
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9a23c9d-11a1-4a7b-99fb-6dd160e4b8ff.roa
File: a9a23c9d-11a1-4a7b-99fb-6dd160e4b8ff.roa (raw, json)
Hash identifier: gH7UZ6FWc0SU2C4N3braF/T+0yOT/dDvt8wYcYMOQOY=
Subject key identifier: 00:17:8D:78:48:0C:BC:62:5F:7A:A3:A2:D3:BF:79:98:78:1F:EB:0C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0BF12320D1BB83FF4B833A65807DE8469F7A0F75
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9a23c9d-11a1-4a7b-99fb-6dd160e4b8ff.roa
Signing time: Thu 14 May 2026 00:41:24 +0000
ROA not before: Thu 14 May 2026 00:41:24 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.150.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f1:23:20:d1:bb:83:ff:4b:83:3a:65:80:7d:e8:46:9f:7a:0f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 14 00:41:24 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=e4c810476c978c57ef1ee0bffe70cca804432ce69a8fdb56fe1824da98f230a3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:78:d8:7a:33:ad:6a:f9:27:c7:ab:53:c8:
33:98:f0:4b:7b:34:5f:9f:79:1b:d3:f8:40:3d:1c:
7b:9c:82:a4:ae:58:36:a0:9c:5f:63:56:43:c4:21:
69:02:d5:2c:df:bd:7a:86:98:24:77:f7:a9:c4:ee:
9d:03:04:28:a5:34:d4:e3:5e:e6:86:bf:ba:bf:f4:
4e:a7:de:2a:b6:89:9a:d9:89:27:38:31:0d:97:b4:
3b:83:dc:9d:42:39:40:79:31:85:eb:47:9e:61:79:
f2:c5:c3:f8:23:eb:c9:49:ff:3c:75:db:3d:c2:a7:
fb:2a:81:0b:0d:82:a6:7f:c5:cb:a8:ef:f8:dc:93:
43:36:5c:bc:b2:d0:53:5e:85:9b:4e:ba:af:ae:2f:
eb:22:8c:6a:48:37:61:ac:65:b8:e6:66:fd:f8:35:
43:11:59:27:6e:65:e3:8f:74:41:56:9f:4f:6d:28:
7b:c8:68:da:d3:a1:ac:37:16:f9:a8:ed:88:03:38:
af:de:71:95:74:e5:be:81:9f:89:4c:59:92:52:69:
78:77:25:2d:a2:43:02:00:11:23:e6:9e:54:1e:c5:
97:f8:29:ec:05:a1:90:ea:17:67:25:e5:ee:1e:cd:
33:73:8e:b3:60:be:a4:98:bd:5d:01:14:bf:39:10:
40:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:17:8D:78:48:0C:BC:62:5F:7A:A3:A2:D3:BF:79:98:78:1F:EB:0C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a9a23c9d-11a1-4a7b-99fb-6dd160e4b8ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.150.160.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:24:02:e3:eb:46:26:48:b9:4d:58:03:0f:1d:f9:26:72:d5:
59:79:74:fa:ea:04:94:f4:e7:0b:57:fd:62:79:fc:d4:d9:73:
7a:ee:a0:3c:66:d9:10:9d:5f:ce:25:d9:24:a8:77:67:e7:e3:
b4:6c:f6:b6:f9:b4:73:ed:6f:ba:45:8e:ac:cf:82:38:7e:07:
e3:68:c5:ff:ad:62:b9:ca:32:48:6a:c8:5c:de:ed:41:03:a4:
50:c7:06:08:9d:a2:9a:fc:a0:d9:81:4b:54:30:61:bc:18:c0:
d0:18:3f:e9:bd:35:ac:49:fd:5a:82:b7:89:0d:aa:89:4e:59:
2c:65:f2:8b:a4:88:3a:ec:46:2a:1d:ec:18:7c:b2:d1:26:76:
7a:3f:35:b3:12:78:8a:85:e3:e9:13:90:e1:da:ea:3a:2f:46:
7c:83:c2:5f:1f:39:a2:94:14:60:e3:17:92:8d:18:9e:7d:b4:
f8:d0:c8:10:78:75:68:bd:21:5f:c4:da:07:94:4a:a6:93:7d:
d9:36:f2:61:b4:a5:cb:e7:5a:7b:5e:fa:9a:dc:e7:26:dd:9b:
ac:66:81:28:51:c6:43:6d:03:54:b7:91:02:a3:01:58:a9:36:
ba:c7:26:20:1a:ba:38:ae:56:c1:63:5f:1e:be:13:ab:ac:c4:
98:54:93:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:32:52 2026 by rpki-client