
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaa1ee33-9aeb-42cf-b892-fdbcb7bf6091.roa
File: eaa1ee33-9aeb-42cf-b892-fdbcb7bf6091.roa (raw, json)
Hash identifier: TZbXXDZOsLtMHAOphboocJo45ijsNdqkOU2u05MEgT0=
Subject key identifier: AC:B9:BC:3E:C9:A6:A1:81:1E:C9:6D:E2:AE:58:CF:8C:1D:AF:F7:BB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5D61D8670A59F298689FB267A80ECDD28454A814
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaa1ee33-9aeb-42cf-b892-fdbcb7bf6091.roa
Signing time: Tue 20 Oct 2026 00:50:59 +0000
ROA not before: Tue 20 Oct 2026 00:50:59 +0000
ROA not after: Mon 18 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 144.220.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:61:d8:67:0a:59:f2:98:68:9f:b2:67:a8:0e:cd:d2:84:54:a8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 20 00:50:59 2026 GMT
Not After : Jan 18 23:59:59 2027 GMT
Subject: serialNumber=f3b6319b359e1bc50f36164ecc37f3b955661408cd5eb2154d9eb21befbd2bad, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:3e:42:38:60:72:ac:9d:91:c1:14:61:b8:
ee:39:27:01:6a:86:ff:c8:59:00:b1:e3:00:f4:dd:
4b:4d:99:eb:64:c5:4b:60:8b:04:cd:63:c0:78:e3:
46:13:b0:22:00:c1:f2:d7:b6:77:af:43:9b:dc:6b:
2e:bb:d4:14:5b:08:d5:36:64:df:79:7a:26:e7:3a:
79:6b:7a:22:82:99:92:5f:e3:7c:12:4e:f1:b3:9c:
b2:68:89:0b:8e:e1:27:00:38:9c:e0:bc:3f:d0:86:
e4:07:c6:ae:2e:4b:3e:45:b4:c9:36:51:1d:06:4b:
51:68:88:5e:6c:c2:58:3b:6f:eb:cd:7f:87:91:7c:
41:e2:fc:16:1f:52:2b:60:75:36:7e:28:94:49:6f:
6d:91:1f:43:c1:bd:90:5d:59:55:83:4a:80:cd:a7:
9e:67:f3:cd:36:36:6e:34:01:a3:95:e3:c7:4e:d4:
ce:e9:82:dc:3d:b9:fa:a0:4c:83:b9:f0:d6:d8:ad:
a3:2d:56:d0:7b:a8:87:33:1e:4e:1c:f6:00:9a:bd:
42:22:f8:6c:69:9b:ed:75:e5:71:ce:9f:ec:dc:2b:
ec:05:fd:c6:57:65:83:d2:d1:21:b8:bd:80:20:79:
40:65:d1:cf:f5:99:88:23:a1:dc:ed:6b:4b:2d:9c:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B9:BC:3E:C9:A6:A1:81:1E:C9:6D:E2:AE:58:CF:8C:1D:AF:F7:BB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eaa1ee33-9aeb-42cf-b892-fdbcb7bf6091.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.220.48.0/24
Signature Algorithm: sha256WithRSAEncryption
34:b8:89:5a:ec:88:25:9e:e8:aa:a7:50:c8:86:24:dd:33:55:
af:69:bc:c9:17:91:ad:7a:c7:2a:f7:e3:15:5b:6c:2c:51:ff:
68:cb:7b:32:76:28:f7:be:13:0f:62:2b:f1:c5:b6:f9:1d:f0:
b0:ec:a2:92:d1:4a:48:92:a4:75:ed:0d:08:cd:8d:af:ca:96:
34:52:cd:9e:ba:ef:bf:46:1b:06:e8:b2:9b:0f:7c:cd:d2:e1:
b3:1b:25:47:34:32:4e:43:15:7e:7e:0b:5c:74:c1:fa:31:be:
52:e8:0f:24:05:9f:ef:bf:14:71:10:f4:6d:a7:3f:c9:b0:f6:
00:ef:af:61:1a:77:d7:1b:2f:9d:fc:55:e1:33:a8:a9:9d:04:
2f:00:fd:d1:37:41:92:93:f9:e0:70:fc:80:a9:ab:24:72:be:
05:76:a2:c3:b3:45:b6:ed:3b:f4:5e:4c:8b:ef:da:ea:ea:95:
b0:90:d1:f8:be:d6:95:61:ee:89:04:27:f1:1f:e8:55:39:e4:
15:5a:b6:1b:00:ba:f2:51:86:ca:9b:9c:1e:ef:a0:dd:c2:58:
4a:a6:50:86:2b:bf:b7:5e:5b:e2:55:96:93:ed:2b:36:2d:d1:
43:48:69:62:07:90:e8:d1:fd:ed:bf:87:8f:9a:8b:74:10:68:
8e:4c:11:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 18:25:39 2026 by rpki-client