
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd77292d-6ccc-4c44-80a7-c789a16f02b2.roa
File: cd77292d-6ccc-4c44-80a7-c789a16f02b2.roa (raw, json)
Hash identifier: 5gVjZUyv4TJUWoAaQKF5ygC2nxzJ7UBOJ9q0cocwjJY=
Subject key identifier: A4:E9:69:FF:51:E2:69:83:B4:24:69:2D:6B:83:97:95:77:95:FD:15
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 095D25A1D254A48A829C8EB7B82264692587A996
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd77292d-6ccc-4c44-80a7-c789a16f02b2.roa
Signing time: Mon 26 Oct 2026 03:03:28 +0000
ROA not before: Mon 26 Oct 2026 03:03:28 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 13.114.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:5d:25:a1:d2:54:a4:8a:82:9c:8e:b7:b8:22:64:69:25:87:a9:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 03:03:28 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=eb4ac699d4092c7a0b88034a516b639ef5fe1c723df69ac127c169ddb306374b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:24:a1:bb:17:e8:a7:cb:90:2d:e9:fa:c2:
da:95:b4:ce:1d:e0:fb:ce:a8:56:71:36:53:a9:a0:
42:08:cb:60:25:82:45:e4:f8:8b:4f:8b:bb:34:40:
b1:f6:38:81:be:57:f5:c6:8c:3a:4b:67:04:06:4c:
19:69:87:e0:52:bd:74:af:f6:eb:01:a6:c6:c1:7c:
07:a6:8d:b8:69:25:e8:0e:91:fa:0b:4b:85:59:b7:
cf:97:28:0b:a9:4a:1e:db:7a:bd:e9:8c:39:ce:b5:
5c:05:01:bc:8d:54:d2:94:b4:88:86:2b:32:80:fd:
a6:a8:15:58:15:ba:8f:04:18:ee:40:16:a4:d6:9c:
69:5f:11:53:62:ba:b7:18:b8:16:52:6f:91:a2:f5:
37:cf:3f:f1:f9:97:e5:94:db:f3:aa:14:73:7d:b6:
37:6a:aa:a8:64:29:73:3d:e7:b7:30:c3:a7:0a:41:
c2:8a:16:c6:32:de:5a:51:a9:ea:69:81:ef:12:4d:
1e:1f:97:e3:0c:f5:b5:39:9f:63:8a:48:77:ce:d6:
0a:14:29:76:4e:3a:af:15:4a:e8:6f:e1:a2:20:0a:
40:96:1d:9a:eb:87:e1:1d:36:19:3d:5e:f3:3e:95:
fd:21:d0:2f:ad:ac:7c:ef:c8:c7:e8:a4:1d:97:91:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E9:69:FF:51:E2:69:83:B4:24:69:2D:6B:83:97:95:77:95:FD:15
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cd77292d-6ccc-4c44-80a7-c789a16f02b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.114.128.0/18
Signature Algorithm: sha256WithRSAEncryption
4c:dd:77:ad:74:45:3b:c7:0f:4d:16:78:3f:22:95:25:36:05:
ce:c9:02:b4:ce:c1:29:a0:6d:6f:9e:cc:a9:04:bb:58:18:57:
d7:97:75:ef:81:75:f6:a6:c8:9a:dd:2c:eb:e0:39:b5:16:e1:
ac:16:38:a9:f4:96:ea:3d:de:99:39:91:09:e5:51:62:94:48:
24:a1:6e:c4:ec:a6:fd:4e:e4:4a:87:1e:5a:19:4b:32:d6:bc:
89:8e:1d:5d:bd:b9:14:fc:3d:40:be:2b:ee:b3:33:da:4e:1e:
c2:07:47:1f:7b:29:c9:91:55:fe:ee:d8:54:1f:a4:63:d2:c9:
18:ef:91:b8:15:c0:46:29:14:cd:65:ef:0e:66:db:72:ab:04:
7e:c6:47:e5:5b:bf:1e:e8:1e:1a:e9:e5:b9:d5:1f:2e:5f:31:
d2:0c:56:ed:98:c3:cb:b4:4a:d3:99:9f:c7:ce:4e:b0:a9:fe:
21:04:43:22:13:b7:8c:e3:b8:0f:a0:d4:02:67:89:ef:f5:15:
94:58:09:09:80:6e:91:7f:df:73:8d:d1:33:ff:32:1d:8c:3f:
be:34:4c:ec:b9:a6:2a:d3:74:79:92:f4:d6:b1:0e:cb:a2:19:
f6:02:89:0c:99:c6:d3:4b:a7:b9:7e:fe:fc:b2:8c:0d:e2:a0:
78:d5:3c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 02:42:58 2026 by rpki-client