
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e25e5664-a6e1-472e-964e-f1eb6182f3e5.roa
File: e25e5664-a6e1-472e-964e-f1eb6182f3e5.roa (raw, json)
Hash identifier: 8a/URBx1og1X+0EgZLO/gQ3avUgQBuIXiAVY3gsVCiY=
Subject key identifier: 6C:5C:1E:81:4E:CB:32:54:9A:17:A1:CF:CF:D9:4B:B5:C3:FA:0F:9A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3E9501DE4B25DC549F57154A58DC254B97A6262C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e25e5664-a6e1-472e-964e-f1eb6182f3e5.roa
Signing time: Thu 15 Oct 2026 02:06:17 +0000
ROA not before: Thu 15 Oct 2026 02:06:17 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 54.163.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:95:01:de:4b:25:dc:54:9f:57:15:4a:58:dc:25:4b:97:a6:26:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 15 02:06:17 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=04b028c72d7957141653e4570658d360e2279667d34d1d992598114a3b61ca08, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:72:ff:42:8b:02:70:08:cc:86:42:7b:03:c5:
99:0d:df:db:94:7d:b3:bb:40:44:72:d5:ae:e9:01:
4b:15:c1:28:00:06:4e:16:35:85:4f:6f:79:da:4a:
76:c7:a1:4a:aa:db:36:61:f7:29:f4:d5:1d:a7:1b:
f0:26:59:83:ab:e4:a9:5d:b8:7a:5d:c6:dc:08:a8:
8c:a8:d1:48:de:37:f7:85:f2:73:f6:bd:c6:0e:26:
34:45:91:f9:ac:a5:d5:e3:72:71:b2:53:89:2d:48:
39:d9:67:0d:96:d1:0b:af:b3:e3:de:d6:b4:92:ab:
e7:20:44:6c:e3:c6:b9:30:1c:64:b5:17:7b:c3:fa:
e9:48:1b:0a:c3:7b:88:f5:d5:42:1d:9f:c6:b7:e4:
85:99:69:ea:6b:b9:a1:ea:b4:82:a9:f3:89:38:29:
95:18:98:79:e4:22:f7:0d:a2:77:58:86:b7:ac:d5:
84:61:95:97:cd:62:ec:9d:38:2a:1d:83:7d:78:fc:
67:25:ce:33:c1:1e:56:3f:04:35:71:91:94:41:f6:
12:3e:3e:02:21:80:a6:7b:29:55:60:29:40:63:01:
f5:54:35:f7:92:52:2f:e6:b0:51:f7:15:8c:17:2e:
18:6f:84:72:fd:03:73:f2:a7:4b:95:d0:58:46:38:
dc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5C:1E:81:4E:CB:32:54:9A:17:A1:CF:CF:D9:4B:B5:C3:FA:0F:9A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e25e5664-a6e1-472e-964e-f1eb6182f3e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.163.0.0/18
Signature Algorithm: sha256WithRSAEncryption
92:a2:06:3d:99:25:18:85:23:ea:fa:1a:42:53:fc:4e:c1:6e:
e2:b8:cc:62:da:e9:f6:65:0f:fb:9f:ee:a8:1a:fb:ba:76:ef:
f5:e7:ee:29:34:e7:3e:13:9a:29:15:f6:b4:4a:88:15:d0:c3:
4a:cf:a4:be:13:45:3f:3d:1a:4a:c5:65:13:18:d2:c7:f7:97:
3d:8d:1c:12:00:73:e4:0b:97:4b:57:04:08:65:f6:14:e7:53:
fd:81:bb:d2:e7:84:60:0f:bc:8b:6e:a0:f3:20:50:df:be:fe:
c6:6d:07:b4:d7:18:b8:9a:19:8b:3b:3d:65:19:89:b4:a9:f9:
19:ab:36:03:a0:7a:e0:a4:99:f1:82:1c:e6:f0:af:c0:0d:01:
df:74:54:28:58:29:69:39:70:66:2e:7e:fc:42:48:6e:bd:3b:
eb:78:a0:85:97:f4:4e:28:48:3a:6b:a5:33:0d:be:a9:97:74:
15:dc:ee:e6:fd:af:d2:07:c0:c1:62:49:9b:a3:52:20:26:91:
c9:3c:51:13:80:58:5d:ce:a5:cf:d1:e1:44:f6:bf:51:b5:1b:
dc:df:da:c0:6a:b9:e6:65:eb:68:d8:6a:bf:1c:4d:c1:36:56:
68:a5:45:9e:e4:6d:33:d3:19:98:d3:e5:51:86:6c:ce:85:be:
9d:c2:00:1b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUPpUB3ksl3FSfVxVKWNwlS5emJiwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDIwNjE3WhcNMjcwMTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AwNGIwMjhjNzJkNzk1NzE0MTY1M2U0NTcwNjU4ZDM2MGUy
Mjc5NjY3ZDM0ZDFkOTkyNTk4MTE0YTNiNjFjYTA4MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2cv9CiwJwCMyGQnsDxZkN39uUfbO7QERy1a7pAUsVwSgA
Bk4WNYVPb3naSnbHoUqq2zZh9yn01R2nG/AmWYOr5KlduHpdxtwIqIyo0UjeN/eF
8nP2vcYOJjRFkfmspdXjcnGyU4ktSDnZZw2W0Quvs+Pe1rSSq+cgRGzjxrkwHGS1
F3vD+ulIGwrDe4j11UIdn8a35IWZaepruaHqtIKp84k4KZUYmHnkIvcNondYhres
1YRhlZfNYuydOCodg314/GclzjPBHlY/BDVxkZRB9hI+PgIhgKZ7KVVgKUBjAfVU
NfeSUi/msFH3FYwXLhhvhHL9A3Pyp0uV0FhGONx7AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbFwegU7LMlSaF6HPz9lLtcP6D5owHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2UyNWU1NjY0LWE2ZTEtNDcyZS05NjRlLWYxZWI2MTgyZjNlNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAY2owAwDQYJKoZIhvcNAQELBQADggEBAJKiBj2ZJRiFI+r6GkJT/E7BbuK4
zGLa6fZlD/uf7qga+7p27/Xn7ik05z4TmikV9rRKiBXQw0rPpL4TRT89GkrFZRMY
0sf3lz2NHBIAc+QLl0tXBAhl9hTnU/2Bu9LnhGAPvItuoPMgUN++/sZtB7TXGLia
GYs7PWUZibSp+RmrNgOgeuCkmfGCHObwr8ANAd90VChYKWk5cGYufvxCSG69O+t4
oIWX9E4oSDprpTMNvqmXdBXc7ub9r9IHwMFiSZujUiAmkck8UROAWF3Opc/R4UT2
v1G1G9zf2sBqueZl62jYar8cTcE2VmilRZ7kbTPTGZjT5VGGbM6Fvp3CABs=
-----END CERTIFICATE-----
Generated at Sun Nov 8 05:39:08 2026 by rpki-client