
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9c68054-f543-4dea-b9e2-438f43aecc49.roa
File: e9c68054-f543-4dea-b9e2-438f43aecc49.roa (raw, json)
Hash identifier: V92byaqOnNs2sVghpwyXyKs6qRFcd092XQDIDAfMjxI=
Subject key identifier: 56:3F:26:FC:24:9A:0B:E9:C8:36:F4:B8:56:AE:9D:C1:F1:34:0E:11
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 68A8E2D71D377CD4D6FA67677BE706A232D5A312
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9c68054-f543-4dea-b9e2-438f43aecc49.roa
Signing time: Thu 22 Oct 2026 02:40:49 +0000
ROA not before: Thu 22 Oct 2026 02:40:49 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.252.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:a8:e2:d7:1d:37:7c:d4:d6:fa:67:67:7b:e7:06:a2:32:d5:a3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 22 02:40:49 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=0d779bb59297c705e4b75ee11d67920906253cdf388a55a4bfff0ac4dd729ac2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:54:c4:95:2b:d3:ce:64:f0:d4:49:65:a7:
25:c3:8f:c0:19:b0:87:4c:87:85:4b:d5:12:89:fc:
c8:07:2a:90:7a:b6:95:cc:81:fa:da:f6:31:9d:39:
2d:6d:99:b2:f7:d7:e1:1a:59:54:74:61:22:a1:71:
2e:aa:aa:8e:73:e8:3b:93:71:66:6c:16:9f:ac:2d:
4b:71:31:4d:cc:77:ff:3c:3c:d0:d5:ae:56:43:31:
ae:e3:18:38:40:ab:d0:d7:f8:ee:be:c4:d9:4f:82:
4d:84:f3:46:d1:fb:3b:b6:1d:d5:58:7d:15:67:6c:
f2:2b:d2:ea:c9:69:2a:82:49:39:d9:27:71:ff:1d:
63:2e:8e:aa:fc:ee:ba:46:17:89:2e:08:1b:b3:20:
af:d1:58:cb:7c:a7:bb:98:a7:eb:eb:54:e7:ba:a1:
6d:27:30:50:79:38:6b:05:ea:c4:76:3c:71:d7:d2:
b8:aa:2f:ab:f6:df:ec:b8:13:7a:db:f0:31:00:0f:
87:bc:9a:9d:b2:b8:6e:82:24:c7:a5:bf:9f:a8:33:
ab:71:db:f4:77:66:94:b2:f8:3b:62:4d:4f:b3:b8:
60:1d:0a:33:74:4c:21:61:a2:e1:ff:44:0e:bd:6e:
69:9d:f8:f6:29:ac:36:a8:e4:8d:21:49:e4:ca:ac:
7d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3F:26:FC:24:9A:0B:E9:C8:36:F4:B8:56:AE:9D:C1:F1:34:0E:11
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9c68054-f543-4dea-b9e2-438f43aecc49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.252.32.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:a1:36:46:19:1b:85:6f:68:8c:44:22:4a:63:d1:17:75:d0:
e2:04:0f:2e:6f:00:11:a5:05:d4:f2:c5:1d:c2:86:ef:6a:70:
20:15:08:29:a1:83:45:84:76:b6:2d:55:33:92:10:58:ce:16:
0d:92:47:55:61:3d:7f:01:bf:83:74:49:53:82:c6:a0:5f:3c:
33:99:8e:ce:c6:41:fd:ac:af:66:54:4e:03:f3:7e:27:e2:cf:
91:99:0c:32:70:43:07:76:ad:74:7d:36:1b:5f:14:74:59:a1:
0a:47:bc:e3:61:40:19:83:c2:af:72:d9:8e:c6:03:b1:51:fd:
48:72:5d:85:05:26:49:e4:05:7b:32:6f:19:ad:eb:e4:eb:81:
b3:1d:7c:8f:ee:02:58:ff:08:79:80:fc:d2:51:74:bf:a4:2c:
ad:08:25:d9:52:87:1e:c5:9a:40:19:4d:46:7e:7b:c1:31:88:
2a:fd:cc:8d:20:b8:c1:b8:19:61:48:0b:fa:34:b1:65:05:29:
16:05:e0:3e:5f:d3:9e:5a:a7:b3:1e:4c:2d:fa:a7:73:24:0c:
48:db:45:f4:ee:97:25:27:e3:0e:f8:3e:2d:b9:30:1f:99:08:
8b:9f:de:fd:8a:ca:df:d3:d6:4b:9d:7e:8f:4a:23:a0:5f:2c:
58:a4:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 04:55:46 2026 by rpki-client