
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9893146a-aef3-48f2-b5b8-3ec512361479.roa
File: 9893146a-aef3-48f2-b5b8-3ec512361479.roa (raw, json)
Hash identifier: nf+jEVHLtzk35fHmcDPFiNNYBERWuVFM3yNm0RS64QE=
Subject key identifier: E9:C7:C4:F4:BC:CA:01:51:E9:BF:F6:45:8E:08:45:2B:56:0D:F5:D8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0A4823262865B63CCA66542B8E2A07668F9241C1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9893146a-aef3-48f2-b5b8-3ec512361479.roa
Signing time: Mon 26 Oct 2026 01:10:22 +0000
ROA not before: Mon 26 Oct 2026 01:10:22 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 15.164.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:48:23:26:28:65:b6:3c:ca:66:54:2b:8e:2a:07:66:8f:92:41:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 01:10:22 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=f6f90f18a0f5a8b0f719801abef21ed94258d5ca7ec346e7d20ac5433c763dca, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9a:ec:3a:0e:38:11:73:c8:d1:f4:46:01:56:
cb:6c:60:d0:0c:cd:c3:c3:e2:58:72:50:65:f6:ac:
03:04:f1:64:fc:b9:56:83:c4:d4:8d:43:0a:8c:d8:
bf:e2:db:fc:13:05:ea:b4:dc:8d:6f:bc:6e:f2:4d:
28:2f:29:da:a2:85:d5:0e:96:d0:c5:30:7c:1d:ae:
0b:cf:55:18:0c:b9:c6:6d:6d:0e:6a:ef:73:9f:ff:
b8:47:ea:91:a9:9e:40:32:24:f7:f9:5e:01:98:9e:
53:b3:24:fb:fc:c4:2c:a0:40:19:95:e5:c3:6e:70:
86:f7:d5:6a:75:7e:96:f3:e8:fe:21:07:d5:59:de:
8e:48:13:43:de:d5:55:aa:d6:63:2b:06:02:29:52:
6e:9f:39:75:56:42:cf:a0:7a:7c:0f:fe:76:3f:e6:
62:a8:cd:bb:86:86:11:ca:67:9c:5c:59:56:b5:f6:
e2:74:78:ac:b3:08:df:8e:90:99:15:46:20:37:cd:
9b:d3:16:79:87:bd:28:87:13:a3:8a:5c:b3:44:1a:
fb:20:3f:31:99:c0:23:77:6d:2a:50:36:44:d9:90:
12:40:05:97:c6:4e:57:0b:46:6d:cb:b9:56:a5:85:
91:c8:11:02:6b:d3:bc:c6:e9:24:63:ba:53:fe:60:
36:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C7:C4:F4:BC:CA:01:51:E9:BF:F6:45:8E:08:45:2B:56:0D:F5:D8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9893146a-aef3-48f2-b5b8-3ec512361479.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.164.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9f:49:4e:74:ea:ed:44:02:17:6b:78:4c:b1:74:52:24:15:04:
25:4e:0c:4d:54:4c:23:32:ea:e5:3e:62:a0:93:12:33:07:0e:
26:aa:33:f6:e7:ce:54:15:49:65:8d:e5:da:a6:eb:4d:0d:0f:
bd:e1:54:85:57:20:a0:5e:94:eb:97:07:7b:ce:ef:66:c9:1d:
a1:69:c9:27:90:9f:dd:bd:3c:0f:2d:17:fa:07:6f:88:85:88:
19:8e:c2:bf:b0:f9:c1:c5:9d:85:d4:3d:12:1e:b7:15:55:88:
11:71:4a:63:98:89:41:6d:0b:a3:bd:cf:0a:e0:88:1e:b2:fb:
e5:26:30:b1:d8:4f:2c:86:ae:b1:9d:e0:87:25:e5:9d:e2:e8:
89:76:d0:94:32:e9:0d:2c:91:78:a4:0e:e4:56:0b:5d:df:04:
95:4b:7d:8f:64:c3:34:2c:f7:40:02:3c:d6:7a:06:94:9a:4d:
2a:14:20:df:49:50:62:4c:ed:4b:f8:3e:e4:ba:b3:74:3a:16:
43:5c:29:56:69:71:f8:18:cd:c9:bd:ba:64:64:c0:1e:cc:5f:
ed:d3:4c:87:ca:1e:d2:00:94:c5:86:8b:6e:a7:3f:b5:2d:7d:
e5:26:f1:32:12:b3:b0:ee:29:2e:45:08:9d:37:9c:1d:34:c3:
03:11:20:78
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUCkgjJihltjzKZlQrjioHZo+SQcEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDExMDIyWhcNMjcwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNmY5MGYxOGEwZjVhOGIwZjcxOTgwMWFiZWYyMWVkOTQy
NThkNWNhN2VjMzQ2ZTdkMjBhYzU0MzNjNzYzZGNhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCTmuw6DjgRc8jR9EYBVstsYNAMzcPD4lhyUGX2rAME8WT8
uVaDxNSNQwqM2L/i2/wTBeq03I1vvG7yTSgvKdqihdUOltDFMHwdrgvPVRgMucZt
bQ5q73Of/7hH6pGpnkAyJPf5XgGYnlOzJPv8xCygQBmV5cNucIb31Wp1fpbz6P4h
B9VZ3o5IE0Pe1VWq1mMrBgIpUm6fOXVWQs+genwP/nY/5mKozbuGhhHKZ5xcWVa1
9uJ0eKyzCN+OkJkVRiA3zZvTFnmHvSiHE6OKXLNEGvsgPzGZwCN3bSpQNkTZkBJA
BZfGTlcLRm3LuValhZHIEQJr07zG6SRjulP+YDYvAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU6cfE9LzKAVHpv/ZFjghFK1YN9dgwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzk4OTMxNDZhLWFlZjMtNDhmMi1iNWI4LTNlYzUxMjM2MTQ3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEPpDANBgkqhkiG9w0BAQsFAAOCAQEAn0lOdOrtRAIXa3hMsXRSJBUEJU4M
TVRMIzLq5T5ioJMSMwcOJqoz9ufOVBVJZY3l2qbrTQ0PveFUhVcgoF6U65cHe87v
ZskdoWnJJ5Cf3b08Dy0X+gdviIWIGY7Cv7D5wcWdhdQ9Eh63FVWIEXFKY5iJQW0L
o73PCuCIHrL75SYwsdhPLIausZ3ghyXlneLoiXbQlDLpDSyReKQO5FYLXd8ElUt9
j2TDNCz3QAI81noGlJpNKhQg30lQYkztS/g+5LqzdDoWQ1wpVmlx+BjNyb26ZGTA
Hsxf7dNMh8oe0gCUxYaLbqc/tS195SbxMhKzsO4pLkUInTecHTTDAxEgeA==
-----END CERTIFICATE-----
Generated at Sun Nov 8 03:57:26 2026 by rpki-client