
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b24ab558-7cc6-466a-87a4-2df3b3d2c77c.roa
File: b24ab558-7cc6-466a-87a4-2df3b3d2c77c.roa (raw, json)
Hash identifier: HcUusE0G04u5mzFqYnv9gPLX+YN1F0MD2aCpV3SPaHk=
Subject key identifier: 51:25:B5:B0:E9:2D:A6:FD:03:9E:07:95:0F:DB:C9:2C:B9:E7:F3:79
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7DBDF5DECCC387778EAE77913C6CABEB5868EB6D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b24ab558-7cc6-466a-87a4-2df3b3d2c77c.roa
Signing time: Mon 27 Jul 2026 02:20:41 +0000
ROA not before: Mon 27 Jul 2026 02:20:41 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.166.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:bd:f5:de:cc:c3:87:77:8e:ae:77:91:3c:6c:ab:eb:58:68:eb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 02:20:41 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=3ba6e6ac2dae2d7f79036dd1c1387443459b0fda515d5e7f28cdb73eeaea0bcc, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:20:af:7e:e2:58:bf:1b:fa:51:c5:72:c1:
7f:b1:d2:04:1a:5c:f6:66:90:d5:ac:80:68:9d:6a:
5a:42:18:77:1b:80:a0:2d:b8:7d:46:7b:f9:1f:97:
d7:e4:f2:4a:dd:86:b6:52:d4:ae:34:cd:4d:38:5a:
7b:3a:ab:f2:56:2d:aa:2f:fa:5c:b2:6b:67:99:e2:
67:0a:2d:e0:8c:b2:5a:f3:ac:ee:95:02:a3:37:9f:
6d:ae:9e:b4:13:38:6d:24:55:d9:76:21:fe:80:fe:
e3:44:07:4a:a5:a0:be:45:4c:b3:b8:e9:68:21:67:
3b:ff:41:56:5c:fd:7a:88:b1:06:5e:65:d8:47:d3:
83:a5:e0:4b:77:82:73:e5:05:67:a7:bd:72:e1:47:
f9:de:42:a8:08:c3:ef:2e:82:35:8a:c4:3a:5e:38:
5a:99:f6:da:7d:cc:da:f0:eb:12:7a:06:27:8a:46:
bf:55:6f:28:31:69:af:bd:4b:7d:fe:59:3e:09:43:
9e:bf:57:c4:d4:d5:f4:cb:b2:7f:ae:cf:15:a8:42:
7e:0c:71:d5:c9:58:cf:c0:96:24:3f:b2:ee:b3:4d:
84:89:c1:49:76:48:83:f8:97:c3:c0:34:79:c9:20:
24:d1:b7:da:c7:b5:2b:5f:90:f8:05:43:30:81:1e:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:25:B5:B0:E9:2D:A6:FD:03:9E:07:95:0F:DB:C9:2C:B9:E7:F3:79
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b24ab558-7cc6-466a-87a4-2df3b3d2c77c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.166.128.0/17
Signature Algorithm: sha256WithRSAEncryption
13:e0:ce:b1:88:c1:f0:a1:3c:5b:95:46:1c:54:9f:83:4f:d3:
c3:89:28:8b:00:7d:9d:d7:6f:28:c5:63:ce:cc:18:d9:7f:f8:
f0:b1:7d:34:b9:74:af:32:52:f2:58:3a:29:54:18:d3:35:bf:
bd:7c:c9:d3:30:8c:2a:fa:bf:48:24:37:1a:e8:9b:28:6d:dc:
6e:50:64:ce:00:6b:49:45:6b:aa:6f:e1:6d:57:84:6c:bd:d6:
77:a2:58:10:90:3f:17:c4:16:05:4c:87:d0:46:ec:c4:fe:f6:
95:75:6c:60:00:5e:06:80:f1:d6:5a:9b:d1:8c:16:8b:03:b2:
e0:fa:87:3b:fa:73:b2:67:18:6e:12:69:20:8c:8a:60:bb:e3:
dd:54:37:4d:49:7b:64:5e:87:f1:30:d2:ea:46:ae:ee:4c:e8:
12:0c:0f:f1:0b:1f:ed:c9:7d:5f:f1:c2:bd:16:a6:e1:83:f5:
67:04:b9:5d:7b:7e:66:a4:51:32:40:3b:de:93:0f:0c:92:de:
3f:86:71:55:32:dc:03:71:6b:98:42:a6:cd:5d:25:ed:11:94:
bf:df:d0:8a:e2:68:b2:e1:e6:70:36:f5:3b:aa:05:9d:61:a7:
2d:ff:e1:9f:2b:bf:70:d4:56:0b:3b:5c:30:01:1a:d1:47:7a:
39:f0:62:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:12:59 2026 by rpki-client