
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d256ed5-7903-4a52-b0ab-2d756bbfcd1f.roa
File: 7d256ed5-7903-4a52-b0ab-2d756bbfcd1f.roa (raw, json)
Hash identifier: 7vL7F7t/BqH6w5MWBSHHwEFjocJ0F6x+IonM2/P54VM=
Subject key identifier: 37:71:A6:76:57:EA:17:00:FA:DF:73:97:16:6F:5B:D9:16:FB:C6:75
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4C3AC97A71884C1878D9A2BB4153D1D4D9A5EF2E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d256ed5-7903-4a52-b0ab-2d756bbfcd1f.roa
Signing time: Fri 08 May 2026 00:51:11 +0000
ROA not before: Fri 08 May 2026 00:51:11 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.221.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:3a:c9:7a:71:88:4c:18:78:d9:a2:bb:41:53:d1:d4:d9:a5:ef:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 00:51:11 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=8d6d527c4dbc570fe90982e7304b6d40b91570c122e46cdbf18f975e5769e653, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0e:38:26:7b:7a:77:99:8d:d1:68:ba:be:5c:
bb:2f:8a:fd:7c:84:03:71:fe:4b:c6:8f:e5:08:21:
ab:d8:83:94:a2:a7:fe:6d:e8:aa:fb:2c:c0:f8:af:
af:47:28:1b:89:2d:be:a7:c7:b3:b3:98:7d:80:1d:
24:f8:de:c8:b1:de:b3:28:20:91:e6:56:aa:95:78:
07:b5:b3:52:a7:5e:37:41:59:e1:c3:50:e2:9e:e0:
d7:8e:b5:4c:40:51:9a:07:ba:ce:4b:ad:c6:00:38:
7c:86:07:82:66:2d:47:84:eb:c9:4b:17:8b:3e:f0:
ef:54:e1:2c:b2:8f:76:52:e5:71:dc:da:76:6b:89:
74:5e:58:ce:22:10:72:ac:f0:1d:42:ef:e6:7f:1e:
16:91:4b:34:b2:fa:cc:c4:ab:b1:15:54:d1:d6:b7:
2a:16:b5:0d:5c:40:ae:48:6f:a0:43:ab:05:6b:3f:
25:82:5f:19:e2:57:4f:52:bf:15:1d:ad:ae:60:50:
2c:ce:d1:6e:b3:43:95:93:80:a8:5c:95:ad:f3:76:
b7:be:54:3a:d5:1e:26:be:d3:05:d6:e0:fd:b9:ab:
a5:a6:ae:a9:72:7e:6d:37:80:b9:bc:99:d5:88:cc:
63:49:2b:46:6c:d7:0b:2e:6c:f7:35:20:d6:80:d2:
f9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:71:A6:76:57:EA:17:00:FA:DF:73:97:16:6F:5B:D9:16:FB:C6:75
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7d256ed5-7903-4a52-b0ab-2d756bbfcd1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.221.4.0/23
Signature Algorithm: sha256WithRSAEncryption
00:e4:5e:8d:02:8f:fd:54:76:70:1f:0a:c5:01:42:2c:b9:dc:
a2:45:cb:c7:ff:32:ec:17:c4:59:9e:0f:95:45:b9:67:a4:f3:
6d:49:78:1d:b6:34:b8:bb:50:2f:dc:7a:2d:ea:bd:34:22:de:
75:d1:0e:f7:6c:50:b7:96:3d:22:8a:30:f8:00:df:43:48:0a:
d7:f0:5d:39:e1:30:cc:15:0c:80:5e:03:44:a7:33:96:eb:78:
31:01:25:3e:e4:f3:92:1e:d0:86:6a:17:f6:91:1a:14:fe:75:
65:99:76:d7:40:01:da:56:09:2f:6e:c0:ef:12:3b:f5:e1:ff:
60:4b:fe:64:7c:58:5d:c9:80:e8:45:6c:ff:a7:89:1f:6e:f5:
9e:0f:24:bd:b5:44:aa:5f:68:3c:60:9e:65:90:f4:fb:41:e7:
38:42:83:68:a6:74:1d:c7:cb:a1:1e:21:75:79:ee:70:da:67:
68:9c:aa:2a:2b:8b:cc:5d:47:19:d6:4f:c1:b5:25:10:0f:db:
31:b7:f0:bc:48:d3:ae:e0:45:d4:7e:73:7b:1a:ae:01:ac:cf:
a7:79:fb:c6:1c:3c:c0:5e:6a:9d:7b:08:1a:81:29:26:23:02:
73:ed:42:0f:00:2f:07:fc:f0:24:db:b7:66:08:2c:54:bf:04:
35:67:ae:d5
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTDrJenGITBh42aK7QVPR1Nml7y4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDA1MTExWhcNMjYwODA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ZDZkNTI3YzRkYmM1NzBmZTkwOTgyZTczMDRiNmQ0MGI5
MTU3MGMxMjJlNDZjZGJmMThmOTc1ZTU3NjllNjUzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDBDjgme3p3mY3RaLq+XLsviv18hANx/kvGj+UIIavYg5Si
p/5t6Kr7LMD4r69HKBuJLb6nx7OzmH2AHST43six3rMoIJHmVqqVeAe1s1KnXjdB
WeHDUOKe4NeOtUxAUZoHus5LrcYAOHyGB4JmLUeE68lLF4s+8O9U4Syyj3ZS5XHc
2nZriXReWM4iEHKs8B1C7+Z/HhaRSzSy+szEq7EVVNHWtyoWtQ1cQK5Ib6BDqwVr
PyWCXxniV09SvxUdra5gUCzO0W6zQ5WTgKhcla3zdre+VDrVHia+0wXW4P25q6Wm
rqlyfm03gLm8mdWIzGNJK0Zs1wsubPc1INaA0vmdAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUN3GmdlfqFwD633OXFm9b2Rb7xnUwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzdkMjU2ZWQ1LTc5MDMtNGE1Mi1iMGFiLTJkNzU2YmJmY2QxZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEP3QQwDQYJKoZIhvcNAQELBQADggEBAADkXo0Cj/1UdnAfCsUBQiy53KJF
y8f/MuwXxFmeD5VFuWek821JeB22NLi7UC/cei3qvTQi3nXRDvdsULeWPSKKMPgA
30NICtfwXTnhMMwVDIBeA0SnM5breDEBJT7k85Ie0IZqF/aRGhT+dWWZdtdAAdpW
CS9uwO8SO/Xh/2BL/mR8WF3JgOhFbP+niR9u9Z4PJL21RKpfaDxgnmWQ9PtB5zhC
g2imdB3Hy6EeIXV57nDaZ2icqiori8xdRxnWT8G1JRAP2zG38LxI067gRdR+c3sa
rgGsz6d5+8YcPMBeap17CBqBKSYjAnPtQg8ALwf88CTbt2YILFS/BDVnrtU=
-----END CERTIFICATE-----
Generated at Tue May 12 22:41:13 2026 by rpki-client