
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae71a02c-a7ea-4e87-acf3-96fe4fd8bbfa.roa
File: ae71a02c-a7ea-4e87-acf3-96fe4fd8bbfa.roa (raw, json)
Hash identifier: thbMdkgMughT+Q1E7fpH82KMjDWainUxh0lpC651MJI=
Subject key identifier: 50:3A:A6:18:FC:39:75:EB:78:F8:ED:38:F7:F0:E9:10:93:1C:FF:09
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 65A42CAB15D8CF34A4B25BD0F41487C473643024
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae71a02c-a7ea-4e87-acf3-96fe4fd8bbfa.roa
Signing time: Tue 19 May 2026 03:30:55 +0000
ROA not before: Tue 19 May 2026 03:30:55 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.220.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a4:2c:ab:15:d8:cf:34:a4:b2:5b:d0:f4:14:87:c4:73:64:30:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 19 03:30:55 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=3f5b138068afd12deb2305b8eb72b51860d3e92341ff2484c4e275dc2d649ee0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a6:2a:30:b1:8f:43:19:07:46:d9:40:0f:f5:
eb:57:e8:72:18:ff:b1:e8:01:4a:6a:c9:1a:0d:53:
c3:75:51:e0:27:4f:b1:ad:ef:00:0b:16:3e:a3:96:
77:7e:9d:1c:e9:30:ff:6f:d5:57:c5:d5:e6:fd:37:
b6:e2:0b:96:d7:cb:08:44:16:7b:15:0f:67:22:d7:
06:4e:64:bf:d1:15:d4:a2:77:f2:7f:58:ce:4d:a2:
29:00:9e:38:99:6e:54:c8:b6:e4:ea:e4:93:6d:39:
a4:ac:c5:c6:76:c1:98:aa:91:66:0f:17:ec:0f:8f:
f3:27:21:03:a2:92:63:60:7b:81:8a:5a:33:e6:31:
1e:54:c9:53:59:18:ea:33:18:e5:76:55:ab:ec:a2:
38:65:ee:3f:47:9f:3c:d2:10:9a:ab:52:22:a0:ad:
5c:22:22:a3:0f:9a:4c:03:cd:77:c2:f7:74:36:16:
89:9b:82:3c:6a:51:6f:2c:2d:6f:b5:96:85:02:54:
8c:31:a0:3a:a1:bd:68:9d:cc:bd:ed:ae:bd:43:91:
a0:ce:1c:fd:c8:d0:e4:29:df:12:91:2f:29:39:03:
5b:8b:2e:bf:74:99:a4:36:a4:f4:55:33:3b:6a:fc:
43:41:fa:3b:c7:db:0c:aa:c5:e9:dc:62:3c:e2:c7:
26:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3A:A6:18:FC:39:75:EB:78:F8:ED:38:F7:F0:E9:10:93:1C:FF:09
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ae71a02c-a7ea-4e87-acf3-96fe4fd8bbfa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.220.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:8f:f6:69:7a:38:bc:29:c6:49:94:dc:7f:bd:47:ad:ac:1c:
c8:ff:24:f9:bb:24:f4:6a:8d:06:72:19:b3:db:d5:ae:59:5d:
02:f8:9e:9e:f5:0d:ac:da:3a:a6:6f:e4:b4:64:32:1b:3d:6c:
53:68:48:db:40:02:5c:bd:32:10:92:ff:6d:8e:08:a9:e0:27:
00:47:f0:f0:09:6e:53:5e:4e:09:4e:d0:e2:69:c3:3d:a9:01:
fc:53:0c:d6:00:a4:f7:14:04:10:35:e6:e5:6f:a9:68:c5:95:
46:22:37:49:31:5f:f8:a1:a4:56:05:87:ea:13:66:a9:72:be:
05:de:fd:5c:43:9c:9b:93:8a:bf:34:bc:48:de:1f:7e:fa:07:
d0:fd:8e:95:1c:16:d6:a7:0e:ce:f8:bd:87:15:46:bb:60:0d:
5a:27:be:0b:30:10:7a:45:ef:b3:dc:55:6a:45:fd:03:8c:d4:
fb:2d:b1:08:8f:a3:1b:28:9d:ff:cb:7d:82:ea:4d:9f:a5:86:
f6:04:82:8d:c9:3a:e2:28:e3:66:c8:f5:1a:a5:ec:f1:83:a5:
03:3c:2d:68:e1:0c:e4:d4:24:30:df:4b:50:3c:6e:4f:cd:60:
5f:27:42:35:bc:0d:1d:a4:0c:67:d8:70:89:b3:9c:35:bc:78:
21:87:7a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:47:38 2026 by rpki-client