
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d5afa60-5901-467d-b47d-e1e2fc1745e5.roa
File: 3d5afa60-5901-467d-b47d-e1e2fc1745e5.roa (raw, json)
Hash identifier: tmfcA6Nh4YhnJEV/PxAWH3NP4EqS12Axe3GQyPTTiAQ=
Subject key identifier: 94:47:A9:77:89:FB:1A:6C:8F:EF:D3:77:36:47:90:46:5E:E5:8D:D9
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 607FC05446A908A31A62DCB5882CB705CA1C6D92
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d5afa60-5901-467d-b47d-e1e2fc1745e5.roa
Signing time: Fri 08 May 2026 02:21:47 +0000
ROA not before: Fri 08 May 2026 02:21:47 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.191.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:7f:c0:54:46:a9:08:a3:1a:62:dc:b5:88:2c:b7:05:ca:1c:6d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 02:21:47 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=eaafbe21c4a17f2131be39ade60c9df4c6b4f6a28df030115ce1395c0bd7de6d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:90:e3:17:7c:6e:40:51:7d:83:37:0d:80:
9c:67:1d:9e:fa:11:f2:eb:10:13:a9:f7:29:e9:af:
7e:e6:c8:6d:fb:ba:42:49:f4:85:2f:53:59:1b:f2:
73:b0:52:17:f8:39:cc:2e:49:98:16:b4:8c:59:89:
76:37:6a:b4:b2:4c:dd:d4:51:28:a1:8a:0b:24:e0:
b5:3c:d5:d8:ae:5c:23:0d:db:c8:47:42:b3:7e:6f:
74:a5:b6:98:0b:8f:2d:de:34:1c:97:d3:f8:52:3f:
3d:90:2e:3e:b4:e0:6a:8a:fe:e6:6f:e4:93:7a:b2:
33:92:49:fd:d4:ba:7c:50:01:94:b6:23:5d:98:00:
fd:37:81:d4:ee:2f:ea:10:ea:11:77:f7:08:79:61:
9e:8c:0c:c6:39:5a:e3:4a:7e:98:04:af:f7:82:6b:
95:3f:3c:ac:4b:49:7d:06:52:8c:29:f6:df:bb:ba:
db:a6:5d:a7:7c:a4:8d:ca:d0:93:58:93:b1:82:04:
42:db:3c:15:3e:ae:0a:96:01:9d:f7:81:68:1e:d1:
9e:3b:d2:76:52:60:96:10:15:d7:ee:e9:1b:3d:66:
72:46:06:ff:7b:88:85:5a:80:eb:3a:1e:91:b0:f0:
76:78:0b:27:41:1a:78:ed:e6:81:64:bd:eb:00:d2:
e8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:A9:77:89:FB:1A:6C:8F:EF:D3:77:36:47:90:46:5E:E5:8D:D9
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d5afa60-5901-467d-b47d-e1e2fc1745e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.191.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b3:59:b4:91:97:9a:6a:71:48:77:7c:2d:2b:00:76:c3:6e:d3:
28:da:11:8a:6d:99:a8:ce:55:42:8d:f2:5c:57:7e:c0:a2:53:
cf:03:90:83:ff:bd:d2:14:2a:9f:72:01:6a:c2:71:6c:5d:8b:
b9:54:a0:ba:1c:86:4b:e5:6c:ce:f0:02:ec:2e:8d:b2:e2:a0:
6c:f5:7f:3f:72:94:aa:ae:ed:97:29:0c:30:f4:a9:89:7d:56:
8d:e3:2b:d0:45:d4:f6:1d:fe:c7:fe:76:ba:22:db:cb:07:1c:
fa:a2:82:e4:74:b9:64:ac:58:ca:af:0a:5b:b1:79:cd:cb:76:
7a:af:39:c0:e7:6f:63:a7:20:17:f0:11:fc:0f:ca:e9:27:11:
ba:1d:26:32:f2:e2:f7:fc:16:d4:06:9a:3a:75:f7:12:84:4b:
71:32:17:97:cd:e3:54:e1:79:fb:9c:9f:21:b7:90:f9:f0:7b:
ab:c3:68:6b:26:54:99:81:95:4d:c1:de:fe:b9:8b:9d:8d:79:
8f:55:d5:ec:19:92:36:3d:c0:a0:5e:67:fd:ab:8b:f9:f8:48:
1b:12:e6:04:fa:23:e1:69:f2:b8:2a:24:38:1f:67:2a:46:e3:
40:7f:ec:49:6d:58:39:35:8d:4f:2b:94:60:2c:3a:84:4e:db:
d6:73:d4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:21:24 2026 by rpki-client