
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59c5163b-3011-4a94-9e8d-80ee5b9aa8d8.roa
File: 59c5163b-3011-4a94-9e8d-80ee5b9aa8d8.roa (raw, json)
Hash identifier: PlreXgGojDLcVWmeFaXgCxZE+yRO3jJSMHtiQWkt1ps=
Subject key identifier: 4E:6E:43:D6:67:B6:AF:A9:40:F1:2F:12:F9:F8:50:D3:61:EE:03:52
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2123D228411C3169981B61AC7527935DCE2544EB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59c5163b-3011-4a94-9e8d-80ee5b9aa8d8.roa
Signing time: Fri 08 May 2026 02:50:03 +0000
ROA not before: Fri 08 May 2026 02:50:03 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 34.250.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:23:d2:28:41:1c:31:69:98:1b:61:ac:75:27:93:5d:ce:25:44:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 02:50:03 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=568cbe6062308710d89c1fca49a18152db33c90d1cde717a98b2076dd439fec9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:3e:69:18:7b:7f:7b:68:ef:78:8c:a2:12:
ed:87:17:2e:d4:93:b1:f6:1e:ed:5e:8b:64:b0:a7:
4a:92:e1:68:ed:82:6a:cb:47:77:f1:b4:dc:52:22:
e1:da:0e:9b:95:05:b0:e9:c6:08:79:b7:b3:32:04:
79:04:aa:3e:62:fc:43:f7:55:ff:86:c2:fc:3a:a7:
64:6f:9d:ab:51:1c:76:62:49:98:50:82:4a:ac:60:
7e:a5:1a:5b:5a:ed:00:ce:9a:00:4e:32:0f:46:ee:
bd:c7:00:55:df:03:93:1c:88:58:6e:10:17:76:03:
8e:9c:31:25:5d:62:fe:92:4c:b5:b4:a2:36:51:c4:
57:ec:b0:83:25:b5:40:83:76:af:30:08:a3:a5:eb:
56:f0:c0:0c:79:9a:9a:33:a6:00:3b:2e:48:9f:31:
93:aa:ed:86:78:0c:f9:6f:9d:e1:b9:02:70:7d:0f:
0b:d0:21:ee:d1:54:e6:09:42:56:2e:94:0e:be:4c:
61:80:06:0e:d5:7b:d9:c2:32:df:c1:30:48:7f:da:
ac:35:94:7a:32:01:b7:ac:22:d4:bb:ee:19:dc:cd:
11:a7:f4:7f:db:af:2b:83:2d:1f:72:7d:da:8b:59:
88:3d:89:bf:9f:42:2e:77:79:bd:0a:07:17:4d:10:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6E:43:D6:67:B6:AF:A9:40:F1:2F:12:F9:F8:50:D3:61:EE:03:52
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/59c5163b-3011-4a94-9e8d-80ee5b9aa8d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
34.250.128.0/18
Signature Algorithm: sha256WithRSAEncryption
26:d7:54:23:91:84:d3:08:bc:c4:9c:aa:ae:f9:2a:1d:78:b3:
77:fd:e3:51:3b:ba:78:b2:98:94:4d:8e:2b:36:59:e9:1c:4f:
af:73:23:7a:e7:a6:89:b9:60:c0:22:d2:3a:14:57:47:70:f6:
97:42:12:2d:99:d0:a5:4f:ce:8b:02:f8:e4:e9:9a:84:c6:08:
e9:67:16:7d:68:96:6e:f3:8d:ba:84:63:7b:fb:b8:eb:17:59:
02:2e:dc:37:b8:d8:33:7a:7a:af:fc:50:6b:3a:79:1d:97:49:
77:a2:5e:df:57:d9:82:4a:e7:05:08:92:73:20:d3:a3:c6:34:
38:33:47:b6:ab:16:b9:04:ab:f9:47:ef:56:7c:53:f1:6e:38:
97:a0:ad:bc:48:f0:9e:fa:72:4a:2d:5c:5e:fd:52:6a:ee:e5:
42:d3:26:5c:77:1f:22:40:ae:b1:43:03:2d:de:ad:ca:d3:89:
57:93:16:af:79:f6:1c:df:f0:55:f5:f0:a7:eb:72:da:f7:6e:
01:14:46:0b:d1:0f:9b:ab:63:00:1a:3a:57:9a:60:5e:f9:34:
fb:25:83:29:e1:06:b9:f3:fc:03:9d:22:d8:bc:8f:25:d4:15:
e9:3a:e9:ef:df:91:0c:56:e7:78:a1:5a:37:f8:45:5b:1e:53:
89:db:ad:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:34:07 2026 by rpki-client