
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91691186-d144-43e8-adcb-808475bd2067.roa
File: 91691186-d144-43e8-adcb-808475bd2067.roa (raw, json)
Hash identifier: hFRHoP19rBAs1O85PivcXOD4xifEq1QUwGRB+SofBNk=
Subject key identifier: 6A:7E:4E:63:02:1A:3F:85:0C:22:3D:2E:D3:AD:B7:4E:BF:5B:4D:91
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0F924B6D65A69DD44CF3C0819B02741E5206EAA1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91691186-d144-43e8-adcb-808475bd2067.roa
Signing time: Sun 18 Oct 2026 01:08:04 +0000
ROA not before: Sun 18 Oct 2026 01:08:04 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 15.158.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:92:4b:6d:65:a6:9d:d4:4c:f3:c0:81:9b:02:74:1e:52:06:ea:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 18 01:08:04 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=14c8660e50d8c37cb0cc58dff8f03101e29fd1a5de5481f70c45be8341104027, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:da:63:78:41:cc:38:d7:33:f1:1d:02:fc:4a:
a2:d4:bd:b7:f8:dc:33:ef:df:21:45:0c:fa:16:5b:
75:c9:e7:4c:70:0c:ca:4e:40:98:96:dc:b6:12:34:
e6:3b:19:b8:fe:74:48:34:b5:0f:d8:99:ab:01:6d:
86:8a:fd:91:68:1d:cf:b8:4b:8a:2f:9f:4b:cb:1c:
24:d4:33:3e:0f:1a:46:25:0f:2f:c2:a5:4b:82:ae:
36:ec:f2:33:8f:fd:3d:f1:56:21:39:e7:40:e1:87:
2f:40:b9:27:ff:45:68:f0:63:e8:f0:11:76:78:0c:
39:9b:c2:f4:ff:fa:eb:1d:f6:89:fc:72:9e:4a:86:
33:8f:b5:22:09:05:ad:b9:73:45:88:2c:17:9b:0b:
ce:86:97:da:97:a5:c3:5c:10:36:7c:11:a5:90:39:
46:05:37:2e:01:47:1c:ee:b1:83:50:57:55:92:ee:
0c:5d:22:1d:d6:37:65:b0:3d:89:88:97:15:98:a5:
cd:d8:fc:48:98:f5:49:f0:46:70:89:eb:e6:dc:bc:
af:3b:b6:47:90:fa:4b:64:97:62:81:53:15:23:57:
1d:82:45:e6:2b:69:89:85:78:d0:a2:55:2a:5d:59:
03:a0:d5:2a:d5:5c:10:3c:e0:5c:8e:6d:21:4d:d5:
41:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7E:4E:63:02:1A:3F:85:0C:22:3D:2E:D3:AD:B7:4E:BF:5B:4D:91
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/91691186-d144-43e8-adcb-808475bd2067.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.158.225.0/24
Signature Algorithm: sha256WithRSAEncryption
45:c6:72:cd:5d:b6:35:66:13:23:97:58:c4:51:4f:29:21:73:
32:74:b7:3d:c7:7e:d1:ec:69:99:1a:6e:0f:d8:ab:46:44:98:
60:37:e7:97:37:be:74:90:79:51:38:8e:36:a1:48:e6:e5:a6:
17:bc:1c:ce:aa:c6:79:a1:81:6b:54:93:12:12:f0:88:0c:d6:
31:28:c5:ff:20:d6:5f:7d:4f:77:a5:23:ba:33:8b:3e:5c:bf:
e8:b0:c2:13:b4:58:9e:e9:e1:aa:35:3f:b6:37:2b:9f:b8:ce:
39:ba:c7:ec:b2:ed:86:1e:15:31:3a:74:47:d8:c0:b6:5d:26:
5f:18:67:b3:16:b5:cb:b2:1d:39:0f:62:fc:fd:d9:13:e3:89:
2f:63:01:7a:f5:0f:14:12:23:06:4c:04:3b:30:39:8f:72:42:
60:cb:21:5f:26:e9:f4:cc:08:60:2b:08:a1:32:25:b2:da:bc:
8c:98:fe:04:98:b6:8e:ec:49:26:11:8f:45:f7:cd:c1:e1:99:
e6:08:a7:38:7a:e2:c3:8e:fc:1f:a8:06:41:09:5e:0c:e8:f6:
5a:93:63:cc:6b:7f:4d:eb:3d:f8:a7:90:ac:03:cb:c3:ab:6a:
af:18:aa:75:04:17:69:78:12:b9:8e:05:3e:2b:f4:ec:e6:a0:
01:6b:ac:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:59:24 2026 by rpki-client