
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a78ed75d-ea2e-41c1-aded-45c9f7b69c79.roa
File: a78ed75d-ea2e-41c1-aded-45c9f7b69c79.roa (raw, json)
Hash identifier: vrP9htY/tihlkLxlEW+1ry526a0IwnElw2JVH/1NjDo=
Subject key identifier: 26:BB:72:D8:4E:1C:5F:97:4C:C9:43:8A:DB:16:DD:F2:3D:1E:19:50
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0A78C7FBDE1C76EB82176A0A0F3D52DA2DFF5DA3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a78ed75d-ea2e-41c1-aded-45c9f7b69c79.roa
Signing time: Sat 28 Feb 2026 02:00:36 +0000
ROA not before: Sat 28 Feb 2026 02:00:36 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 128.188.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:78:c7:fb:de:1c:76:eb:82:17:6a:0a:0f:3d:52:da:2d:ff:5d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 02:00:36 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=aff72209f581c91cf1d131a4691adfec509f239372d91ca6abcc9771e0927d93, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:09:c6:ae:21:5a:16:b8:3c:ef:7c:a3:05:1a:
f3:32:e6:cb:d5:dd:df:58:de:0b:fa:cf:67:bd:6d:
ce:95:56:0e:7a:fc:d8:54:25:4c:de:73:f3:b5:59:
78:5e:54:70:8d:8a:fa:03:86:9e:58:f4:fb:6b:25:
fa:93:71:5e:83:52:b4:25:a3:4d:54:4e:52:14:18:
3d:1f:55:bc:65:dd:e8:a4:55:c5:7d:03:89:ac:cd:
ed:40:53:16:65:3c:f4:87:df:32:cd:70:b4:8f:5b:
aa:d2:ae:6c:d8:41:78:c7:b1:f9:b4:c5:00:f3:0a:
24:2c:f1:bc:c4:a0:16:e4:ad:93:65:fb:9a:6b:6e:
13:44:9c:03:ac:b6:99:71:9a:9b:c7:80:1e:6e:e7:
af:3b:eb:ef:0d:33:2a:b1:c7:37:5a:c0:1a:1f:ed:
0b:5e:03:28:bb:68:46:b5:bf:15:b0:ec:d5:5d:03:
a6:c8:21:44:92:7b:27:3a:8f:7f:12:f5:bf:5e:68:
20:55:5a:11:75:68:c7:8a:b3:a0:70:06:0f:55:cb:
59:86:84:fa:f4:af:f5:66:ff:58:fc:e1:87:e1:67:
ab:32:a4:6c:00:66:b5:ee:ad:96:2d:1b:6d:05:c2:
f9:e1:5c:21:14:8b:9d:08:b9:51:78:31:ac:77:cc:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BB:72:D8:4E:1C:5F:97:4C:C9:43:8A:DB:16:DD:F2:3D:1E:19:50
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a78ed75d-ea2e-41c1-aded-45c9f7b69c79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.188.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:ee:e4:93:6d:ea:97:06:8b:f5:8f:e4:d3:cd:90:51:e0:ec:
79:e8:6a:85:e1:d7:29:4c:97:3f:6f:b8:5a:d2:46:c0:08:92:
75:53:f3:2b:bc:46:3e:ce:f7:d5:ce:15:66:7e:ab:bc:eb:06:
24:59:a6:e1:68:16:51:75:cd:b9:c0:73:db:68:bb:ea:7a:11:
0f:d5:fd:78:fa:57:c3:8a:94:66:89:81:84:0c:61:53:99:05:
ec:de:2c:51:96:aa:cd:29:f9:d3:2e:a1:dd:01:8b:dc:50:56:
b6:f4:68:d2:5a:a0:21:7a:f6:48:c1:86:7a:33:83:d0:12:79:
ca:5d:ab:20:42:3f:96:4b:a6:82:fd:27:2a:0b:3a:42:c3:20:
67:49:b4:22:e3:e2:f5:4c:76:9d:07:fe:44:cc:07:f0:2a:88:
90:0a:c7:47:e1:d7:88:90:68:d6:ba:50:77:a0:ec:ec:ca:1f:
20:3e:3a:26:5a:0b:6f:cd:c2:af:67:4c:bb:4c:47:08:34:94:
a9:a9:b6:aa:ca:3e:82:f4:6e:e1:7f:70:cb:25:e8:51:58:56:
29:fe:86:31:0d:3e:4e:e2:3f:01:5e:63:a8:94:89:0d:a4:19:
f9:fc:df:f3:85:a3:c7:9b:bb:6f:50:53:e9:e6:52:57:c8:c3:
3e:9a:4e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:21:04 2026 by rpki-client