
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cbdc2909-d481-4c6b-a3f0-0362bbe85434.roa
File: cbdc2909-d481-4c6b-a3f0-0362bbe85434.roa (raw, json)
Hash identifier: VPQLLsIwn4Lp+52fZystPiJU03soIHP5GHb15pNKAEs=
Subject key identifier: 7D:12:AB:BA:94:D1:3B:26:73:73:79:00:2B:89:16:3B:88:0A:63:81
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2ED17A1BBFC530692D56A73CC01F1ACAC17311E4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cbdc2909-d481-4c6b-a3f0-0362bbe85434.roa
Signing time: Thu 15 Oct 2026 02:40:09 +0000
ROA not before: Thu 15 Oct 2026 02:40:09 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.216.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:d1:7a:1b:bf:c5:30:69:2d:56:a7:3c:c0:1f:1a:ca:c1:73:11:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 15 02:40:09 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=ef965cd5782af52a555427f21d2a1bc59d575ba37dd63d262e8286b2abb19cbe, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:56:d1:86:9c:18:69:b5:17:f7:7a:d2:79:
44:7d:83:e9:23:60:35:33:c7:cc:56:45:70:71:83:
4e:80:38:51:da:bb:76:d3:af:71:2b:ef:ca:cc:cc:
a4:b5:b0:83:bc:e3:c8:37:f2:8e:4a:8d:e6:d4:cf:
53:a2:a6:6f:99:70:89:4e:91:c7:5f:a0:b7:98:63:
d9:fa:54:9b:32:38:5e:2b:70:30:d7:bb:08:53:00:
a2:bb:62:7d:7f:5d:1b:16:1d:94:28:4f:c3:f6:65:
b3:27:69:3b:ed:f2:2d:07:41:df:42:39:b7:63:be:
18:c4:45:e1:96:25:a6:b1:ab:5b:78:a9:3a:44:0c:
83:03:09:36:a4:59:67:49:39:1d:b1:91:45:f0:f7:
14:f6:9e:4b:72:ec:a6:e3:08:6d:83:fe:4a:d6:05:
8e:6a:50:78:a0:ce:c0:0c:2b:86:e7:87:ae:c7:f5:
06:82:0b:bd:42:85:7e:96:59:e8:47:7f:67:98:8c:
39:16:f0:3c:b9:ad:4f:87:7e:a6:25:ef:59:1f:e4:
79:2c:6f:c3:af:e2:e8:27:1c:b0:03:21:89:fe:32:
3f:47:40:60:7a:45:bd:e2:56:97:a5:10:16:6d:fd:
ca:88:84:4b:f7:13:13:70:25:13:8b:9d:cb:49:cb:
1f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:12:AB:BA:94:D1:3B:26:73:73:79:00:2B:89:16:3B:88:0A:63:81
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cbdc2909-d481-4c6b-a3f0-0362bbe85434.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.216.192.0/18
Signature Algorithm: sha256WithRSAEncryption
29:6c:17:53:3a:f4:57:74:5d:2f:a3:0d:b1:76:3f:09:36:0a:
eb:d5:d6:27:8e:ed:53:55:49:e8:b2:4a:d5:75:95:fa:11:a6:
52:30:a7:63:a4:5f:f4:4a:e9:dc:44:07:4c:6c:7e:8a:19:9b:
3c:bc:a2:1e:03:b6:6a:d5:a6:84:19:78:04:9f:c8:dd:4e:33:
17:1e:91:6a:b5:42:03:ca:2c:7e:d2:d0:bc:e1:02:43:ea:fd:
f1:a4:88:e6:94:71:11:20:ee:85:f5:27:59:47:0d:d0:07:32:
40:c7:60:be:e3:6c:94:35:b5:51:fd:93:cf:c1:59:c0:3f:41:
79:c5:7e:a8:57:32:50:c1:e1:d8:e7:9c:6a:92:e0:fa:82:86:
c9:2d:a5:fd:e1:47:bd:0a:ed:09:20:b5:37:b8:f8:f9:42:94:
91:09:44:e2:a4:da:fd:c4:94:72:ba:04:91:e8:04:e4:dc:a4:
88:ab:6f:51:25:7d:d1:9c:92:68:5b:79:4b:93:ab:59:99:ff:
be:2d:ad:f9:e5:bf:e9:cb:3d:ba:d0:b8:9b:cb:f2:cd:c3:df:
64:52:f1:18:d2:bf:f6:df:5b:81:4a:15:51:0b:48:9b:a9:bf:
30:ff:5c:c2:23:96:d6:70:89:ad:f0:f3:3d:29:fe:1e:2c:7b:
53:96:24:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 00:58:42 2026 by rpki-client