
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d10ec203-44c7-4617-a578-ca38aeff57f9.roa
File: d10ec203-44c7-4617-a578-ca38aeff57f9.roa (raw, json)
Hash identifier: 2Ds/06H8II3OA+IQIMsYefBWiH5IaAYv+dqesVIvNlo=
Subject key identifier: FD:B0:92:13:CF:CF:61:76:73:B8:69:EA:4E:D2:AF:6F:B4:10:A4:16
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 08B2311D1BF32CF7F35A72C7BC45A33FE00457BC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d10ec203-44c7-4617-a578-ca38aeff57f9.roa
Signing time: Fri 20 Feb 2026 01:11:31 +0000
ROA not before: Fri 20 Feb 2026 01:11:31 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.156.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b2:31:1d:1b:f3:2c:f7:f3:5a:72:c7:bc:45:a3:3f:e0:04:57:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 20 01:11:31 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=b58dea91c696982e6263129fb368da15382be31fdadcfafd2260f2aff4a31997, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fd:dc:c2:cb:f3:05:40:1e:53:9f:e7:9d:2b:
d0:5a:46:d5:16:1a:1c:c5:4f:7e:7b:84:3f:44:f6:
f8:f0:b6:7d:38:09:2d:37:92:67:92:bb:55:ea:58:
70:b2:75:cb:dd:4f:4a:91:b9:c7:df:02:3b:66:9c:
d9:11:f8:68:59:9c:f3:9d:3d:f4:09:a1:ed:e5:ef:
e8:16:96:59:c1:95:0e:e6:1b:8d:61:e0:94:0a:0e:
0f:37:04:4d:7b:7d:b4:8a:f4:bc:46:81:ca:ed:ef:
d1:0b:a1:0b:f1:32:88:70:e9:2b:c6:db:52:7f:db:
92:42:04:75:6b:80:78:80:a2:d0:5e:e0:4b:8c:d5:
a9:ce:42:1d:1a:d3:16:39:54:36:8c:aa:82:24:a7:
9c:24:d3:2c:ce:20:3d:db:ab:9e:ec:50:30:29:5b:
49:52:77:1c:cc:63:c7:13:5b:8a:dc:59:26:bd:ed:
02:1a:ae:f4:7b:4a:fe:30:21:9c:be:b3:ce:7b:e2:
91:c5:33:d7:23:eb:24:0c:ff:91:4b:2e:07:ba:65:
a5:06:8e:60:50:37:97:48:c3:f3:f5:e8:1b:9e:25:
8f:12:5a:7a:3b:0f:7a:d2:46:3b:f4:c1:11:c6:a1:
3c:19:a7:2d:93:14:d9:b4:d2:3e:ab:4a:2e:88:42:
3e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B0:92:13:CF:CF:61:76:73:B8:69:EA:4E:D2:AF:6F:B4:10:A4:16
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d10ec203-44c7-4617-a578-ca38aeff57f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.156.8.0/21
Signature Algorithm: sha256WithRSAEncryption
09:86:b6:82:8a:3b:fa:28:dd:2d:3a:7e:72:96:5b:c8:c7:99:
30:bd:e0:1d:7d:b6:4c:f1:3d:e6:65:b9:67:9e:99:53:63:3b:
a8:a1:de:a4:0b:71:cf:46:23:81:62:fe:9c:e2:7d:25:54:2e:
d1:23:1f:41:aa:04:7b:16:00:d3:9a:31:a2:25:db:0d:ec:52:
d1:fd:9d:d0:e8:c6:57:fe:fc:f5:eb:47:21:b1:ce:2c:bd:5c:
d2:88:22:fd:01:40:d3:4e:5c:2a:63:2f:a7:3a:5a:ea:77:4f:
7d:3b:e2:3c:cc:10:90:e8:91:d4:46:d1:a4:9c:53:e0:6f:09:
91:44:ef:c4:a5:ea:2c:d0:b2:59:25:71:e6:cf:11:82:43:5d:
86:9f:a6:d2:be:b5:09:14:3b:0d:15:42:8b:93:c3:cb:79:b6:
45:23:ae:da:be:15:10:2e:d9:00:c9:3b:41:6a:95:24:27:bb:
1f:1d:51:e9:f2:c6:1e:9d:00:17:fe:18:fc:f3:92:0b:3b:35:
fe:d5:eb:0a:5e:ce:fa:81:86:5b:d1:c6:4d:45:94:3d:c5:d4:
11:75:01:e4:f0:83:e8:3e:f6:ef:a6:e8:c9:72:62:be:93:87:
49:31:94:62:3c:2f:fb:5b:7e:04:e9:17:2e:82:37:bf:3f:7d:
6b:4a:f8:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:25:18 2026 by rpki-client