
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf3e474-b23f-4493-b068-808e6da119c7.roa
File: cdf3e474-b23f-4493-b068-808e6da119c7.roa (raw, json)
Hash identifier: KD5CA8OqlELh7nKueUxXsq9/ET1URBm3nRtUpgPblZ0=
Subject key identifier: FB:B2:E4:84:D8:D4:17:7A:0F:11:3B:68:03:78:17:62:A2:0D:7C:65
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 36AF6EDFD60A65DE99E30DE605E938304B045433
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf3e474-b23f-4493-b068-808e6da119c7.roa
Signing time: Mon 26 Oct 2026 03:30:35 +0000
ROA not before: Mon 26 Oct 2026 03:30:35 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.230.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:af:6e:df:d6:0a:65:de:99:e3:0d:e6:05:e9:38:30:4b:04:54:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 03:30:35 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=01b4785fea5bc55dca30a007aab1d752df966437398b44649c7c96c16675d8af, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:1b:a8:1e:82:c9:4c:37:fa:d1:f5:da:af:
60:3f:b7:6a:6f:69:1a:62:f0:dd:4b:7a:cc:f6:ee:
b6:9f:22:46:5f:89:28:40:01:d9:da:27:e1:42:13:
0f:66:8d:5e:8b:cd:03:2e:a6:14:f8:99:b4:bd:cb:
fd:0a:0e:e5:17:e8:29:89:05:9a:05:08:b7:1e:92:
af:51:eb:fd:23:76:dc:f4:af:10:44:c9:2f:b4:0e:
58:13:61:de:85:48:17:89:3b:5a:35:2a:76:c4:37:
c2:71:fa:7f:17:17:00:94:a4:ce:27:59:49:79:b1:
7b:b7:b1:0c:fb:0c:7c:30:3a:17:2c:71:02:08:d6:
82:f7:07:fc:99:74:7e:9f:57:31:6f:9b:fd:50:90:
a1:b2:73:41:ba:0e:22:20:66:dc:3f:be:47:45:5a:
89:85:4d:86:23:ca:1d:97:72:29:4c:7f:46:98:b9:
73:06:af:f0:9f:4e:a3:e5:cf:45:62:f2:ae:e9:42:
1c:73:7e:e1:7c:16:2d:36:2d:5c:35:f4:b1:6d:1b:
b0:05:69:2e:fd:11:14:e8:d7:3f:cb:f7:a4:9f:f3:
6a:65:9b:f7:ba:01:f1:df:68:d7:ec:28:a3:ec:fd:
b3:b7:de:95:8e:c1:0c:32:b4:78:ff:44:54:88:d4:
12:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B2:E4:84:D8:D4:17:7A:0F:11:3B:68:03:78:17:62:A2:0D:7C:65
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cdf3e474-b23f-4493-b068-808e6da119c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.230.33.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c6:9e:ea:3f:28:01:75:a7:10:bf:ff:71:cb:d6:1c:9f:d6:
0e:14:1f:e5:30:e8:a0:93:47:e2:3c:8b:94:90:ab:2a:1e:14:
12:cc:5c:30:ff:41:31:16:45:0a:59:d1:3d:46:a0:48:58:ba:
4b:44:f1:08:43:e2:f8:5d:da:23:86:ee:48:19:46:d7:cd:b7:
f3:02:d6:fd:6e:48:b1:03:e2:3b:bc:31:52:82:fe:3d:a9:c7:
a7:74:f2:74:a3:c1:69:7a:6a:cc:c4:26:6a:b0:4f:2a:80:9b:
e9:39:16:cb:a5:d7:86:1f:59:7e:ec:93:db:4a:04:b4:f9:15:
af:f1:59:d9:dc:f4:3a:0d:08:9f:8f:d7:a3:c3:ac:1e:d6:c5:
11:35:13:a4:70:a5:90:1f:7b:b8:92:bf:91:18:de:c9:21:38:
fd:64:8b:8e:78:d3:a7:1a:ed:1f:bf:4b:27:53:53:bf:44:9f:
63:41:a9:53:40:25:f4:16:a7:c5:6a:03:73:e7:80:d9:43:6f:
01:15:8c:e3:57:79:74:e6:84:a6:9f:99:06:aa:0f:a6:88:91:
f2:47:56:e7:b0:e2:16:57:67:27:09:20:25:39:1e:68:3d:15:
9a:23:82:72:93:32:fc:f0:31:77:55:29:a6:c5:22:21:8b:0c:
9a:38:ae:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 02:40:00 2026 by rpki-client