
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c06f920b-2b6c-494d-8f83-4ed304989ca1.roa
File: c06f920b-2b6c-494d-8f83-4ed304989ca1.roa (raw, json)
Hash identifier: KW0azTExPLmFylW/dAwEhwD2FlthI8fOZmzK2v/Rq/4=
Subject key identifier: AA:36:CC:DA:12:4F:A1:0D:26:06:B6:B3:79:9D:7C:82:93:E2:A6:F9
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4A6CAD6C77CC4B63FD7F4441A425F555429267FC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c06f920b-2b6c-494d-8f83-4ed304989ca1.roa
Signing time: Wed 21 Oct 2026 01:21:25 +0000
ROA not before: Wed 21 Oct 2026 01:21:25 +0000
ROA not after: Tue 19 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:6c:ad:6c:77:cc:4b:63:fd:7f:44:41:a4:25:f5:55:42:92:67:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 21 01:21:25 2026 GMT
Not After : Jan 19 23:59:59 2027 GMT
Subject: serialNumber=d2635509668d186ced834b1946eebcbb4ffe16f6cbb6ca233ff91dea5da03f8a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:2b:7b:51:df:2f:9e:c0:cf:56:7b:4e:a2:
72:ae:47:e6:d3:9f:f4:18:a2:7f:48:3f:06:d4:22:
3f:3b:09:96:20:ce:03:6c:ba:02:66:ba:fc:f3:5c:
78:67:4d:8e:55:b0:08:b8:43:67:14:b0:61:3e:bf:
5c:5f:83:1b:21:38:d8:f0:a9:dc:50:fb:40:96:91:
6c:fd:06:d9:ac:e4:44:ed:f9:be:19:36:93:2b:fd:
19:b0:65:eb:13:92:dc:cb:f9:a9:ae:11:ed:fd:97:
83:0a:5e:61:9d:96:17:e6:da:c2:f2:c8:bc:6e:71:
8f:76:6f:95:77:d1:08:3d:76:0c:7c:c2:38:a0:04:
c4:08:5b:b2:6d:4d:9c:10:8e:10:de:17:c3:8b:5a:
c3:4b:19:a2:b5:61:db:89:7d:19:07:98:c5:08:6e:
91:ba:10:f7:80:49:9a:7c:e8:b7:54:9e:12:be:5e:
94:ad:77:6d:84:10:a9:bf:d9:c6:de:a1:4e:dc:c4:
8b:50:d6:b3:64:c0:c1:06:4e:aa:b7:86:43:91:75:
cd:29:ca:10:fd:b9:1e:de:0f:11:63:e1:e4:0b:7a:
51:f1:a9:de:8c:f4:da:e2:bb:0a:78:c1:1e:44:b1:
9b:37:30:9a:62:58:cf:d9:6d:c1:05:d2:a8:65:c6:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:36:CC:DA:12:4F:A1:0D:26:06:B6:B3:79:9D:7C:82:93:E2:A6:F9
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c06f920b-2b6c-494d-8f83-4ed304989ca1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.33.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d8:61:7e:ea:55:d1:17:f0:90:16:f9:86:71:f4:28:75:9c:
66:23:48:91:88:b7:41:0b:0c:a7:5c:f6:d4:f0:78:c0:36:72:
5f:1d:8a:e4:fd:ec:74:34:79:9e:05:9b:51:23:7e:8f:78:c2:
d6:b9:b4:28:32:11:fd:41:48:db:7d:ed:ac:f5:46:fd:29:8d:
ee:fd:78:64:13:68:10:d8:0a:d5:e9:d3:c3:96:47:97:9f:67:
34:0a:7d:e1:07:a4:40:ef:83:e0:f2:74:8d:2b:3c:b3:97:98:
fd:95:5e:e5:6b:17:82:53:b1:02:5c:34:99:55:44:e2:4a:51:
7d:bc:f1:ae:be:c0:92:0d:32:2b:c1:0c:5c:af:99:63:ba:d5:
b6:08:09:bf:ff:63:6e:a6:e0:4c:69:63:05:c4:9d:7e:b4:ea:
f3:76:3d:f8:ee:36:96:26:af:99:c4:5a:87:6e:e5:72:64:dd:
4f:20:ea:9f:bf:ef:1c:af:34:52:46:88:d5:e8:a8:5f:63:97:
72:fa:2f:08:72:81:cd:5f:69:81:65:be:bc:88:1d:13:13:06:
57:87:78:ac:9b:9b:2e:1c:cd:02:c3:f8:99:90:41:ac:4b:ae:
d7:e9:32:70:44:3a:26:32:ed:41:31:91:6d:ee:0a:80:04:d4:
54:25:8a:6e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUSmytbHfMS2P9f0RBpCX1VUKSZ/wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIxMDEyMTI1WhcNMjcwMTE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMjYzNTUwOTY2OGQxODZjZWQ4MzRiMTk0NmVlYmNiYjRm
ZmUxNmY2Y2JiNmNhMjMzZmY5MWRlYTVkYTAzZjhhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDr3St7Ud8vnsDPVntOonKuR+bTn/QYon9IPwbUIj87CZYg
zgNsugJmuvzzXHhnTY5VsAi4Q2cUsGE+v1xfgxshONjwqdxQ+0CWkWz9Btms5ETt
+b4ZNpMr/RmwZesTktzL+amuEe39l4MKXmGdlhfm2sLyyLxucY92b5V30Qg9dgx8
wjigBMQIW7JtTZwQjhDeF8OLWsNLGaK1YduJfRkHmMUIbpG6EPeASZp86LdUnhK+
XpStd22EEKm/2cbeoU7cxItQ1rNkwMEGTqq3hkORdc0pyhD9uR7eDxFj4eQLelHx
qd6M9Nriuwp4wR5EsZs3MJpiWM/ZbcEF0qhlxqAVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqjbM2hJPoQ0mBrazeZ18gpPipvkwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2MwNmY5MjBiLTJiNmMtNDk0ZC04ZjgzLTRlZDMwNDk4OWNhMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0XyEwDQYJKoZIhvcNAQELBQADggEBABTYYX7qVdEX8JAW+YZx9Ch1nGYj
SJGIt0ELDKdc9tTweMA2cl8diuT97HQ0eZ4Fm1Ejfo94wta5tCgyEf1BSNt97az1
Rv0pje79eGQTaBDYCtXp08OWR5efZzQKfeEHpEDvg+DydI0rPLOXmP2VXuVrF4JT
sQJcNJlVROJKUX288a6+wJINMivBDFyvmWO61bYICb//Y26m4ExpYwXEnX606vN2
PfjuNpYmr5nEWodu5XJk3U8g6p+/7xyvNFJGiNXoqF9jl3L6Lwhygc1faYFlvryI
HRMTBleHeKybmy4czQLD+JmQQaxLrtfpMnBEOiYy7UExkW3uCoAE1FQlim4=
-----END CERTIFICATE-----
Generated at Sun Nov 8 00:51:09 2026 by rpki-client