
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9ceae71-7333-4d4f-b58e-4e1f954842a0.roa
File: f9ceae71-7333-4d4f-b58e-4e1f954842a0.roa (raw, json)
Hash identifier: dn5aGEMKG6qHWndM8pRebcNabKUXR+/MMQikb3KiA4k=
Subject key identifier: 91:0B:9A:F3:32:A5:16:E9:6C:69:28:2E:6D:16:EF:48:25:0D:04:6E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1231395659289FBE28C6597D2D971E2145F29E42
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9ceae71-7333-4d4f-b58e-4e1f954842a0.roa
Signing time: Mon 26 Oct 2026 02:31:18 +0000
ROA not before: Mon 26 Oct 2026 02:31:18 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 35.156.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:31:39:56:59:28:9f:be:28:c6:59:7d:2d:97:1e:21:45:f2:9e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 02:31:18 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=1fc9de4124b3c690f9c502a13e5ac31b9f5c293d3cfc1bc57e890c9910fe4b6d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:cd:32:b8:ef:97:86:6b:a9:d8:f2:fa:09:
19:19:f3:bd:28:70:c1:24:89:4a:83:ec:b0:bd:1b:
af:a6:02:4e:c3:3f:c5:46:48:2d:75:66:4d:1f:e7:
f6:6e:cc:73:23:34:20:75:a4:3c:e2:1a:77:80:da:
57:91:e2:63:4d:ff:b9:f6:60:ba:4c:62:75:45:0e:
ee:05:73:ca:46:17:56:b6:cd:c6:23:4d:bd:2f:5b:
be:c0:76:15:8b:df:51:cc:0b:20:c1:ec:40:e7:80:
e5:92:e5:20:a2:53:9e:6e:4a:60:74:11:bb:05:a9:
16:bc:9d:b3:a5:5e:e5:e5:54:58:70:f0:d6:8b:37:
31:96:e3:48:0c:17:fd:ef:00:22:49:5f:c8:e2:1a:
9d:d4:6e:e5:10:65:fc:62:f2:5d:de:8d:1c:36:c0:
c2:b2:6f:36:60:62:17:b8:e4:92:19:f2:c6:e9:00:
16:05:4a:4e:31:78:c7:2c:e5:ef:22:50:e4:16:8e:
fb:e7:67:1f:bd:2a:50:eb:9d:79:f5:af:ea:f0:fd:
7d:64:0a:32:c5:c7:63:5c:76:97:2a:af:9d:d3:84:
aa:e1:74:99:64:eb:ea:8e:49:ea:da:e0:29:4e:51:
81:46:52:cd:8d:ac:e9:72:f6:76:a3:84:0f:3f:4e:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0B:9A:F3:32:A5:16:E9:6C:69:28:2E:6D:16:EF:48:25:0D:04:6E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f9ceae71-7333-4d4f-b58e-4e1f954842a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.156.0.0/14
Signature Algorithm: sha256WithRSAEncryption
35:b1:56:a6:6e:33:53:ea:98:5c:27:63:d3:64:a1:a8:77:ef:
0e:f7:8e:04:88:58:aa:c9:46:3d:8b:f7:09:e2:b0:90:94:51:
ac:10:5a:b2:3b:51:42:9b:44:32:aa:9c:89:75:8d:c0:dc:c1:
21:a0:50:44:06:08:1c:56:42:a8:d6:32:b4:55:06:f3:e9:52:
75:74:44:ed:7d:6e:18:85:a6:9c:1e:ff:df:1c:73:be:e5:14:
e1:d3:00:e2:c6:1c:e7:bb:3d:40:48:4f:e3:ab:d0:31:67:98:
f0:3e:47:63:6e:e0:db:b5:22:73:08:94:af:01:c6:94:8c:49:
34:18:da:13:af:62:96:07:2b:29:1e:18:8d:1d:20:40:b4:2a:
36:cd:3d:6b:fc:af:c1:a3:a4:f7:84:cb:b7:6c:5b:ef:73:6e:
91:7c:02:b8:2b:b2:13:42:a9:a9:83:e2:cc:3b:24:63:56:3f:
37:17:ef:05:08:97:1f:51:5d:65:59:6c:81:0d:35:50:74:e4:
1d:92:ef:5f:74:ea:ec:75:5a:33:19:e9:20:27:ea:f2:b5:61:
41:49:2a:f1:a5:9e:3b:79:1a:66:69:48:da:d9:98:38:69:8b:
b8:1f:bd:da:92:d4:3e:a8:c5:e6:58:f0:e5:82:b0:0d:6c:45:
85:6d:37:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 18:28:35 2026 by rpki-client