
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e59c8eed-5009-4b37-96cb-f69f7f0610a2.roa
File: e59c8eed-5009-4b37-96cb-f69f7f0610a2.roa (raw, json)
Hash identifier: BjU4fXslNJ/ggbkwRGU1CTW7QSN2RwLj8iOsaQ1Kvls=
Subject key identifier: B1:C7:28:51:DD:33:B7:D0:F8:28:28:F6:3E:79:89:2E:AA:A0:1B:BA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 021C46836522A63219F67473EE1A0657E721868A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e59c8eed-5009-4b37-96cb-f69f7f0610a2.roa
Signing time: Sun 11 Oct 2026 14:31:17 +0000
ROA not before: Sun 11 Oct 2026 14:31:17 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 15.197.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1c:46:83:65:22:a6:32:19:f6:74:73:ee:1a:06:57:e7:21:86:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 11 14:31:17 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=337f50aeb950306a836799ef2733375ef96ed2fac735846cfca73cb8e3492a9f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:ed:d4:96:42:b5:0d:3a:07:71:2d:52:6d:
63:6e:4a:5e:6b:d1:1f:91:06:f0:36:74:6a:c5:06:
8c:53:26:89:d7:ca:99:9f:52:27:9d:db:e1:a6:a5:
59:0e:73:fa:fe:fd:92:38:de:f5:af:93:a8:37:c6:
01:9b:ab:a6:c4:09:03:17:04:28:04:b1:8e:24:27:
bc:99:75:9c:bc:d4:3b:33:3a:1f:60:24:dc:34:5e:
6f:55:e9:d2:75:56:33:20:c5:53:06:6a:36:37:fe:
45:ea:97:86:fe:8c:e6:67:f5:0e:86:96:fd:41:ee:
b2:04:33:03:16:7b:45:2f:a3:e2:48:26:8b:25:cd:
0a:c1:96:48:f3:76:45:38:6f:2e:18:32:95:5e:ea:
8d:7d:4a:d7:62:9f:0e:7b:c0:3e:b9:0d:28:4b:8f:
da:c3:6d:e9:2f:d2:a8:23:e8:b5:91:5e:77:93:5b:
91:03:6e:33:a2:f6:ca:eb:35:67:c7:88:74:32:3c:
8c:e4:3f:21:4d:ca:b9:2f:96:7b:1a:e3:4e:b6:22:
85:37:be:65:95:46:71:7b:63:c7:36:68:4e:0d:7f:
34:e0:e7:68:3c:f8:30:01:49:20:5f:bb:a4:b8:50:
07:7f:42:d0:74:3e:ff:bd:76:7c:b4:13:dd:da:51:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C7:28:51:DD:33:B7:D0:F8:28:28:F6:3E:79:89:2E:AA:A0:1B:BA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e59c8eed-5009-4b37-96cb-f69f7f0610a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.197.18.0/23
Signature Algorithm: sha256WithRSAEncryption
05:d2:e3:44:16:04:92:d8:ac:2f:f4:0b:7e:44:2c:e6:6a:f0:
28:d5:68:05:59:bc:45:a0:14:87:18:fa:65:23:94:20:7f:1a:
24:3c:aa:af:7c:6e:c6:d6:be:99:a6:2c:83:fc:4b:99:11:75:
4f:91:50:75:de:89:c3:fe:95:02:ef:c7:aa:a3:80:ef:f8:4e:
de:d0:35:97:1f:22:b6:60:20:61:4d:61:1e:e2:e2:a1:13:db:
58:57:b4:eb:c6:3c:9e:0d:68:4f:2c:f2:a4:8e:18:74:6c:21:
89:e2:56:ae:2a:e2:e2:f4:64:b1:17:d2:7d:19:9f:cb:23:2e:
0c:96:4d:74:e3:6f:f7:8a:90:da:94:1f:3b:f5:fc:d2:f0:b2:
75:ac:3d:0b:53:94:f8:85:04:9f:67:6c:9f:fa:b2:fa:60:bc:
e6:19:81:33:04:40:ea:76:6c:a3:b1:0c:70:ac:84:62:8e:a3:
70:c5:2a:a3:47:22:75:be:02:ba:ec:03:3d:eb:a2:fb:dc:ed:
5e:de:35:49:36:38:4f:15:cd:ad:c4:7f:02:ca:1c:01:3b:cb:
96:e8:18:3a:d0:1d:61:13:8c:50:b1:b5:16:6a:1f:a1:06:48:
00:6e:0f:4d:da:d9:ab:25:bd:8f:77:d6:d8:cf:0f:61:70:58:
d6:50:36:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 05:43:36 2026 by rpki-client