
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2478452-80dc-452f-9401-c25c98f35859.roa
File: b2478452-80dc-452f-9401-c25c98f35859.roa (raw, json)
Hash identifier: UJdRGZVrGk2A7oyvcz233KAtpSXcmcBmwl4MDQ+4muc=
Subject key identifier: 15:FC:88:BA:3D:14:9A:02:5F:89:6A:A8:AA:C1:5E:AD:81:97:43:2B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2380DBBB126359C54FB0D97230B10233C5F1D195
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2478452-80dc-452f-9401-c25c98f35859.roa
Signing time: Mon 26 Oct 2026 03:02:44 +0000
ROA not before: Mon 26 Oct 2026 03:02:44 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 15.230.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:80:db:bb:12:63:59:c5:4f:b0:d9:72:30:b1:02:33:c5:f1:d1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 03:02:44 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=5e0da787e1a6901a66c253e4fac613f32ba9f6e84aa7877b13f0c1260d2d833c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:9a:7c:42:25:37:91:8d:e6:a1:f2:37:0a:
ea:01:83:fb:0f:49:d3:33:c1:12:04:7c:1a:6a:86:
6f:bd:e0:1d:d4:70:b9:6d:99:80:b9:f0:e0:ec:1c:
dc:9f:83:86:fc:6c:05:22:39:23:f3:7f:75:71:5a:
b1:4e:50:fc:53:55:30:e1:c4:ff:99:2d:4f:34:a1:
a4:a8:8b:8c:09:b8:30:3c:f3:c3:a2:b5:c5:27:a3:
15:7e:64:fc:4f:54:3b:1b:3e:b8:22:83:b0:5d:4f:
1b:66:2c:63:10:0b:d2:8e:af:9e:31:16:d0:50:7e:
1b:a1:4a:4f:c3:06:03:b8:52:16:e5:37:b0:90:82:
a2:ca:f6:81:5c:a4:f3:43:8e:f9:a5:68:c7:df:15:
9b:21:5d:b9:04:e0:7c:5f:55:d5:23:76:b5:d5:4e:
75:53:70:40:35:6c:2c:a8:61:d0:cc:21:71:ee:dc:
c7:2f:06:fb:6e:ab:fc:3e:43:4b:54:44:e2:77:fb:
a2:69:6f:c2:37:ea:bb:4a:c9:ee:0b:4e:4b:86:5d:
78:60:e4:4a:b5:61:5a:6d:02:6b:6d:1d:2e:08:ee:
e9:61:5e:23:a2:90:98:83:73:87:29:5c:2c:f8:f3:
b3:8e:0d:e0:b3:bb:aa:f5:5d:14:4d:51:ff:83:d8:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FC:88:BA:3D:14:9A:02:5F:89:6A:A8:AA:C1:5E:AD:81:97:43:2B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b2478452-80dc-452f-9401-c25c98f35859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.230.168.0/24
Signature Algorithm: sha256WithRSAEncryption
45:8f:95:38:b6:6e:80:90:f4:bc:fa:0b:10:57:44:2e:4a:d5:
4e:ae:8c:ff:75:77:a2:2f:39:e4:70:ec:b8:37:35:73:45:4a:
2b:e5:e3:c2:68:c3:39:41:3c:63:0f:e4:56:84:b7:c5:e1:b1:
d0:a7:21:d6:e7:64:7c:22:a5:62:a4:4a:e6:5c:86:e5:76:e4:
6d:47:cc:11:6b:bb:94:64:51:fb:f5:3e:94:78:f0:ee:10:9b:
29:bc:b2:c5:38:85:4c:a6:9f:8a:e9:2a:c3:e0:0c:ac:19:c8:
f6:c0:56:43:cc:42:85:a8:0e:3a:c6:f8:97:f0:22:23:4f:70:
89:fa:ba:fd:f4:73:f8:11:20:e4:87:d5:37:41:d2:56:52:af:
d2:1c:79:9e:72:22:88:76:24:8f:02:a9:56:86:21:28:76:92:
39:42:4e:0b:52:e1:f5:3b:e2:0c:7e:6e:51:ea:e8:44:22:85:
e4:b1:37:f2:7b:0d:24:39:4c:da:3f:ff:55:04:62:71:88:f1:
35:85:09:cb:9e:2a:4c:3a:56:0a:a3:98:af:2d:48:5c:b0:ec:
0c:fe:61:b6:f3:bf:c3:c3:c6:86:d4:b9:9a:33:fd:c7:23:ce:
8e:ea:d9:07:bb:95:98:d2:8a:1c:79:81:17:40:0a:2f:da:60:
d2:f2:1c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:43:24 2026 by rpki-client