
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56fba09-b4fa-43df-b98b-b19d88820996.roa
File: b56fba09-b4fa-43df-b98b-b19d88820996.roa (raw, json)
Hash identifier: R8kAUQAXIHgoRwGO9wYCh9Cp1+ILeUJ/XZ5WxyKdXxs=
Subject key identifier: 9F:6F:DB:8F:9A:3E:95:DA:89:F8:33:62:B0:19:67:CF:46:B8:18:32
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 26EB424FDF754D87FAFB8F09839087B6ED64728F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56fba09-b4fa-43df-b98b-b19d88820996.roa
Signing time: Mon 23 Feb 2026 01:40:09 +0000
ROA not before: Mon 23 Feb 2026 01:40:09 +0000
ROA not after: Sun 24 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.124.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:eb:42:4f:df:75:4d:87:fa:fb:8f:09:83:90:87:b6:ed:64:72:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 23 01:40:09 2026 GMT
Not After : May 24 23:59:59 2026 GMT
Subject: serialNumber=3c5802a025d45d2b7ac89773bc214e15aa59f9b3f3edeb48a8f48cadeffee4fe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:aa:6b:22:88:bb:89:c0:cb:56:c6:8f:7c:b9:
55:b1:34:27:53:00:b1:e0:b7:fb:b5:56:35:ce:46:
c7:c3:7a:55:c3:d8:85:31:a7:c9:a9:59:df:33:87:
2e:e3:fd:31:f5:56:ed:30:ad:37:ff:aa:eb:dd:35:
1d:54:da:64:06:23:32:5a:c5:09:f2:c3:c3:3a:9e:
ae:08:c4:de:af:cc:e0:38:3a:a7:c6:a5:68:3a:bb:
29:48:92:da:32:0e:ea:c3:f4:74:d5:cc:3f:d7:4b:
9b:f6:4e:fa:53:e2:1f:d4:93:e3:64:68:2b:d6:85:
39:7f:bd:24:11:a8:01:f3:d0:cf:ca:7e:9e:ee:84:
5d:0d:2c:79:4b:03:a5:9d:be:1b:a2:d2:7b:f5:94:
03:7b:07:de:1e:5e:10:22:0a:3d:4f:b3:5a:c6:65:
5b:24:18:e8:ab:49:75:89:33:f8:74:ad:a8:d8:98:
bc:f3:aa:3e:26:3d:01:5d:41:89:cf:ce:aa:48:9a:
ed:7d:a5:2e:7a:5d:c6:d2:51:18:6b:9d:51:c0:e6:
44:01:8b:85:e8:ce:d6:2d:a3:e8:ed:a1:f5:88:ec:
a0:22:0d:c8:83:77:e8:c7:99:ba:ec:0f:ea:74:ea:
f4:77:e1:23:3a:c0:23:a6:e6:a9:8a:42:99:b1:15:
ac:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6F:DB:8F:9A:3E:95:DA:89:F8:33:62:B0:19:67:CF:46:B8:18:32
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56fba09-b4fa-43df-b98b-b19d88820996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.124.232.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ea:77:7e:3e:07:ce:b6:6e:3c:a3:a0:a5:30:43:02:19:ad:
9f:c2:b4:9e:a8:af:c9:82:7d:2a:39:79:92:e7:41:ee:3e:00:
7f:14:b9:f7:04:94:45:8e:ed:40:b6:e8:27:af:9f:fa:b1:49:
25:c7:dd:56:c5:fb:8f:06:37:1c:b7:27:a1:24:0f:89:58:30:
2b:a4:1c:2e:cd:1d:11:54:17:7e:b1:bf:2a:73:6a:a8:bd:b3:
7d:94:9e:d3:3b:db:96:1a:a0:c8:aa:5c:9a:88:3a:2b:52:93:
0b:39:62:be:7f:05:ce:71:6e:f5:59:c0:67:86:11:2c:10:4f:
eb:bd:8e:4b:0c:3f:92:dc:00:51:0b:d5:fb:16:43:29:11:6d:
e9:4c:58:eb:d1:a9:3d:d4:16:4a:7e:88:bc:0f:70:8a:30:af:
e0:92:3d:5e:ec:e9:43:be:3f:53:f6:e3:87:ec:e9:87:7f:d7:
11:3b:57:57:3e:f4:62:88:ac:e2:24:1f:7e:ad:21:f3:b9:3c:
5c:47:96:b2:a8:b0:8a:9f:ea:cc:8e:d0:0b:c3:8a:69:a7:10:
9e:c5:62:07:a3:96:16:e9:41:4a:24:dc:d1:1b:c5:07:90:04:
cd:80:36:bf:3e:b0:9e:ea:92:da:95:bf:5d:d6:3e:21:b9:2e:
25:00:42:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:43:47 2026 by rpki-client