
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25759bb1-0abe-4a35-9552-942325acf843.roa
File: 25759bb1-0abe-4a35-9552-942325acf843.roa (raw, json)
Hash identifier: 2S7rVUP6/kEZrcCV54+Bwd4+mWFW8QGJ5HwGHHQPJ1s=
Subject key identifier: 66:9F:B3:6A:1D:D2:4D:7F:9C:A1:AC:9E:32:89:E0:CF:25:82:68:59
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 36ADD405FF3F49FE7238FCBB2A218DFB0A016FD5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25759bb1-0abe-4a35-9552-942325acf843.roa
Signing time: Fri 08 May 2026 01:00:04 +0000
ROA not before: Fri 08 May 2026 01:00:04 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.177.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ad:d4:05:ff:3f:49:fe:72:38:fc:bb:2a:21:8d:fb:0a:01:6f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 01:00:04 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=4e5f4186bfecd2a3c9199345f9f3e34aff2befeb8aead9482742f37e7265966a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:dd:13:2b:9d:31:50:76:3f:b9:eb:bb:8e:
6c:76:2c:42:ab:21:2f:02:7e:a1:4c:d5:d2:83:7f:
4b:23:9b:81:95:c0:65:5c:1f:14:30:dd:d4:89:f9:
09:c1:f5:3b:80:d9:70:69:1c:c0:d6:8b:cb:91:d3:
22:11:57:79:39:d6:11:a6:77:a4:fd:03:a3:92:81:
0e:64:1d:de:16:43:89:f4:bb:f5:b2:60:ec:15:5c:
02:89:78:2f:15:d7:28:6e:99:fb:fe:dc:d7:af:02:
00:34:8f:4c:74:2d:71:6f:a6:65:eb:e9:c5:92:9c:
da:cd:26:a7:34:7e:1b:49:56:cf:5f:ba:64:63:68:
62:2d:05:b4:57:81:46:77:b2:4c:a8:80:54:aa:0d:
bf:d6:40:3a:48:73:2d:a2:7e:9c:d8:dd:e6:02:3c:
9b:d2:c7:69:a8:d4:80:ef:2d:7c:09:38:82:6a:b8:
38:07:71:61:6f:0f:eb:06:1a:e5:8d:3c:00:65:39:
2f:a4:dc:68:21:7c:cd:3f:4d:97:0a:3c:bc:84:b1:
fa:00:b1:b5:8d:0d:0f:7c:e2:4d:ad:f6:7d:0d:e6:
e9:77:c1:54:45:e3:6f:bf:b6:b9:ea:ed:bc:cb:c9:
0e:07:d5:91:57:4b:28:8d:39:cf:06:a1:b6:32:4a:
24:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9F:B3:6A:1D:D2:4D:7F:9C:A1:AC:9E:32:89:E0:CF:25:82:68:59
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/25759bb1-0abe-4a35-9552-942325acf843.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.177.92.0/24
Signature Algorithm: sha256WithRSAEncryption
93:4f:fc:39:c2:b4:e1:25:c4:13:b5:05:76:f5:1d:a6:d5:37:
30:f5:a8:f8:73:fa:61:d7:e4:35:5d:f8:15:c4:57:35:13:38:
60:e7:ef:1b:5d:4f:4c:e6:b0:76:01:a3:70:cc:47:61:ec:d7:
5a:87:65:a2:8a:9d:3b:2c:d8:bd:a0:ed:0f:81:97:bd:60:4c:
4c:b0:d3:4f:bf:0d:50:55:c0:1c:15:94:10:6e:2b:97:a6:ba:
a6:1f:8e:31:56:66:71:59:a6:ee:32:f6:5d:18:0f:26:2c:cd:
ff:ce:35:f2:90:3e:ec:6c:24:4d:12:7b:91:64:d3:93:1f:44:
5d:a1:13:86:2f:cc:87:27:5f:b4:6c:54:d7:7d:63:96:df:50:
e2:e0:2f:7b:b2:4b:4b:f4:e1:3c:f3:e8:8f:ed:22:91:af:ec:
a1:a8:ce:4a:f6:1e:b4:06:db:c7:6a:39:ec:01:c3:2d:fa:f9:
66:38:3d:86:ec:96:b9:75:38:c1:f1:a9:06:18:65:8d:9d:36:
d2:8b:c6:e1:98:13:0d:4a:ac:d1:1d:cc:c4:0a:eb:a6:9f:0c:
61:d3:43:6b:e5:5e:24:d8:06:ed:4b:69:e9:27:47:6b:70:d0:
27:c8:c2:23:85:c5:54:76:a0:3c:2c:03:5a:26:1e:d8:a0:c2:
01:f3:5a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:05:24 2026 by rpki-client