
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7543caa3-ded2-4aab-a2aa-542c699342b3.roa
File: 7543caa3-ded2-4aab-a2aa-542c699342b3.roa (raw, json)
Hash identifier: Ra0mlmqdFg/nSHIJcVYAz+9chJcRsKW88p/aqCxDDmo=
Subject key identifier: 6E:DF:AB:B5:6A:1B:9C:B6:37:8F:D8:5F:1B:C9:16:97:B8:7F:E9:FB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 202ED062FFDDBF7E01036B5E5BD4CA67237ADE2F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7543caa3-ded2-4aab-a2aa-542c699342b3.roa
Signing time: Thu 23 Jul 2026 14:10:04 +0000
ROA not before: Thu 23 Jul 2026 14:10:04 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.2.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2e:d0:62:ff:dd:bf:7e:01:03:6b:5e:5b:d4:ca:67:23:7a:de:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 23 14:10:04 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=894404a15ac83691843f000333f72483b1e68a6a8e6add05a31923d03c63fe8d, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:73:78:3b:ed:ef:64:89:c1:3c:b2:d3:25:aa:
19:61:fa:82:9e:ea:2b:8b:58:e2:32:70:3e:e6:ac:
2c:b4:1a:78:e6:02:47:6b:8e:86:96:4f:b2:a2:80:
a4:10:c8:09:6e:ef:59:11:ed:0f:c7:b2:83:03:2e:
d8:85:c3:13:65:10:c4:5e:07:e2:08:74:83:ad:54:
23:16:c5:ce:8a:ad:aa:6e:ab:2f:8b:ce:77:b1:fa:
ac:77:58:e9:7a:97:19:3c:67:5b:34:f2:ca:0c:db:
a1:52:02:74:ac:6f:c8:a8:d4:10:99:b0:44:61:2d:
12:d7:91:28:81:93:59:5e:2c:75:56:a7:64:1a:bc:
4a:89:5f:f0:96:f7:00:ce:aa:34:65:fa:39:21:dc:
a3:0c:a8:af:66:43:c4:71:96:e9:d9:7d:2f:a4:ff:
be:86:a5:e1:1e:98:3c:8f:8f:a2:57:8e:08:49:15:
76:a1:11:71:bf:86:a6:87:9c:c4:29:41:db:c0:58:
cb:84:f9:2a:6c:c8:34:68:24:a8:73:c3:ce:8d:50:
92:39:bb:71:3e:7d:5c:b1:e4:36:cf:53:ad:45:09:
e4:5e:ae:a4:01:fc:77:61:32:cd:25:43:a0:c1:46:
f1:b3:dd:4f:93:ba:05:72:86:a2:cc:cf:e9:07:b4:
cf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DF:AB:B5:6A:1B:9C:B6:37:8F:D8:5F:1B:C9:16:97:B8:7F:E9:FB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7543caa3-ded2-4aab-a2aa-542c699342b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.2.15.0/24
Signature Algorithm: sha256WithRSAEncryption
72:26:4f:85:37:d7:b9:fa:6a:21:ba:bf:0a:11:25:cb:4f:44:
9a:65:5a:2f:0f:09:39:e2:4d:99:b5:43:31:d1:90:13:d0:89:
c1:5d:c1:e3:84:73:57:50:8c:17:50:6f:43:6b:b5:19:60:d4:
62:89:32:34:7b:68:bc:3c:27:c8:e9:88:1d:83:aa:7e:e4:ca:
26:e6:cd:24:5d:02:9e:38:6d:cd:0f:33:2c:f6:1d:b3:61:a5:
12:5d:55:f2:92:30:3b:50:44:d6:d5:d4:ba:dc:19:60:80:fd:
50:a0:57:f1:0d:af:15:c6:c0:63:03:8f:39:dd:ee:23:72:83:
92:07:32:a6:8d:ad:af:88:35:6c:cf:31:38:b0:42:d9:88:2b:
70:0f:4a:c0:d9:74:5b:59:7b:1a:f7:bf:df:8c:21:25:68:fa:
c2:44:c0:9e:21:37:ef:16:0d:c4:c7:08:38:c2:b1:db:45:29:
4d:be:95:13:7f:c8:52:66:02:3c:2f:7e:bb:58:7c:2a:ea:2b:
b3:81:e0:f2:6e:76:6f:f8:e4:02:f3:65:8e:72:ae:5f:74:70:
a4:e7:6a:9c:67:2c:56:77:e8:ed:55:1d:0a:57:b9:6e:05:f5:
72:3a:2e:ae:d1:09:43:5e:07:c9:07:fc:7b:9c:c3:f1:93:38:
e1:09:72:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:04 2026 by rpki-client