
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9a5fdd9-16e0-4857-ac0d-d63c9a98eac4.roa
File: f9a5fdd9-16e0-4857-ac0d-d63c9a98eac4.roa (raw, json)
Hash identifier: ndl5QN/Sxf17b0lSfRFxYnaAgKvlf9+tNX0BhvcNcrQ=
Subject key identifier: CA:14:15:EC:EE:9F:74:40:FE:20:CA:6F:71:F5:C0:61:2E:14:71:1E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0ED274B221DF0B72C7AFB063BED0517398297365
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9a5fdd9-16e0-4857-ac0d-d63c9a98eac4.roa
Signing time: Sun 11 Oct 2026 14:07:11 +0000
ROA not before: Sun 11 Oct 2026 14:07:11 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 15.197.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d2:74:b2:21:df:0b:72:c7:af:b0:63:be:d0:51:73:98:29:73:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 11 14:07:11 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=339a16fb38904c7e893eb64aabf162b596660ae754c3184a12f1b8268c844765, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:03:87:64:84:b7:1a:d2:90:41:6d:37:c5:af:
ed:38:e6:18:85:86:2b:e8:11:07:1f:10:17:d2:f5:
33:64:2e:b4:8c:7f:e8:d2:ad:76:ba:5a:16:4d:2e:
95:41:0f:c3:d7:3b:0e:90:f1:ea:e0:71:ab:33:69:
f3:4c:9e:88:30:59:b1:c9:17:4b:db:e7:41:c3:20:
12:4d:6b:c7:e7:77:4d:07:38:dc:9f:e7:5c:db:b5:
50:9e:1b:db:4f:ab:69:fa:e1:41:e1:ad:18:ac:f3:
af:be:79:c7:da:9a:b7:d2:67:db:6f:86:ad:3e:b7:
99:5d:cd:e4:e2:56:13:d7:f5:95:92:9e:49:20:a4:
89:cc:cc:7a:d4:1b:04:de:46:58:33:ef:5b:bb:57:
34:96:2d:ef:10:86:17:ef:7a:d9:66:8f:56:8a:5a:
2f:fe:7e:fd:ed:cf:c1:1e:66:29:4a:7e:cc:24:aa:
eb:2e:3f:6d:8b:d9:c8:e3:ac:37:51:62:89:75:ce:
6c:a6:57:13:ab:12:4b:af:71:bc:c7:28:6b:85:ec:
7b:36:7d:aa:44:3f:31:13:73:b7:fa:3c:54:12:15:
0b:2d:b4:81:fd:fd:39:a1:9f:27:70:45:6b:25:c2:
be:5e:fd:fb:57:76:df:b4:d3:64:73:7d:c1:df:56:
45:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:14:15:EC:EE:9F:74:40:FE:20:CA:6F:71:F5:C0:61:2E:14:71:1E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9a5fdd9-16e0-4857-ac0d-d63c9a98eac4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.197.28.0/23
Signature Algorithm: sha256WithRSAEncryption
84:b7:10:9a:73:19:e7:99:61:f8:97:11:65:98:4d:72:1f:6b:
c8:52:b4:e1:db:4e:3d:81:a9:10:93:50:9e:5e:90:3e:e8:cc:
1a:12:be:f2:b2:1b:17:1e:b7:99:3e:85:a4:5c:da:17:15:ed:
cb:d3:a7:a6:30:14:0e:79:9d:a9:64:94:40:5c:2d:a4:2c:fb:
d3:7b:f7:7f:bc:be:92:56:66:dc:1d:3d:4d:82:6f:7e:20:35:
26:d4:b3:dd:f4:60:e5:53:2f:22:7a:16:8d:bd:bf:85:37:69:
b3:73:b4:bc:e7:03:0d:99:8d:4d:91:c6:1f:59:fd:ca:80:0b:
66:ef:bb:e7:1e:58:1c:c4:38:9b:96:21:3f:55:81:aa:b1:84:
59:77:6f:30:0b:ba:26:c5:fb:6e:5e:d4:fd:d9:60:4c:52:9e:
f8:6a:4a:1b:37:d2:93:c4:6d:b6:3b:0a:d9:bc:60:d1:05:38:
92:31:9d:6f:c4:fc:53:94:8c:1d:09:a3:01:53:2f:c3:ba:6a:
99:3b:9b:13:1b:d8:29:85:00:5f:6f:2c:4c:0f:64:15:f5:45:
1f:53:6e:b4:ea:ff:17:28:18:36:50:10:4e:07:e5:0d:a1:35:
47:c7:40:fe:9d:2d:ad:82:90:f2:10:64:c2:44:de:48:e2:08:
b5:fd:d2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 01:06:14 2026 by rpki-client