
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f524024f-da24-4220-8e61-c3170663ac3b.roa
File: f524024f-da24-4220-8e61-c3170663ac3b.roa (raw, json)
Hash identifier: rWNyx48r/K9/rGtWb0kwz3rIeZGr9elexAAKCT0aV9A=
Subject key identifier: 91:78:C9:D0:56:26:21:DF:56:AD:4D:33:2B:12:3C:88:92:8A:0C:AA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 590342B9553385A654659330B9FF0AD6F8332A7B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f524024f-da24-4220-8e61-c3170663ac3b.roa
Signing time: Thu 22 Oct 2026 02:50:08 +0000
ROA not before: Thu 22 Oct 2026 02:50:08 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 54.237.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 07 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:03:42:b9:55:33:85:a6:54:65:93:30:b9:ff:0a:d6:f8:33:2a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 22 02:50:08 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=e25587c15773efc317e6b5e7050af40459d1d3c0e8c71966e92f5fbb182f3c91, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f1:d6:2e:00:d3:5e:27:89:df:a8:a6:c2:a6:
04:e2:63:b0:20:83:58:d5:6e:c6:7f:40:bd:e4:be:
01:15:b5:39:64:d5:71:cf:44:3e:b6:25:32:c0:04:
52:44:12:f7:49:91:38:8e:f9:1c:aa:0c:89:8b:46:
c0:00:2c:44:80:01:31:6a:4f:2c:60:92:dc:97:bb:
64:f0:e5:6f:54:69:56:ae:c1:40:7c:30:df:b4:2e:
70:9d:6c:b3:a2:d9:50:c0:8d:a7:a9:3e:36:ab:88:
ae:db:9c:63:9d:60:71:64:6f:27:a6:c6:4c:26:58:
b5:4a:95:78:94:b5:71:6c:1e:ca:e3:9a:e2:b9:79:
c6:ac:f1:49:92:e7:f5:1d:36:2e:82:9e:20:d5:1e:
78:e3:1a:a1:3d:f8:47:e9:8b:51:df:a2:b1:33:38:
16:ea:fb:b2:aa:fd:c1:84:ee:40:dc:ea:20:10:a6:
11:c5:c0:ec:66:d4:73:56:a8:bb:bd:03:42:43:5c:
6d:4c:34:23:7a:65:45:b4:dc:28:44:50:38:e9:43:
51:df:93:db:38:36:67:a0:7b:38:83:d7:ee:b8:18:
b2:9c:af:7d:27:2f:0d:4d:52:02:f0:1b:57:42:ac:
56:46:c4:cf:9e:eb:02:0a:e5:35:19:a3:f1:fd:4f:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:78:C9:D0:56:26:21:DF:56:AD:4D:33:2B:12:3C:88:92:8A:0C:AA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f524024f-da24-4220-8e61-c3170663ac3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.237.254.0/23
Signature Algorithm: sha256WithRSAEncryption
60:27:48:17:73:64:e3:7a:22:25:be:b5:7f:19:6c:f8:d1:ed:
ce:91:8d:8a:1b:72:94:55:3d:ff:b9:54:9f:80:9d:5b:26:a7:
e6:65:2e:f9:00:08:78:0b:48:d9:f4:24:72:13:cd:3a:08:af:
58:7e:20:73:75:d6:ec:13:57:93:e4:e2:eb:4b:a1:39:f8:54:
1f:a6:55:af:72:45:96:01:27:b5:d1:89:17:79:fd:49:72:ba:
fc:17:52:77:94:4f:e0:9a:37:1c:74:87:97:ea:ba:a2:e7:12:
33:50:2e:89:1b:9e:67:e4:90:60:ac:1e:47:72:b0:13:aa:a3:
ce:fb:a1:8f:d6:1d:77:d9:7d:0c:63:7f:57:b3:03:1a:8d:fe:
68:9b:65:fa:64:7a:26:3e:7c:d9:a6:2e:a7:f6:fd:43:ee:6c:
a9:e1:dd:db:69:ba:3c:4b:ae:8e:2c:0c:e6:d7:94:e2:dd:1f:
b2:f9:75:78:05:28:b6:36:63:cf:2c:ca:e4:8c:83:37:cf:96:
c5:80:0a:d7:a9:df:1a:ce:07:37:cc:43:95:be:e8:0f:8f:6b:
07:ea:77:7f:3d:cc:a8:f2:d3:d6:38:d5:3d:89:99:07:83:2c:
23:a0:36:2c:60:02:b8:b7:6e:45:d5:0d:f9:da:fe:a9:80:e6:
51:49:a3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:12:30 2026 by rpki-client