
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d044b21b-e370-4643-bf7f-02f02af18062.roa
File: d044b21b-e370-4643-bf7f-02f02af18062.roa (raw, json)
Hash identifier: 9Gy1Lby/BmaZN6xV71Yxh8td4cjko18Sfvo4x5pXdsc=
Subject key identifier: 00:91:70:19:BD:4B:BF:C3:9B:8E:D9:9A:49:9D:25:71:D0:79:48:76
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6B93DA7603DA266FD8593EF6DEC331C2EF6344CA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d044b21b-e370-4643-bf7f-02f02af18062.roa
Signing time: Tue 24 Feb 2026 03:20:05 +0000
ROA not before: Tue 24 Feb 2026 03:20:05 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.243.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:93:da:76:03:da:26:6f:d8:59:3e:f6:de:c3:31:c2:ef:63:44:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 24 03:20:05 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=f98a16280c2ba3231934ce531b07f08ee404326099563dc408c6a9689d0d22db, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:61:52:4a:8f:55:57:cc:cc:39:5b:80:a1:49:
8b:e6:0a:c4:9a:cf:c7:9f:71:73:89:ea:dc:52:63:
fb:ec:55:0d:ad:26:77:31:ff:b3:76:09:5d:d9:ec:
52:13:a2:e5:bf:37:44:72:a7:8d:ea:48:f4:68:b4:
01:97:30:6c:45:86:79:1e:28:92:5a:17:af:18:f0:
00:3b:eb:f0:c8:c2:c6:f3:9b:33:5f:7c:e0:75:c5:
1c:af:6a:11:a0:c1:f6:05:c6:e1:0a:d6:79:22:d4:
0e:b3:40:85:98:69:19:b5:49:58:ab:2b:7f:c4:a4:
ef:ac:c8:f4:6f:fa:76:2b:e9:04:cc:82:4d:19:e7:
70:b7:d0:40:c5:5c:bb:d7:57:f2:ba:78:3f:13:86:
67:12:c7:46:ba:ed:07:d0:87:2f:75:3e:dd:d8:d9:
61:f4:f0:79:79:18:42:4d:1c:b1:cb:8c:57:0e:77:
fe:9a:59:60:89:13:a3:54:47:4d:93:d4:f4:49:15:
4e:63:c8:f7:0d:dc:2f:75:bb:86:85:49:41:be:5a:
23:f7:c9:0e:7a:38:70:c7:ec:73:de:32:d9:c1:7d:
b2:fa:d5:c4:ae:8f:d6:ec:6a:fd:16:91:29:a0:be:
3e:1a:7e:e4:a4:a9:92:9b:4b:75:be:6b:f6:22:cd:
92:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:91:70:19:BD:4B:BF:C3:9B:8E:D9:9A:49:9D:25:71:D0:79:48:76
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d044b21b-e370-4643-bf7f-02f02af18062.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.243.64.0/18
Signature Algorithm: sha256WithRSAEncryption
47:95:93:fd:d3:7c:a5:64:40:ba:92:a7:55:b8:22:ac:bf:bb:
f8:62:9b:5c:80:7c:5e:fc:a4:3a:aa:da:d9:4f:44:62:08:31:
ca:60:49:96:63:9d:53:a0:ab:8f:74:77:d5:2a:06:e4:91:15:
b2:4a:23:e9:d3:2a:82:58:b6:67:eb:ab:41:a8:3a:50:35:b8:
e5:13:2b:3f:1e:ab:25:e0:b6:39:a5:6a:ce:08:cb:2f:8c:a7:
ce:0d:16:88:a6:f4:6b:21:14:65:c3:98:6c:07:3c:1f:4b:09:
ae:9f:f7:b1:d5:2c:93:cc:ef:51:7d:08:c5:14:04:14:76:74:
e8:40:23:85:32:4a:1d:9c:d8:8b:47:21:d4:36:1c:8d:d1:12:
9a:00:09:ff:d2:a3:57:20:cf:58:f8:e6:fd:75:56:4e:f9:37:
0e:97:ff:98:02:08:19:20:8c:a4:c5:20:93:cb:69:62:50:84:
9e:a8:09:36:41:5c:98:9d:a3:a5:f2:c9:8e:30:fb:e1:ba:85:
cd:1d:7d:48:26:87:10:73:78:70:ce:80:e9:9d:09:05:81:76:
b2:fa:d8:18:64:18:c6:b7:47:ca:16:e3:c1:69:83:06:7f:7f:
69:f5:03:bc:41:d6:00:43:be:e9:bd:a6:44:7b:f8:47:12:26:
27:04:f8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:40:49 2026 by rpki-client