28:9e:e6:f6:
26:7c:a5:95:3d:01:b6:a1:24:1b:37:9e:c7:97:97:
a6:31:d8:71:c6:3f:25:d1:41:ac:32:0d:a2:90:13:
eb:b5:47:ea:43:d1:4e:4b:a3:90:e4:a3:6c:85:76:
15:30:00:db:db:9a:c7:86:21:bf:a8:d0:3b:06:8e:
5b:ca:88:b7:c6:b5:13:32:0a:90:12:1b:4b:7d:7c:
0d:83:7c:cc:f9:11:ea:9c:2e:39:7b:c8:4b:c0:28:
95:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7C:43:C6:B0:3F:ED:FE:1F:84:8E:09:52:42:E3:C5:4E:9E:36:B6
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8dfc3efa-af33-4519-bd1f-766f0553538b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.181.246.0/24
Signature Algorithm: sha256WithRSAEncryption
70:7a:e9:ae:09:aa:d9:db:53:c1:54:67:49:31:bb:89:f2:6e:
b2:de:79:95:a3:81:57:b6:a0:76:4f:e6:4d:39:22:71:67:52:
1d:48:69:11:1d:b8:4d:5b:c4:b7:fe:07:d9:60:c4:8d:c1:68:
48:7d:89:cc:7d:bb:e8:8b:31:43:d7:85:1b:1c:f7:7c:48:18:
ac:c7:71:de:c0:59:f4:28:d3:c4:e4:e7:dc:65:cb:f0:f5:0b:
7f:2f:4d:93:39:19:cf:cc:26:d2:1b:84:00:40:61:19:f5:a1:
13:ec:9d:eb:d4:8c:6c:34:e5:0b:85:d6:07:ef:5e:27:a1:20:
de:ff:7e:8b:6d:6a:91:52:7d:5e:d5:ce:22:43:1a:e0:f2:eb:
fc:24:38:c8:ca:e7:d1:6c:07:01:62:a3:0e:a4:77:3f:c6:e0:
3d:1b:98:44:d3:97:bb:be:15:47:8e:a1:99:ce:c8:86:3b:08:
66:99:e4:09:f9:45:43:38:cf:d3:77:d3:45:aa:11:f9:8b:d7:
5a:fa:91:8d:4e:34:a2:a8:ca:41:8e:6c:bc:1c:1e:0f:21:fb:
2e:3e:cc:8b:14:87:1e:66:c9:cc:6a:e4:37:ea:ef:1d:b3:6d:
a4:5d:47:b5:89:07:94:b0:a8:89:db:fd:61:7d:fd:a9:c9:2d:
b9:60:a1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 01:10:49 2026 by rpki-client