
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8da99a1-9b93-4e3e-98d2-a2d003ec40d7.roa
File: a8da99a1-9b93-4e3e-98d2-a2d003ec40d7.roa (raw, json)
Hash identifier: A7ix6IGe/4TApgUlhPci7QH/ojtJB70GVdBAodLuuXg=
Subject key identifier: C2:05:8A:54:4B:BE:35:16:C4:FD:71:5E:5C:F9:6B:81:F1:C5:BB:D9
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6E306DFFA159D93B92077F4D9704AA9DA1BCAA4D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8da99a1-9b93-4e3e-98d2-a2d003ec40d7.roa
Signing time: Fri 08 May 2026 02:21:09 +0000
ROA not before: Fri 08 May 2026 02:21:09 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.214.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:30:6d:ff:a1:59:d9:3b:92:07:7f:4d:97:04:aa:9d:a1:bc:aa:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 02:21:09 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=61ad7316e7a86077ecea78e16b216c05d40ddd2e5698e3cf132f37ce7fda1d36, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bf:99:c6:4b:fc:cd:e0:b2:32:e5:29:8f:72:
66:14:ab:5b:4f:c2:aa:24:a2:b4:94:54:eb:1c:ed:
43:fe:cc:db:22:b0:8d:a0:15:c6:51:8a:1b:71:6f:
c9:28:d5:15:31:f9:47:00:01:79:20:3f:fa:0e:24:
4e:93:d4:52:b1:1f:9e:e3:d2:50:b8:95:23:9a:8b:
8c:ad:a4:07:c9:9e:9f:a9:cd:0a:6e:5d:e7:eb:d3:
12:d8:de:87:d7:ba:25:12:3a:de:b4:22:6e:80:3e:
24:94:35:9c:8b:6e:1b:0d:a2:d8:1e:2a:eb:94:f1:
d3:12:7c:a4:0c:24:f1:d5:94:a2:14:02:22:57:ff:
e4:6e:43:3f:5d:e3:e4:a3:da:c2:55:90:f7:77:0f:
fe:e7:74:95:bb:67:ad:32:98:8b:3e:12:93:51:37:
ae:cc:9e:6f:b6:55:44:2c:09:37:1f:38:99:de:87:
62:f1:a7:a7:9e:a1:cf:ca:fd:68:75:31:bf:bc:a8:
02:29:d0:86:43:25:ca:e7:84:00:45:da:cb:21:e7:
d6:ef:30:c0:f4:56:a0:74:10:10:28:e0:15:db:41:
72:c7:bd:9f:6b:88:a5:11:4e:9b:2e:f6:03:cd:b1:
83:b6:70:83:e4:31:6f:59:50:67:6a:aa:86:c2:e5:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:05:8A:54:4B:BE:35:16:C4:FD:71:5E:5C:F9:6B:81:F1:C5:BB:D9
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a8da99a1-9b93-4e3e-98d2-a2d003ec40d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.214.32.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:c5:1c:d2:d8:f0:8d:64:81:78:d0:d5:ee:21:d8:59:47:8b:
8a:8a:3b:e9:0a:ab:b7:2f:9b:0a:09:f7:4f:72:59:d5:7c:eb:
4c:98:62:fe:36:01:55:2b:c6:05:6f:fc:99:ad:cf:92:9b:2d:
ae:68:76:a7:16:7d:ca:06:fb:7d:d4:c3:61:cd:e7:27:3f:27:
f0:d7:50:97:71:ff:22:37:af:18:00:1d:ba:0f:a2:27:2e:c9:
62:bb:f9:b4:a8:52:39:d9:63:2d:b8:2e:c3:61:7f:ca:f9:2e:
96:69:2d:18:6b:56:94:12:61:b8:53:3e:29:66:8a:ae:c0:0d:
7c:d3:5a:22:98:10:b9:6e:04:78:06:2a:aa:2a:5e:21:ec:7c:
db:6d:9a:23:07:ec:18:69:4a:77:46:a4:ff:97:62:07:42:19:
6f:50:60:46:21:49:56:64:2e:90:ce:c3:07:8c:97:26:66:6c:
55:82:66:bd:fa:76:fc:48:c3:f9:9b:ac:ca:3b:ec:44:47:bc:
b0:e0:ec:56:4e:22:7e:de:18:a3:63:bf:be:ae:f6:fc:f4:ea:
02:a1:83:ba:c6:43:b8:dd:82:4e:64:00:37:ff:5a:48:82:ba:
18:cb:ad:f4:b9:24:9a:d9:c8:a3:08:ca:27:b5:9f:7e:8a:fb:
b5:df:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:21:20 2026 by rpki-client