
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4544d04-b7c9-43e3-8980-9c3452b19bc2.roa
File: f4544d04-b7c9-43e3-8980-9c3452b19bc2.roa (raw, json)
Hash identifier: XBWvOY5TW+Ax/C8LrMl01+XnwsBwDKTKpxEr27WtN+4=
Subject key identifier: CB:67:67:E4:D5:09:34:C6:2D:5D:8C:21:AA:2E:B7:53:89:7D:74:75
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0A1E312A8C7DD47F14045C3561E5A1D351E48AE8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4544d04-b7c9-43e3-8980-9c3452b19bc2.roa
Signing time: Sun 11 Oct 2026 14:11:33 +0000
ROA not before: Sun 11 Oct 2026 14:11:33 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.230.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:1e:31:2a:8c:7d:d4:7f:14:04:5c:35:61:e5:a1:d3:51:e4:8a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 11 14:11:33 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=34b7865e5d950ce14374b70c7c14bedc952f18739205d7beffbbf95553d24b9a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a4:33:1f:e5:81:0b:d0:02:7d:84:ab:7e:9e:
31:95:b9:a2:d6:69:31:89:27:00:6c:6c:1c:3d:74:
dd:d8:e0:e4:f2:76:6e:01:a3:d1:d7:d0:5a:3c:66:
5e:c9:6b:b0:6a:29:6d:91:1e:30:f8:d5:a0:9e:ea:
45:54:a7:35:ac:98:9c:4e:eb:18:28:42:9f:9b:16:
52:8d:0d:da:6b:6f:f2:63:b8:6b:c4:bd:93:c0:8d:
83:8b:fe:ec:41:45:6a:42:c4:58:09:55:fe:94:64:
37:08:8e:84:e4:04:fe:c6:a7:8b:5f:f7:ef:66:bd:
a3:5a:8c:ea:2e:7e:dd:0e:5e:aa:03:43:1d:a5:cd:
2a:38:a1:80:17:2e:73:6c:0a:34:7f:05:8e:9b:3e:
83:21:3f:62:a6:66:a3:35:40:33:f1:3b:fa:80:92:
2e:5a:07:fd:54:02:eb:22:e1:75:ac:0e:54:61:57:
57:53:ed:ab:b0:fb:c5:51:19:89:a4:7a:85:28:3d:
3f:bd:b5:31:1d:ec:5c:af:73:2e:1c:a0:f3:86:07:
3c:78:f4:5a:0f:4d:20:76:88:00:e4:6a:a4:5f:a6:
91:9a:1f:ca:de:cf:ee:f5:85:7c:f9:26:59:70:ec:
1f:d2:46:5a:fd:26:fc:d4:6f:ee:4b:8e:12:b6:99:
02:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:67:67:E4:D5:09:34:C6:2D:5D:8C:21:AA:2E:B7:53:89:7D:74:75
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4544d04-b7c9-43e3-8980-9c3452b19bc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.230.196.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:8f:d4:16:cc:2e:86:4d:0e:7a:99:c6:ab:df:18:78:96:c4:
c1:60:ee:67:46:2c:e2:81:1f:a7:ed:f2:31:4a:a8:dc:da:6d:
4d:44:7d:a0:d6:4d:e9:4b:46:fc:2c:ae:ff:70:86:2b:df:c5:
12:c5:94:ee:a3:f4:ef:5b:35:68:c3:69:63:2f:76:8a:f6:21:
c2:ff:0c:a8:87:1b:2b:30:6c:db:9c:94:ac:2b:d1:83:24:6b:
ca:ad:bc:53:01:64:28:3d:3a:fb:c2:24:6c:79:59:13:9a:73:
b9:23:bd:bc:7e:d5:ff:a8:9a:99:e8:d1:7c:e3:79:2a:e2:2d:
a5:b1:64:50:f4:ad:40:f7:c1:87:0b:da:54:3f:07:f4:c9:e2:
26:8f:f4:07:c2:b8:a3:57:9f:20:06:58:90:e6:4f:35:ee:68:
d1:4f:8d:9e:50:68:58:d1:06:c4:4b:9c:eb:18:02:30:19:af:
02:98:c7:15:11:8e:02:e4:bd:e8:e5:93:ca:56:6c:92:8a:e3:
ed:0d:c5:84:af:6b:d4:c8:c1:1f:3a:e3:bd:c3:31:b9:fa:20:
6a:33:7d:e2:77:d8:ab:5b:d5:b8:91:06:97:56:80:a5:d4:31:
e3:fe:c5:35:4a:10:f2:66:61:16:8d:9b:27:19:56:a0:fb:87:
82:c5:a5:27
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUCh4xKox91H8UBFw1YeWh01HkiugwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDExMTQxMTMzWhcNMjcwMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0AzNGI3ODY1ZTVkOTUwY2UxNDM3NGI3MGM3YzE0YmVkYzk1
MmYxODczOTIwNWQ3YmVmZmJiZjk1NTUzZDI0YjlhMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNpDMf5YEL0AJ9hKt+njGVuaLWaTGJJwBsbBw9dN3Y4OTy
dm4Bo9HX0Fo8Zl7Ja7BqKW2RHjD41aCe6kVUpzWsmJxO6xgoQp+bFlKNDdprb/Jj
uGvEvZPAjYOL/uxBRWpCxFgJVf6UZDcIjoTkBP7Gp4tf9+9mvaNajOouft0OXqoD
Qx2lzSo4oYAXLnNsCjR/BY6bPoMhP2KmZqM1QDPxO/qAki5aB/1UAusi4XWsDlRh
V1dT7auw+8VRGYmkeoUoPT+9tTEd7Fyvcy4coPOGBzx49FoPTSB2iADkaqRfppGa
H8rez+71hXz5Jllw7B/SRlr9JvzUb+5LjhK2mQJVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUy2dn5NUJNMYtXYwhqi63U4l9dHUwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2Y0NTQ0ZDA0LWI3YzktNDNlMy04OTgwLTljMzQ1MmIxOWJjMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA25sQwDQYJKoZIhvcNAQELBQADggEBAKyP1BbMLoZNDnqZxqvfGHiWxMFg
7mdGLOKBH6ft8jFKqNzabU1EfaDWTelLRvwsrv9whivfxRLFlO6j9O9bNWjDaWMv
dor2IcL/DKiHGyswbNuclKwr0YMka8qtvFMBZCg9OvvCJGx5WROac7kjvbx+1f+o
mpno0XzjeSriLaWxZFD0rUD3wYcL2lQ/B/TJ4iaP9AfCuKNXnyAGWJDmTzXuaNFP
jZ5QaFjRBsRLnOsYAjAZrwKYxxURjgLkvejlk8pWbJKK4+0NxYSva9TIwR86473D
Mbn6IGozfeJ32Ktb1biRBpdWgKXUMeP+xTVKEPJmYRaNmycZVqD7h4LFpSc=
-----END CERTIFICATE-----
Generated at Sun Nov 8 00:17:02 2026 by rpki-client