
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51df04af-4ca3-40c6-8095-bd339475265a.roa
File: 51df04af-4ca3-40c6-8095-bd339475265a.roa (raw, json)
Hash identifier: jdMUUwXLsKtKoP08zVkQyY/s8Xwo80wdg/GRjr/gC2M=
Subject key identifier: 97:2C:DE:82:6D:87:EC:CE:D4:D7:69:E1:50:F0:62:38:E9:6A:0A:21
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3D6CB78C46664891E39A322E4448B053410F30F7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51df04af-4ca3-40c6-8095-bd339475265a.roa
Signing time: Sat 09 May 2026 00:40:13 +0000
ROA not before: Sat 09 May 2026 00:40:13 +0000
ROA not after: Fri 07 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:6c:b7:8c:46:66:48:91:e3:9a:32:2e:44:48:b0:53:41:0f:30:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 9 00:40:13 2026 GMT
Not After : Aug 7 23:59:59 2026 GMT
Subject: serialNumber=67f6b00acaf73568a8449f2002704d2d7ddbcdbd0f477925d12434e95f79a4fb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:14:d0:65:e8:37:43:1b:fd:d3:bf:f6:22:
b0:2f:79:c3:9a:cc:34:d1:db:be:0a:16:8f:d4:ed:
16:0d:55:89:01:38:21:a4:24:fd:2d:97:a2:8a:b8:
7f:5b:0d:d3:46:5c:71:19:c7:6d:88:44:9e:cc:2b:
83:4c:a0:b9:63:0f:63:3d:fc:63:14:5a:25:9b:4f:
99:81:94:09:04:b4:b1:9d:45:80:96:d5:10:5e:ca:
d9:b9:4f:e9:f5:0f:d2:d9:3f:87:f8:26:1f:9b:5b:
5a:97:99:d6:66:54:08:7d:58:e5:27:33:97:6c:5a:
ca:d4:5d:fb:91:47:04:e7:76:c3:01:d4:6c:ef:3f:
dd:b6:7b:ab:fb:b9:e9:6a:5b:c2:a4:3a:87:f1:3f:
59:5c:01:28:2e:2f:93:d6:2f:e3:ef:d8:a3:c9:ec:
09:4f:cb:d7:bb:1d:c4:21:cc:77:53:8c:2f:5a:ee:
49:cf:1b:ef:84:9f:52:26:d8:ac:1b:9d:f1:a1:1a:
99:35:fd:fc:06:f1:69:c2:f9:e9:f6:fe:34:f6:20:
48:f0:ae:35:76:37:97:1f:4a:3d:24:ce:a6:63:bd:
f2:a0:24:18:db:17:8f:a5:29:a1:81:2b:3b:cc:a2:
79:3d:a8:3b:b7:ec:79:9c:16:47:f4:b7:cc:b2:11:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2C:DE:82:6D:87:EC:CE:D4:D7:69:E1:50:F0:62:38:E9:6A:0A:21
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/51df04af-4ca3-40c6-8095-bd339475265a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c3:41:4b:45:4d:a0:19:c4:f7:05:76:60:c6:ab:99:b5:7b:
fb:d8:14:d8:57:bc:ac:3f:a0:f8:d6:c4:7d:77:61:9d:89:0e:
56:e9:0a:57:2b:a9:64:05:f6:80:8e:a2:e2:9d:90:08:3a:ad:
09:39:4f:17:d4:d8:98:5b:9e:8a:f3:66:71:50:40:0f:13:58:
8d:06:0e:65:f4:0f:6f:5e:af:e9:1a:74:53:c2:a2:0b:09:f7:
08:52:05:ce:bc:3b:fb:a7:4b:e2:37:ad:ad:21:f6:43:d0:52:
51:f4:44:c3:f1:56:17:2e:61:48:4f:f1:4c:31:85:dd:bf:7b:
f5:9e:92:b8:4b:89:d7:e5:ad:34:6b:77:f6:77:e7:af:b1:74:
e3:9c:9f:04:df:73:1d:9c:59:d0:cf:37:e6:02:24:56:18:6e:
15:ca:13:fb:ec:61:d6:c2:60:a3:86:54:13:de:ba:5e:84:31:
57:f4:9e:74:1d:4c:bb:fa:bd:e6:94:c8:b6:cc:17:0a:0a:73:
8e:2a:2a:8e:d6:74:25:4e:3e:72:0a:00:46:a8:46:ea:40:98:
03:09:04:2d:d2:f6:ed:8d:31:6b:6c:b7:42:85:20:f8:f2:91:
c9:21:30:4e:97:1b:3e:f1:71:67:b7:e9:4f:42:7c:97:97:fe:
a8:e9:e9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:00:04 2026 by rpki-client