
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f35f654e-0ee0-473b-84c1-00d7715a6771.roa
File: f35f654e-0ee0-473b-84c1-00d7715a6771.roa (raw, json)
Hash identifier: mU2oj0urSIOpnG5+r4Ps3Yh4SFDFMx1QlES7u2nKCwY=
Subject key identifier: 26:19:46:54:C0:2F:F7:FF:97:A4:0A:44:D0:48:86:B2:97:F8:96:19
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0256871A16698B3D3CDA65BDD5B5DBA6B1026DCE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f35f654e-0ee0-473b-84c1-00d7715a6771.roa
Signing time: Sat 28 Feb 2026 02:50:39 +0000
ROA not before: Sat 28 Feb 2026 02:50:39 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 52.93.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:56:87:1a:16:69:8b:3d:3c:da:65:bd:d5:b5:db:a6:b1:02:6d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 02:50:39 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=34de6d29cd2c462f60a3b60d149523de8aae0125edeb9e039564cdf597fedee8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3c:6c:76:e4:b0:9a:4f:97:1e:3f:6c:c3:be:
f4:9e:39:52:b0:df:e2:6f:c5:0f:47:da:df:14:2f:
0b:77:cd:22:d6:b0:c6:ef:5e:3b:70:cd:d7:13:d2:
c8:63:67:c8:57:cf:97:fb:db:1e:f9:4f:f4:01:2c:
44:18:19:f2:81:a1:4f:88:d6:43:5e:b1:6e:3b:11:
ae:13:f5:a0:cd:9b:25:e6:6d:bb:40:c6:8b:89:1e:
9f:1b:52:0c:40:8d:28:51:c3:c8:5d:6e:86:ce:f0:
de:eb:69:00:a0:cc:ff:3c:ba:1b:70:d7:95:f6:7a:
fe:40:cb:2d:e3:95:ca:de:f8:c2:41:10:29:ac:0b:
ae:2f:ef:10:55:2b:fa:ce:91:30:92:51:b3:67:86:
c2:de:c7:99:d2:ea:c7:eb:8b:95:ce:74:4f:47:3c:
a6:7c:f6:e1:75:53:9a:05:ad:89:45:39:ad:21:56:
74:8f:6c:ce:13:dd:fe:ed:14:c6:5a:e3:c3:22:68:
ac:c8:64:e6:b9:0f:d0:56:fe:01:f1:14:94:1d:6c:
08:2e:5b:70:35:da:bc:3a:4c:66:53:e0:fe:02:8d:
7f:09:6e:29:db:e3:99:3b:06:2f:fb:0f:39:e3:69:
d7:5c:81:7a:a0:4f:7a:92:e7:5e:eb:5a:ea:1a:25:
30:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:19:46:54:C0:2F:F7:FF:97:A4:0A:44:D0:48:86:B2:97:F8:96:19
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f35f654e-0ee0-473b-84c1-00d7715a6771.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.93.110.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:65:35:f1:ed:8d:08:ad:58:aa:b1:3d:0d:e8:02:39:df:2c:
8c:39:2b:27:ee:dd:04:4c:1e:fe:02:11:29:b9:8f:97:0f:78:
05:ad:37:34:08:d9:68:ed:3f:4c:01:3d:4d:3a:7e:4a:1d:07:
c9:1e:f7:be:28:13:35:f1:bd:0f:ed:e4:bb:a6:91:74:ff:b3:
ba:86:78:0f:6b:70:81:df:c3:32:fb:05:e3:7c:de:73:db:03:
a5:3f:00:cd:3b:13:bc:ff:ec:75:52:9e:73:48:25:b4:67:c6:
fc:58:5e:96:c6:5d:f6:64:c5:2d:b5:08:1c:00:6b:04:a9:ba:
eb:92:e5:d3:d6:4e:11:16:90:c8:b8:05:8b:3e:9b:6b:61:62:
69:d7:2c:79:db:37:cb:9f:e4:0a:f5:28:49:72:e8:4a:5e:3c:
04:d5:7f:bd:a1:1b:15:b7:24:4b:70:77:d8:ea:16:3c:d1:39:
0a:d4:85:13:bd:e5:4e:3f:5b:a8:26:4d:2b:87:ff:0f:58:68:
74:f2:d2:80:10:04:5a:47:01:b1:32:81:34:de:e2:cf:64:97:
2b:a7:e7:fe:d6:7b:a0:d8:45:cf:ab:5b:48:db:4c:ed:e8:c6:
c2:8b:17:a9:d0:0c:45:97:74:d7:cf:75:d4:f5:4b:52:63:c4:
90:3e:77:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:29:46 2026 by rpki-client