
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e78e8410-7a42-4d42-8f28-a0c149942ae2.roa
File: e78e8410-7a42-4d42-8f28-a0c149942ae2.roa (raw, json)
Hash identifier: RDO1IpPz6CYwRqRGnB37FdsEbIIN3LndUvHm1Z/ynos=
Subject key identifier: 5F:16:BF:06:94:FD:A2:6A:0F:FF:9C:AA:DD:8E:F7:C5:5D:4C:AB:72
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 09E67B7702381B25BA4C656586220B21A3242490
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e78e8410-7a42-4d42-8f28-a0c149942ae2.roa
Signing time: Fri 20 Feb 2026 00:50:07 +0000
ROA not before: Fri 20 Feb 2026 00:50:07 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.158.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e6:7b:77:02:38:1b:25:ba:4c:65:65:86:22:0b:21:a3:24:24:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 20 00:50:07 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=0ee7aa6ddacb68290227e485d7b6ae6a0a3f7ababa0ccba19fddab434eba69a5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cb:cc:85:90:05:2c:7e:f7:2c:a6:03:2c:58:
38:43:75:dd:5a:d0:c9:fe:c8:79:27:0e:ce:b7:14:
a7:65:dc:00:4c:ae:9a:9d:3e:56:fa:50:2c:ea:01:
e4:f7:97:27:c7:1f:8b:2c:57:e0:5e:c5:df:aa:36:
a3:84:ce:16:31:c8:97:c4:03:53:10:2f:eb:02:75:
e7:c4:1e:17:c4:87:18:c4:40:20:57:9f:44:ec:0b:
9a:82:51:c9:5e:6f:9f:90:14:24:89:87:ce:c8:7f:
3b:69:c1:24:96:87:c1:33:14:51:0b:c7:a1:0b:02:
15:da:63:89:6b:e2:43:d6:60:c3:ba:be:1d:d5:61:
2e:a4:2f:aa:00:08:9a:8a:63:c7:6e:d6:6a:c8:1a:
1c:01:4e:ca:14:d0:a6:1a:b6:fc:4d:8c:7a:47:82:
42:fd:1e:73:50:38:e3:67:db:44:eb:3b:d9:8d:4d:
01:7f:bd:a6:28:34:a4:36:0a:2f:d4:62:2f:cc:e1:
6d:99:d0:3b:25:05:fb:09:04:e3:3c:6c:bb:02:64:
d4:13:41:8d:14:20:96:6f:e9:8c:c5:b1:23:9c:8c:
bd:0f:72:fd:a4:1d:9c:47:bd:26:bd:c9:53:63:ff:
56:0b:66:6c:92:17:78:2b:b7:7e:56:53:4a:83:af:
77:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:16:BF:06:94:FD:A2:6A:0F:FF:9C:AA:DD:8E:F7:C5:5D:4C:AB:72
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e78e8410-7a42-4d42-8f28-a0c149942ae2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.158.128.0/18
Signature Algorithm: sha256WithRSAEncryption
83:13:03:a2:a4:b2:4a:7d:31:b2:35:12:e3:4e:6b:57:59:3a:
67:46:55:b7:2c:1e:fb:cb:f7:ba:ac:46:42:5a:26:be:1d:de:
24:e0:2a:71:c6:16:34:28:db:1e:21:01:c7:41:84:08:8c:ac:
f6:ff:73:9b:a7:95:c5:86:72:c0:89:b0:31:92:0a:ad:b2:c2:
11:49:1f:0c:c7:5b:c0:16:39:2e:8b:2e:4b:7d:f4:28:59:4d:
4e:40:a8:fc:92:54:02:67:7e:f5:64:0e:2e:2c:d3:f6:9e:34:
cc:f7:a4:df:e1:98:e7:33:98:85:99:3e:40:e9:bb:ee:fa:5c:
05:ef:c0:ef:92:6d:f5:cd:15:0c:0e:2f:42:7a:b0:96:d3:c7:
8a:5d:09:6c:27:8e:22:4f:51:04:87:73:cf:4d:92:da:ef:49:
90:4f:cf:64:7c:81:a1:26:56:94:6f:02:d0:a9:14:d0:59:aa:
37:24:8d:b4:c4:8a:4a:ac:da:be:7b:e4:ea:45:08:79:4b:af:
1c:c3:d7:9a:d6:56:30:39:fa:c6:4b:e0:e6:79:e4:15:ea:2c:
9f:03:b1:7d:24:d6:30:14:e6:7c:7b:7a:50:21:bb:e4:0b:43:
23:5d:8c:fa:b4:eb:76:cb:16:e6:0c:04:19:6b:a1:c6:86:74:
00:47:85:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:51:08 2026 by rpki-client