
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56fba09-b4fa-43df-b98b-b19d88820996.roa
File: b56fba09-b4fa-43df-b98b-b19d88820996.roa (raw, json)
Hash identifier: uelSKyIv+q8NhLPX+qvA0GOEh9roSkMwljJlFB/vyPs=
Subject key identifier: 4A:94:82:52:D5:7C:F6:88:BC:A5:95:74:63:FE:DB:E5:33:F5:53:16
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 28866C1C49F7F541BFCA46EC841D2FB62E089F38
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56fba09-b4fa-43df-b98b-b19d88820996.roa
Signing time: Wed 21 Oct 2026 01:11:16 +0000
ROA not before: Wed 21 Oct 2026 01:11:16 +0000
ROA not after: Tue 19 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 52.124.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:86:6c:1c:49:f7:f5:41:bf:ca:46:ec:84:1d:2f:b6:2e:08:9f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 21 01:11:16 2026 GMT
Not After : Jan 19 23:59:59 2027 GMT
Subject: serialNumber=055adf74bfc8a34f5ba6727f8c865325789134a1c6c473db1aad65b53d1abeb6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:76:90:3c:4b:1b:5b:8b:18:7a:88:9a:e0:
cf:2c:b3:34:c4:e8:23:20:bb:a8:a1:28:0f:97:d0:
40:26:c2:d1:8d:9e:23:8d:2a:61:13:d3:4f:39:f6:
49:6c:75:a5:98:ef:f8:f0:8f:19:2e:98:38:60:f4:
f5:0e:f7:b3:f4:60:da:bd:a8:48:59:28:fd:69:15:
73:b0:81:be:5c:83:ca:e5:35:50:60:de:6d:e6:21:
a0:70:e9:1b:de:9d:53:90:11:95:cc:49:f3:81:33:
a1:4b:9b:12:a3:f0:cd:52:ca:a2:45:00:5a:d1:e2:
7e:80:81:66:5d:78:95:46:a3:ff:a1:59:55:70:79:
ef:a1:96:4a:d6:c3:19:30:8d:39:46:23:a7:30:3a:
1d:12:c6:53:af:78:79:bd:48:21:ce:c8:6a:31:63:
8f:e5:f6:76:f6:70:ab:65:bc:c2:29:00:78:c1:35:
01:a9:64:c1:3e:d3:bb:35:51:2b:c7:a9:68:eb:d2:
af:0a:8e:40:72:26:c7:1c:d6:36:28:d8:19:20:7a:
40:f7:48:cd:ca:74:74:af:5c:e1:04:5b:b5:de:4c:
d5:3c:48:45:8c:d5:7a:4b:3b:b2:9b:a2:ac:0f:6a:
e4:01:7f:6f:3a:58:cd:1e:94:83:5f:16:17:09:9a:
e8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:82:52:D5:7C:F6:88:BC:A5:95:74:63:FE:DB:E5:33:F5:53:16
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b56fba09-b4fa-43df-b98b-b19d88820996.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.124.232.0/24
Signature Algorithm: sha256WithRSAEncryption
81:79:aa:f1:e4:19:27:89:4e:d0:66:4f:a9:5a:23:96:e9:75:
8e:a8:13:31:d9:b2:4d:76:be:27:19:a7:29:a2:d3:b4:1a:6f:
37:5e:13:cb:e3:5a:0e:57:ae:46:31:32:ad:bd:a6:f6:7f:01:
43:93:56:6d:d6:d2:ff:68:3f:ad:24:d9:91:b1:46:8f:4b:e7:
ff:e5:3d:a2:a8:b7:d3:02:d9:a6:dd:c6:c8:b0:5c:7a:1f:e1:
5b:8c:9f:ff:35:a2:e2:de:e2:74:27:88:51:db:6a:f5:09:b1:
0d:05:fa:23:65:5a:77:30:c3:e9:3a:58:1d:6a:f2:73:26:3c:
63:3b:5d:7e:1f:41:a9:4c:b2:6b:6d:96:4b:ed:c9:08:55:a9:
ee:19:11:9a:16:97:e8:22:7e:af:37:13:8a:b7:a1:8d:b4:c4:
df:0f:b2:8c:f2:b7:7e:52:d1:9f:bb:47:51:e8:1f:1e:11:b7:
52:1c:3c:a0:71:0e:da:c2:61:37:63:bc:97:a7:6e:4b:06:1f:
f0:c6:d6:bb:b6:cd:c8:8a:be:53:79:d2:fb:2d:08:ae:61:f8:
88:0f:9d:3e:06:b9:ad:4a:32:4b:8f:49:5e:86:5d:6e:8d:27:
6c:84:ee:11:78:a6:40:2d:80:7c:f2:a2:a6:e4:0c:e8:ef:e4:
4b:2f:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 22:55:25 2026 by rpki-client