
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48a5c303-790e-4793-8605-635e3316bc86.roa
File: 48a5c303-790e-4793-8605-635e3316bc86.roa (raw, json)
Hash identifier: nzWuctFcAKlcTEAr65AkwPpb2M8Nyc7e5Nc3fubw44Y=
Subject key identifier: 34:F7:9F:1B:94:7E:49:3E:69:71:35:84:3C:3D:4E:51:B0:2E:47:3F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 48AE4332992C8DA1867162DF36F95AC4A1CAB959
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48a5c303-790e-4793-8605-635e3316bc86.roa
Signing time: Fri 08 May 2026 00:50:08 +0000
ROA not before: Fri 08 May 2026 00:50:08 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.160.0.0/13 maxlen: 13
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ae:43:32:99:2c:8d:a1:86:71:62:df:36:f9:5a:c4:a1:ca:b9:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 00:50:08 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=aa857defe89c7f2cfa93a2157551aee2ced8b06fed45eb73aeb54de20069d537, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:0e:d6:91:31:c4:d7:8f:e1:94:8a:6f:35:
6c:3f:2a:6b:0f:40:47:c3:61:c3:7a:76:3f:88:ad:
90:14:98:aa:ee:58:64:ec:75:a9:a7:be:21:36:44:
59:0c:6b:7a:08:a2:60:09:87:64:80:a0:e6:cb:96:
60:fb:74:2c:5e:9c:a1:74:27:eb:7a:a7:46:55:4e:
58:26:04:57:6d:c1:1b:16:8a:19:ba:64:eb:b2:26:
03:69:11:d0:64:ee:14:f9:72:dd:ae:92:e5:65:a0:
fd:b8:9f:59:a8:2e:f6:0d:95:05:a4:56:33:f0:21:
86:20:c5:de:ae:cc:1a:23:97:63:4e:e3:d4:a1:dd:
08:f6:38:ea:90:52:79:c3:71:cb:d0:6c:88:fc:35:
8e:5b:f5:26:66:c5:45:41:64:7e:12:63:25:76:2d:
2f:66:24:7f:40:5a:55:df:af:18:89:03:8c:5e:3a:
a7:df:6c:e9:12:74:f1:c2:0b:21:fc:24:47:3d:35:
d1:97:4a:bc:61:54:6c:47:80:fd:6d:7b:01:2f:4e:
d8:ae:44:d0:76:65:c6:57:dd:56:3b:f4:e6:52:cb:
ff:09:f4:18:a6:5b:ea:32:0a:fb:ea:a9:eb:fc:2d:
27:f2:92:53:db:84:0a:5e:fd:d5:0f:dc:f4:a3:c6:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F7:9F:1B:94:7E:49:3E:69:71:35:84:3C:3D:4E:51:B0:2E:47:3F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48a5c303-790e-4793-8605-635e3316bc86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.160.0.0/13
Signature Algorithm: sha256WithRSAEncryption
b1:51:7a:47:10:c8:ae:70:6a:37:a5:c2:2e:06:7b:89:a5:56:
0e:8b:27:39:94:dd:a1:20:e1:2b:93:81:9f:b4:3d:8c:eb:28:
03:f3:df:13:dc:b8:88:c0:5b:b3:ac:78:cd:94:90:09:1e:4e:
ca:4f:98:38:68:17:b9:cc:ee:2d:d5:d9:db:68:e9:eb:75:5c:
2c:ce:48:3c:ea:9f:8e:be:b6:e0:05:96:62:09:d9:2f:ab:2a:
07:a4:c4:19:c5:83:ce:1a:ea:a1:81:0a:cb:ee:77:4b:2e:a5:
d1:c9:6f:40:19:e4:eb:f9:b2:e6:94:9b:cf:ff:9b:e4:c3:22:
4b:78:b3:29:ff:5e:c9:c9:29:f2:a6:13:9f:1a:8c:45:cf:4e:
fb:1f:fb:f3:e4:b6:56:9b:ed:3b:a2:62:65:40:14:5e:f7:6a:
cb:ca:7b:8c:74:05:46:37:f6:fc:02:8f:38:6f:a2:24:43:1b:
9d:9b:54:6e:e9:b9:6c:e0:bb:59:5e:f3:be:5b:47:15:10:35:
d0:22:67:10:11:2c:e3:a7:ec:3f:92:4f:c3:a6:13:40:ad:01:
6f:16:75:a7:d9:74:07:86:69:7a:36:a5:37:b5:de:1a:33:3a:
71:1f:d2:e9:b0:71:54:31:6f:9c:fb:06:7f:94:95:a1:70:dc:
26:ad:f2:11
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUSK5DMpksjaGGcWLfNvlaxKHKuVkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDA1MDA4WhcNMjYwODA2MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYTg1N2RlZmU4OWM3ZjJjZmE5M2EyMTU3NTUxYWVlMmNl
ZDhiMDZmZWQ0NWViNzNhZWI1NGRlMjAwNjlkNTM3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0lg7WkTHE14/hlIpvNWw/KmsPQEfDYcN6dj+IrZAUmKru
WGTsdamnviE2RFkMa3oIomAJh2SAoObLlmD7dCxenKF0J+t6p0ZVTlgmBFdtwRsW
ihm6ZOuyJgNpEdBk7hT5ct2ukuVloP24n1moLvYNlQWkVjPwIYYgxd6uzBojl2NO
49Sh3Qj2OOqQUnnDccvQbIj8NY5b9SZmxUVBZH4SYyV2LS9mJH9AWlXfrxiJA4xe
OqffbOkSdPHCCyH8JEc9NdGXSrxhVGxHgP1tewEvTtiuRNB2ZcZX3VY79OZSy/8J
9BimW+oyCvvqqev8LSfyklPbhApe/dUP3PSjxn2FAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUNPefG5R+ST5pcTWEPD1OUbAuRz8wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzQ4YTVjMzAzLTc5MGUtNDc5My04NjA1LTYzNWUzMzE2YmM4Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwM2oDANBgkqhkiG9w0BAQsFAAOCAQEAsVF6RxDIrnBqN6XCLgZ7iaVWDosn
OZTdoSDhK5OBn7Q9jOsoA/PfE9y4iMBbs6x4zZSQCR5Oyk+YOGgXuczuLdXZ22jp
63VcLM5IPOqfjr624AWWYgnZL6sqB6TEGcWDzhrqoYEKy+53Sy6l0clvQBnk6/my
5pSbz/+b5MMiS3izKf9eyckp8qYTnxqMRc9O+x/78+S2VpvtO6JiZUAUXvdqy8p7
jHQFRjf2/AKPOG+iJEMbnZtUbum5bOC7WV7zvltHFRA10CJnEBEs46fsP5JPw6YT
QK0BbxZ1p9l0B4ZpejalN7XeGjM6cR/S6bBxVDFvnPsGf5SVoXDcJq3yEQ==
-----END CERTIFICATE-----
Generated at Tue May 12 22:05:32 2026 by rpki-client