
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0354e3b-df1c-4634-8fc9-dd5a0b5e5c23.roa
File: e0354e3b-df1c-4634-8fc9-dd5a0b5e5c23.roa (raw, json)
Hash identifier: qJXkovI6cr7Vhir2UcfV0GUbjNezvQMchN5ll6yK+Tw=
Subject key identifier: 8E:5A:E7:C5:8B:67:E3:29:97:0F:75:D6:12:6E:B5:67:9F:2B:7E:39
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 055892740858CE7D4AF330419B6C83225492FC6E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0354e3b-df1c-4634-8fc9-dd5a0b5e5c23.roa
Signing time: Tue 13 Oct 2026 00:40:08 +0000
ROA not before: Tue 13 Oct 2026 00:40:08 +0000
ROA not after: Mon 11 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 15.248.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:58:92:74:08:58:ce:7d:4a:f3:30:41:9b:6c:83:22:54:92:fc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 13 00:40:08 2026 GMT
Not After : Jan 11 23:59:59 2027 GMT
Subject: serialNumber=35866e8f8da2a32bfb80c58b670c6f2d1d4f713d1c9dca44a95fbbdcc816b434, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:12:4e:61:ac:4e:2c:3b:2a:19:88:bc:59:4f:
9f:ba:44:34:60:46:b3:aa:ab:aa:a9:b8:21:b8:a6:
b0:7e:31:47:f2:5b:9a:d8:61:5c:84:fb:e6:61:61:
1e:33:94:1d:10:5a:d3:4d:63:ef:08:ce:c6:64:33:
31:41:9b:b7:f8:53:2c:24:fe:ee:77:11:83:bf:54:
09:25:69:34:ea:b0:bf:d1:c3:ca:e5:fd:a8:05:11:
17:0b:e7:a0:3c:10:ec:6f:32:06:7f:ee:26:4f:95:
35:0a:b0:b1:b1:29:8e:6d:5c:cf:8b:26:76:65:4d:
3f:b0:64:c7:82:65:f3:d1:ce:44:1c:4c:69:fd:51:
d2:94:0a:7c:28:f3:d7:5a:68:40:48:70:ae:80:2e:
5a:33:26:19:d7:72:b9:3e:c5:99:8d:fa:cf:59:b6:
26:70:c6:4d:77:e6:08:2a:f5:c5:5e:b6:78:79:2e:
2d:58:d0:9d:d2:d1:82:33:61:bd:9f:eb:20:41:12:
62:9a:48:56:22:d6:a4:86:8a:33:a0:25:13:8b:6f:
ff:f7:e3:48:e1:fa:2e:b3:7a:8b:bc:46:88:82:2e:
43:8a:14:5e:86:9b:e6:7d:df:ba:12:61:71:c9:60:
b6:74:70:61:4b:ed:d3:2f:16:49:36:2c:9a:1d:04:
24:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5A:E7:C5:8B:67:E3:29:97:0F:75:D6:12:6E:B5:67:9F:2B:7E:39
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e0354e3b-df1c-4634-8fc9-dd5a0b5e5c23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.248.140.0/24
Signature Algorithm: sha256WithRSAEncryption
52:5d:bc:2a:76:d3:73:34:6b:88:81:e9:5d:f4:2a:c1:fb:88:
0a:d4:14:94:c9:88:b2:db:0a:b2:6b:b1:0e:cf:2d:e3:2d:fe:
2b:43:18:5d:4c:0c:6e:0f:2c:fe:53:8a:3c:36:cb:46:93:0d:
6d:46:9b:c8:5c:1a:89:60:30:d5:94:a4:23:e7:0b:c5:d9:0c:
fe:b3:45:2d:49:76:41:65:57:de:3a:2e:37:a1:e7:d1:a6:ca:
8a:bf:97:5f:a1:df:cd:06:26:b0:a4:45:74:03:22:a4:b9:be:
52:5c:d6:a1:6b:19:3f:e8:a9:18:04:44:7e:e3:52:60:71:41:
bc:68:09:20:62:b3:b5:07:a0:da:c4:86:c8:0d:a5:7a:fc:92:
8e:ea:00:6c:67:04:21:97:01:6a:ed:3f:22:1e:2e:bb:43:f4:
68:38:8e:e4:46:1e:8b:d1:d1:3f:51:4d:52:a8:7d:59:60:03:
97:c9:fc:05:d2:35:98:7c:54:cd:e6:77:1c:45:38:c8:02:dd:
9b:b3:fc:4d:5e:b4:24:0d:0a:69:c8:ec:55:2a:0b:74:f9:6c:
d4:00:0d:5d:a2:40:f0:bc:cc:1e:c8:f8:46:de:bb:c1:c8:6a:
1b:31:c3:d0:f8:cf:02:e0:fd:d9:c3:af:3a:59:9b:9b:0d:79:
f3:fe:87:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 04:03:14 2026 by rpki-client