
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ce994fe-ba46-4c89-bd91-093bd3e1cbc4.roa
File: 4ce994fe-ba46-4c89-bd91-093bd3e1cbc4.roa (raw, json)
Hash identifier: 4+JFFfZ+aLeuzvZRA3ubAqoM+cq4Uqq2T/UCIxixbOA=
Subject key identifier: D9:00:D0:A0:15:9D:4E:D5:FD:40:9D:26:4F:25:17:BC:66:A6:5C:7F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6B0E71147F573E1B04B52BC13C344EBF50AE9CC3
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ce994fe-ba46-4c89-bd91-093bd3e1cbc4.roa
Signing time: Mon 11 May 2026 01:10:41 +0000
ROA not before: Mon 11 May 2026 01:10:41 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.157.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:0e:71:14:7f:57:3e:1b:04:b5:2b:c1:3c:34:4e:bf:50:ae:9c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 11 01:10:41 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=e6f3962224d94d1d709a7510cd6f6848d13c9a0dd3ac88ae3371b2c8570c528f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7c:8c:ad:4c:4d:22:ab:6d:2e:2e:3a:f1:62:
e2:86:4e:69:fb:c1:8f:05:2d:29:ae:f8:eb:5e:9c:
d4:78:00:a5:2e:ae:36:88:1b:f4:5d:f7:e9:cd:0e:
40:bb:f2:27:1e:c5:0b:c2:72:6d:0b:52:b6:da:01:
e1:eb:b2:c2:09:23:91:69:bd:5e:4b:60:04:54:4f:
7d:b0:8c:62:05:5a:a5:cc:01:8b:8e:74:b1:e2:75:
50:46:bd:c2:e9:c8:b1:eb:aa:d2:f3:b8:72:61:39:
b3:c5:03:ae:66:47:b9:53:a8:ea:17:ca:94:66:5f:
4e:0d:79:8d:f0:0e:f1:88:08:17:5f:1c:cb:2b:68:
b0:fa:0e:30:90:95:2b:99:e9:86:94:d6:6b:47:78:
74:49:cf:08:40:8e:68:eb:af:6c:15:fc:f9:92:36:
83:ea:b3:71:53:97:47:9b:ca:4e:f8:76:36:fe:8c:
9c:bc:cc:45:bd:61:19:1c:41:2e:c8:a3:3e:38:7e:
34:64:ef:08:c4:b1:92:eb:e5:7f:dd:a2:aa:45:35:
f0:87:37:8f:93:3d:e8:bb:27:42:9d:c3:7e:8a:0f:
8f:2e:01:4e:78:e7:e9:cf:4f:c6:0e:fb:cd:92:e3:
21:e5:e6:ca:52:a0:fc:84:59:50:3f:d4:7b:e0:97:
8d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:00:D0:A0:15:9D:4E:D5:FD:40:9D:26:4F:25:17:BC:66:A6:5C:7F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ce994fe-ba46-4c89-bd91-093bd3e1cbc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.157.65.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e8:b6:fc:2f:3c:ff:5a:26:4b:b9:69:0a:72:46:29:04:17:
c2:d0:00:6e:7e:e6:49:78:f3:69:3b:b4:09:16:15:7b:10:21:
18:5f:05:f2:5e:0e:e0:0e:df:94:18:20:e1:bd:e6:ca:5b:a1:
aa:06:cd:8f:3e:4f:4b:c4:a5:78:8a:44:f2:ea:96:d8:65:5b:
b6:5e:fe:b1:a7:5a:8e:91:1c:76:33:2d:4e:32:71:a6:2b:9f:
9a:f4:ec:76:c0:b5:e1:8d:22:1d:34:60:c6:a6:9b:9a:4d:ad:
ee:09:f9:c5:f4:f9:63:b3:b2:a4:f1:64:5e:ee:79:02:15:2e:
92:da:8d:e4:e5:70:63:1f:6a:82:93:1c:97:e8:0a:a6:65:76:
11:64:a5:79:75:d7:29:21:f5:20:35:70:7f:fb:ca:9c:c9:b2:
7e:31:9e:45:46:ca:6f:54:4d:2f:cd:35:90:e5:f2:a8:d4:50:
c3:14:19:10:7b:0e:dd:61:0e:f9:81:70:c3:62:6f:44:47:64:
8c:5b:a0:8a:d8:b0:8d:19:32:00:90:17:fb:b8:a2:c2:42:18:
21:53:3c:e3:e3:ee:0c:b1:f8:ee:fb:63:aa:cd:6e:1e:7d:3c:
0b:80:ca:56:04:5d:56:88:5d:6b:97:8c:3c:75:32:67:0f:d7:
0c:6e:eb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:24:12 2026 by rpki-client