
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b64667d3-8c28-4553-b7bc-3f4f0f8dffbd.roa
File: b64667d3-8c28-4553-b7bc-3f4f0f8dffbd.roa (raw, json)
Hash identifier: gJbotnLDn/pwgQraiZaTPPFMIUW5jPa+Uv4BqALWR68=
Subject key identifier: 42:B2:25:A5:50:A2:0B:A8:B7:A5:5E:9B:DA:5B:98:66:CB:B1:DD:F6
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 324419B0971CEF2E5F554DAC2709406497D517F5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b64667d3-8c28-4553-b7bc-3f4f0f8dffbd.roa
Signing time: Thu 14 May 2026 00:10:13 +0000
ROA not before: Thu 14 May 2026 00:10:13 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.159.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:44:19:b0:97:1c:ef:2e:5f:55:4d:ac:27:09:40:64:97:d5:17:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 14 00:10:13 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=19c106ce5543c5c179760b3f19c5784115cc07e91e8a4642cc28166e4ca86c1b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:9b:1b:8e:98:4d:4b:ab:b3:18:60:88:01:
13:84:d4:1f:5c:a6:ef:28:54:81:ab:28:6e:16:61:
96:9b:4f:dc:59:88:74:2d:ac:5e:9e:21:1b:27:1d:
3b:19:64:9b:d6:b6:54:11:ec:a2:33:04:9e:29:7b:
a3:a3:c1:99:a5:e1:21:4d:b2:bf:97:ad:8f:08:a8:
9f:5f:b6:36:15:26:65:45:f5:c6:2e:1f:8d:ff:b9:
07:d9:b4:c9:dd:73:ca:31:62:7f:3a:a1:d6:4e:a8:
c6:3b:76:23:fd:60:fe:f1:1d:1a:2b:8c:8f:1b:c9:
06:e4:e5:09:79:6d:79:7c:b7:89:5e:bb:17:3b:6e:
ae:24:59:de:4d:d6:fd:12:63:55:78:0e:78:0d:b8:
6f:34:29:db:bb:a5:95:d4:aa:aa:9c:68:61:5c:4a:
3a:a8:c1:65:48:a5:72:c5:5b:6f:88:2b:60:51:d8:
98:b1:2a:97:2f:44:d6:24:20:eb:ad:b5:85:f4:28:
92:52:b6:c6:b0:eb:8c:84:95:a0:31:a1:ba:8d:5a:
0b:e6:12:b9:b3:ea:a7:25:8b:f3:a5:e0:ac:bb:f6:
1f:30:d2:50:d3:97:6f:29:2c:bd:ad:fa:f9:89:65:
aa:29:28:ad:d5:21:14:5d:0d:97:59:24:c4:63:a5:
c3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B2:25:A5:50:A2:0B:A8:B7:A5:5E:9B:DA:5B:98:66:CB:B1:DD:F6
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b64667d3-8c28-4553-b7bc-3f4f0f8dffbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.159.64.0/18
Signature Algorithm: sha256WithRSAEncryption
7d:b6:57:be:20:17:a0:95:80:a2:81:a9:a7:95:fe:c7:cf:0b:
de:3a:16:21:73:d3:66:3a:27:ab:c8:92:75:f2:d7:0f:57:29:
a0:a9:81:43:a4:4d:43:f4:07:54:79:b5:1a:77:3c:45:fc:5a:
b0:b2:63:93:14:0a:b4:fc:3c:48:67:16:8f:8f:b1:80:2b:6e:
0d:ba:dd:e5:1d:7e:37:a8:dd:b8:31:8e:a2:82:b7:84:9f:e1:
5d:bf:ff:89:7d:e6:b6:4c:8d:62:4c:2e:c4:44:a8:6d:99:26:
d2:56:8f:b5:6d:5b:9a:29:15:d9:fa:88:db:30:15:9d:c0:dd:
f8:f2:5d:97:b6:e6:0f:b1:91:49:b8:47:fe:5e:c4:82:91:a8:
eb:21:5c:e6:57:3c:6e:31:d5:c4:46:10:df:1e:28:e6:b3:c3:
14:a3:ed:a1:48:b0:44:3c:aa:29:40:37:2d:14:71:2a:34:02:
93:8a:fa:4a:68:af:60:ec:34:72:7a:bc:f1:e6:41:68:97:a3:
21:97:bb:ee:89:eb:d2:be:ab:34:83:1a:d6:90:e6:04:ee:77:
df:9c:8d:20:45:5c:5a:a7:f5:6e:81:34:b0:19:b7:80:5d:e7:
ac:68:d0:3f:b1:cd:9b:df:5d:fc:f7:2c:30:17:01:23:99:ce:
ba:2c:08:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:33:05 2026 by rpki-client