
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef8732ac-a3b2-4047-aa15-05ad7d37528b.roa
File: ef8732ac-a3b2-4047-aa15-05ad7d37528b.roa (raw, json)
Hash identifier: RFmEPheCicB7BIG7au1PlxFwirZL+z05D5iGACWzUkc=
Subject key identifier: 3D:69:88:90:04:BE:71:AC:41:4B:A2:F9:4F:44:A2:3E:62:B7:81:C6
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 576F139218ED86AC549E6FB114CA3435FE980140
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef8732ac-a3b2-4047-aa15-05ad7d37528b.roa
Signing time: Thu 22 Oct 2026 03:31:10 +0000
ROA not before: Thu 22 Oct 2026 03:31:10 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.239.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6f:13:92:18:ed:86:ac:54:9e:6f:b1:14:ca:34:35:fe:98:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 22 03:31:10 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=717f55de561c7c5cd9ac7ef77ef24d83d0183c1947e9a19fa41e92120de25521, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:fd:fd:7f:fe:f4:a5:17:6b:7a:22:d3:3b:
3e:e3:49:87:ed:22:67:20:37:91:ba:bf:33:fa:d1:
17:67:a5:75:01:d9:ad:80:67:77:e4:24:b1:06:94:
c0:70:4a:00:0a:a8:af:cc:2a:9e:e6:cc:0e:4a:fe:
80:fe:df:d7:36:00:90:94:4e:80:5e:95:d5:38:f3:
cf:34:75:5f:42:01:c4:63:a1:c5:ed:34:e5:6a:92:
4d:13:bd:80:51:d8:7f:ae:ec:81:78:48:c6:1a:41:
be:06:b5:46:fe:5c:8f:08:d4:60:cd:e3:70:af:56:
7a:3b:ad:99:10:7c:17:3e:44:7e:64:48:93:c9:cd:
8f:61:73:81:ea:34:4c:22:b2:5f:ca:f5:6a:67:37:
fe:cb:d6:a6:29:2a:d6:0e:ae:fb:7f:ac:01:9c:07:
21:ce:fd:2a:c2:74:ab:f3:fb:d1:2e:e5:0f:52:b1:
db:bb:46:f0:07:c4:85:42:5a:a3:09:13:f4:c3:04:
fa:6e:9d:49:78:ac:ae:e0:4c:c6:6f:10:83:da:36:
0f:17:f1:39:54:50:96:4f:88:b1:a1:9f:96:02:16:
f7:a3:15:53:f4:df:71:b6:05:04:37:7e:2f:07:ea:
9c:d1:3b:a2:59:d7:7f:8d:63:98:cd:1b:32:cd:ec:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:69:88:90:04:BE:71:AC:41:4B:A2:F9:4F:44:A2:3E:62:B7:81:C6
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef8732ac-a3b2-4047-aa15-05ad7d37528b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.239.97.0/24
Signature Algorithm: sha256WithRSAEncryption
62:8b:48:25:d6:76:f1:19:48:ba:87:1b:fb:da:a8:5c:4e:4f:
a4:d3:58:58:98:a8:26:b9:f7:9a:e9:35:15:89:b6:42:4e:22:
45:12:53:7d:e7:e6:64:81:77:c3:30:c7:2b:27:c7:63:33:10:
04:6d:91:21:11:17:0d:5f:b3:18:75:b2:81:f5:ed:e9:2e:62:
78:72:f6:0d:1d:32:30:fc:6c:a7:91:76:eb:f6:4e:fd:04:97:
a6:54:c9:d5:47:dd:07:b1:7f:66:20:4a:c2:c8:23:1a:6e:5b:
42:6e:ce:5f:1b:ff:86:43:a4:7f:e8:4b:84:d7:58:83:5b:fa:
f7:f5:71:4b:3f:91:a3:9b:ff:fb:be:af:2e:78:20:d8:70:2f:
de:26:1e:ab:b8:ed:a4:c4:12:c7:73:e9:84:ec:26:90:cd:50:
5e:aa:00:38:14:89:13:98:47:8d:04:a8:d1:33:f8:b3:91:8c:
0e:15:a2:38:7d:28:bf:78:dc:92:b4:3c:ad:8d:8d:e5:04:c4:
35:69:92:1d:0c:8d:f2:5f:db:b1:2d:8f:73:9b:89:e7:27:96:
ce:7a:fb:21:23:fa:cb:a1:18:56:42:7c:80:7c:3c:8c:42:20:
ba:5d:8b:03:4e:d6:28:e1:af:d1:c5:bc:03:67:dc:ee:72:91:
25:1a:5d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 06:05:19 2026 by rpki-client