
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fdecee65-c952-4f49-9973-5248d6a502de.roa
File: fdecee65-c952-4f49-9973-5248d6a502de.roa (raw, json)
Hash identifier: ksyRUaltEsXr3UGVajP+z1ZzAZ6CjTU5/g0w6gCyAlc=
Subject key identifier: D0:BA:1C:6E:86:71:E2:76:7F:6C:6F:78:9A:9D:C9:DC:F3:94:D3:1F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1CE49A5038033F0217F76923D7664EDC5DA8C8E9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fdecee65-c952-4f49-9973-5248d6a502de.roa
Signing time: Mon 26 Oct 2026 02:10:29 +0000
ROA not before: Mon 26 Oct 2026 02:10:29 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 15.141.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:e4:9a:50:38:03:3f:02:17:f7:69:23:d7:66:4e:dc:5d:a8:c8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 02:10:29 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=7c4fef8794bed90e5b8017a15bbea33f58a6585392bfdc13bdac5f656e98c8dd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:89:48:fe:7f:0c:60:a2:a2:a8:e5:77:0b:97:
ff:b4:ad:a3:7d:b3:c9:c4:7a:cd:91:ad:9b:40:87:
ec:2f:d0:66:e8:3b:2f:d6:22:0b:31:37:d2:dc:36:
11:4e:d2:fd:dd:e9:fd:43:85:a4:67:e7:e1:53:c7:
cb:e1:74:be:dc:87:2a:fd:aa:52:90:54:40:a6:03:
3d:d6:a7:66:2b:54:81:bd:09:76:7f:3d:f6:40:1b:
d6:3e:63:53:52:e5:83:b0:5e:25:d1:3c:b3:54:66:
b3:2b:34:80:3e:4f:e6:e1:d6:ec:02:2a:ba:68:ab:
70:9f:b0:ad:1d:81:03:3a:7d:b7:d0:e7:0a:84:e4:
61:37:1a:8b:cd:76:4f:ff:94:e6:1a:fb:b7:c5:cc:
d5:c7:bd:fa:bd:68:a1:88:19:d6:af:dd:33:ac:80:
e5:53:d5:4e:9a:83:6b:6c:c7:4e:8c:2d:2e:59:60:
06:58:35:aa:93:6e:0a:96:d5:7e:c0:dc:ab:5e:ef:
99:cd:44:ae:91:19:e3:39:6d:c0:4a:8d:b1:eb:00:
6d:22:ab:b3:7f:17:5c:cb:6a:11:45:53:53:eb:85:
db:79:3e:7c:78:f0:38:86:38:9f:2f:90:21:89:10:
3f:8a:01:ef:d3:4a:50:08:96:e2:8a:9f:92:1d:96:
19:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BA:1C:6E:86:71:E2:76:7F:6C:6F:78:9A:9D:C9:DC:F3:94:D3:1F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fdecee65-c952-4f49-9973-5248d6a502de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.141.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ae:e3:30:93:7a:1b:52:10:e3:06:0e:10:b4:7f:07:b4:14:72:
94:1d:0e:96:43:76:42:6c:f0:34:5e:49:1e:07:b7:b7:b3:c1:
7e:49:0c:e0:17:6c:91:64:9c:fb:76:cd:08:22:24:fa:82:aa:
b8:a1:c0:13:1b:f3:ad:12:14:a0:99:75:44:6b:76:90:b4:08:
76:0a:0b:e9:fe:9b:23:a3:02:df:5e:23:58:c9:89:47:2b:aa:
ff:9c:49:27:92:a3:d6:da:12:e9:a0:38:4c:ac:32:48:3d:9b:
17:a2:7b:88:8e:4d:50:d5:e0:cb:6d:8b:75:4d:67:50:f5:55:
d0:5c:6c:b0:3b:8e:9e:35:76:d2:71:3f:fd:5c:b9:ec:84:ec:
01:56:db:26:1a:01:bc:c2:43:3a:2a:0f:96:04:90:cd:79:9e:
b9:f0:c0:f3:80:46:21:94:54:65:9d:c8:c8:56:75:11:09:71:
a8:cd:7f:61:d3:6d:52:10:4c:c4:7b:c9:e3:8b:37:5a:2b:df:
e1:af:a9:ae:6f:82:46:9b:bc:36:2d:d5:90:16:9d:60:bc:37:
f4:3b:5e:08:af:81:03:ff:75:79:b1:26:29:8e:1a:40:a0:5d:
6c:f1:00:53:df:a5:a0:9e:e2:b1:7c:3f:8d:c5:5c:8c:36:67:
fe:e5:b8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 03:55:56 2026 by rpki-client