
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5d712a6-1314-4d20-bd2f-b4203fe2fe3d.roa
File: d5d712a6-1314-4d20-bd2f-b4203fe2fe3d.roa (raw, json)
Hash identifier: zi0LvO1Z5TbH5qcplaottuIKkb1DQOnNL0dddQtaaFU=
Subject key identifier: 1C:5C:83:AE:44:BA:24:B6:F1:74:63:87:65:0A:FE:F0:5C:28:D0:4D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 29E9C9793F207FCC971BC1A3A8EC74B4CDD8ED9D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5d712a6-1314-4d20-bd2f-b4203fe2fe3d.roa
Signing time: Thu 22 Oct 2026 02:40:45 +0000
ROA not before: Thu 22 Oct 2026 02:40:45 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.239.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e9:c9:79:3f:20:7f:cc:97:1b:c1:a3:a8:ec:74:b4:cd:d8:ed:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 22 02:40:45 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=f66b4d4bc30e9387178ce990231e14fb211eb84e1932039e61fa6ffae8594896, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:01:3f:ba:86:d8:1d:16:80:b3:60:91:21:
a0:21:d9:fd:c8:94:20:61:de:90:6f:0a:05:8b:bf:
78:33:82:6c:f7:4d:4e:46:bf:c7:73:fe:11:c0:4e:
48:e8:07:44:34:cf:cd:c4:ff:64:58:90:9e:48:43:
90:40:fc:51:93:67:18:c7:38:a3:b6:c4:37:82:c7:
0b:44:68:eb:28:2e:15:8c:91:48:7d:5f:09:c9:96:
40:2e:ad:94:3a:bb:e2:12:fd:43:46:a9:79:96:9a:
89:f0:12:eb:da:c9:e2:7a:72:84:cb:ee:e6:20:ba:
0c:2f:9d:4f:ec:32:c4:18:70:65:b0:68:e2:38:18:
fd:fb:2b:09:c0:bf:3b:dc:55:57:36:52:00:8d:d1:
42:cd:cc:ae:fc:d7:62:42:e9:6b:2b:c3:ca:50:77:
e1:f9:d3:c2:db:05:d5:3b:69:fd:e8:c3:28:f8:10:
c8:6f:04:09:5a:06:ac:17:db:af:64:b4:6b:76:e3:
71:da:e0:de:cf:9b:f3:a0:f5:37:f1:c6:c9:d7:35:
5a:0d:c5:d2:b3:72:5b:96:df:21:0c:9b:d4:02:9a:
8f:71:6f:0e:96:14:cb:9f:a3:64:10:93:fc:bd:7b:
e5:7a:9b:a3:b7:c6:b8:a4:96:aa:12:77:b5:49:02:
d9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5C:83:AE:44:BA:24:B6:F1:74:63:87:65:0A:FE:F0:5C:28:D0:4D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d5d712a6-1314-4d20-bd2f-b4203fe2fe3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.239.114.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:1f:0c:83:e1:b7:29:bb:10:9e:72:7b:e3:19:c7:b9:41:81:
06:99:63:2e:a2:f0:fa:11:14:02:b5:a7:40:7e:1e:40:02:b2:
a0:6f:1f:25:82:4b:3a:52:e4:20:01:1e:61:07:43:0e:76:90:
4d:62:eb:92:e4:fb:6f:3e:f4:97:c3:6b:38:48:da:11:0f:5a:
2e:67:c0:ad:30:b2:b0:25:f6:5f:7b:03:d8:c1:a4:99:cb:23:
0c:ec:19:12:fc:80:07:b8:f1:4f:24:72:62:3c:3a:44:a4:24:
d3:d0:0b:7e:cd:a8:82:e9:56:cb:ed:74:66:40:1d:13:cd:df:
99:d2:3f:db:70:9c:1b:1e:6d:23:ac:f5:fc:18:1d:f0:32:44:
5c:7d:02:c0:a4:83:30:08:a6:14:88:0a:c8:44:b6:36:0e:16:
01:05:5e:e0:f3:e0:a6:c9:06:21:50:b6:14:96:50:fd:56:d9:
e5:9d:fa:8c:94:2f:b1:63:01:e1:3c:0d:95:63:75:bd:62:fe:
fb:04:d7:5f:9b:05:be:71:50:24:9c:c4:4d:6e:0c:89:51:58:
a6:f2:17:91:93:8c:2f:f5:0a:ee:90:e9:e3:84:cd:e8:72:52:
fc:60:d2:c8:28:6a:f9:19:a8:77:70:18:98:51:be:73:ec:13:
78:f7:5e:89
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKenJeT8gf8yXG8GjqOx0tM3Y7Z0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDIyMDI0MDQ1WhcNMjcwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BmNjZiNGQ0YmMzMGU5Mzg3MTc4Y2U5OTAyMzFlMTRmYjIx
MWViODRlMTkzMjAzOWU2MWZhNmZmYWU4NTk0ODk2MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/7AE/uobYHRaAs2CRIaAh2f3IlCBh3pBvCgWLv3gzgmz3
TU5Gv8dz/hHATkjoB0Q0z83E/2RYkJ5IQ5BA/FGTZxjHOKO2xDeCxwtEaOsoLhWM
kUh9XwnJlkAurZQ6u+IS/UNGqXmWmonwEuvayeJ6coTL7uYgugwvnU/sMsQYcGWw
aOI4GP37KwnAvzvcVVc2UgCN0ULNzK7812JC6Wsrw8pQd+H508LbBdU7af3owyj4
EMhvBAlaBqwX269ktGt243Ha4N7Pm/Og9TfxxsnXNVoNxdKzcluW3yEMm9QCmo9x
bw6WFMufo2QQk/y9e+V6m6O3xriklqoSd7VJAtnTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUHFyDrkS6JLbxdGOHZQr+8Fwo0E0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2Q1ZDcxMmE2LTEzMTQtNGQyMC1iZDJmLWI0MjAzZmUyZmUzZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA273IwDQYJKoZIhvcNAQELBQADggEBAJ0fDIPhtym7EJ5ye+MZx7lBgQaZ
Yy6i8PoRFAK1p0B+HkACsqBvHyWCSzpS5CABHmEHQw52kE1i65Lk+28+9JfDazhI
2hEPWi5nwK0wsrAl9l97A9jBpJnLIwzsGRL8gAe48U8kcmI8OkSkJNPQC37NqILp
VsvtdGZAHRPN35nSP9twnBsebSOs9fwYHfAyRFx9AsCkgzAIphSICshEtjYOFgEF
XuDz4KbJBiFQthSWUP1W2eWd+oyUL7FjAeE8DZVjdb1i/vsE11+bBb5xUCScxE1u
DIlRWKbyF5GTjC/1Cu6Q6eOEzehyUvxg0sgoavkZqHdwGJhRvnPsE3j3Xok=
-----END CERTIFICATE-----
Generated at Sat Nov 7 16:51:38 2026 by rpki-client