
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d324866-9cfe-4453-a162-c3c5555462b6.roa
File: 8d324866-9cfe-4453-a162-c3c5555462b6.roa (raw, json)
Hash identifier: rCS/0bvwh5f0tM2S4+myARFtTAS0p9hbnO0uG8I1v8U=
Subject key identifier: AE:41:15:B9:D4:FA:B0:F8:DF:BC:12:BF:68:8A:A6:0C:BF:A2:75:3C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0863217765F5B15D7D0A406FC18815B51EA58183
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d324866-9cfe-4453-a162-c3c5555462b6.roa
Signing time: Tue 21 Jul 2026 05:02:57 +0000
ROA not before: Tue 21 Jul 2026 05:02:57 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.182.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:63:21:77:65:f5:b1:5d:7d:0a:40:6f:c1:88:15:b5:1e:a5:81:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 21 05:02:57 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=1a01d8da817941fa651906fbfe1d4ae059c56b3cdac2b3e0bf74c159da88f762, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:0b:ae:bc:11:f1:4b:34:e6:c3:b7:8e:64:
8b:8c:bb:16:74:32:09:c5:dc:49:95:ef:74:d8:f3:
b4:0e:04:36:f7:14:fa:f2:25:26:6a:3d:6e:2b:5b:
05:c0:0c:c3:10:56:16:28:a6:fc:9a:94:b4:0d:2d:
c2:37:fb:4a:46:ae:2c:af:54:ad:ba:82:ab:07:31:
9e:00:02:3d:82:f7:1b:e4:04:35:d0:c3:b6:4f:08:
ff:b5:13:57:9a:25:75:30:2a:7b:63:7b:a0:37:cd:
ba:55:7e:7f:30:e1:f7:e0:69:92:6a:bf:cd:75:cb:
ee:77:c1:81:2d:a7:0b:46:c8:f4:f9:1c:aa:6c:23:
ae:b7:3a:6d:98:63:3d:d5:9d:a2:80:a0:27:0f:b1:
97:b1:39:06:84:64:04:81:65:39:0d:59:4a:83:dc:
f1:61:fd:dc:bc:0c:8e:74:f4:84:b8:80:0f:3f:ba:
27:8a:5a:7d:a7:d3:4c:bb:d4:08:21:50:a9:91:ff:
5f:af:83:38:af:d5:d2:a4:a0:96:22:d7:18:00:b8:
06:c3:ad:61:ec:01:a5:63:23:64:b9:d8:ba:7a:cd:
3d:50:f3:e1:55:96:11:20:54:9c:a0:16:7a:62:24:
0f:46:38:24:dc:2a:9f:aa:d2:c1:05:41:20:cc:44:
23:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:41:15:B9:D4:FA:B0:F8:DF:BC:12:BF:68:8A:A6:0C:BF:A2:75:3C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8d324866-9cfe-4453-a162-c3c5555462b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.182.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0f:60:63:aa:c6:77:e5:6d:91:9b:d6:ba:f5:2c:6a:fb:8e:f2:
27:94:e7:e4:d2:08:2f:5c:56:b9:9b:d5:54:af:a2:93:0b:27:
00:9f:c0:46:13:e3:aa:93:5c:e9:c5:fc:16:7f:fd:ce:45:4d:
48:d3:64:17:23:93:32:69:f1:58:a0:35:c5:d5:7b:3a:ef:37:
a8:87:c5:22:48:a4:76:31:2a:91:a9:b8:97:76:64:38:29:62:
a8:70:06:e5:97:46:19:2f:91:78:1d:1f:0a:26:73:3f:d9:f6:
b1:10:5d:7a:af:4f:21:54:72:98:67:09:54:78:c2:5d:25:93:
d1:11:4d:6c:09:3b:20:0f:66:6b:47:82:d9:eb:2d:b8:61:1b:
f0:62:b6:09:3c:35:00:bb:8e:e0:b0:5b:ed:c3:db:9e:8a:1b:
32:18:a4:b1:16:83:8f:63:8f:ea:78:f0:4f:fd:e8:ad:c0:8a:
14:40:59:be:cb:f2:4b:dc:19:6b:37:a8:f0:76:73:e7:66:a4:
6c:1f:57:a5:17:ca:dc:47:32:47:66:9a:8c:af:66:ff:d9:e7:
10:27:e3:74:72:ce:7b:8e:a7:28:72:65:65:eb:9a:a3:ad:19:
44:80:f2:0f:12:7c:42:79:7c:74:ec:22:05:d7:0a:02:68:8e:
1a:3b:f6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:45 2026 by rpki-client