
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a926660f-724f-4d66-b9f3-dd5b25efa483.roa
File: a926660f-724f-4d66-b9f3-dd5b25efa483.roa (raw, json)
Hash identifier: 9+IcjMjbcKpt6txcAhP98QhfpCU+8sXlIXp5Om1f2OA=
Subject key identifier: 26:E5:32:3E:7F:0B:B9:0E:C2:F1:34:62:6A:A0:DB:FE:46:90:3D:5F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 71E3653A1DE849EFCF6B198F35B19D365592AC19
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a926660f-724f-4d66-b9f3-dd5b25efa483.roa
Signing time: Mon 04 May 2026 14:40:03 +0000
ROA not before: Mon 04 May 2026 14:40:03 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.181.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e3:65:3a:1d:e8:49:ef:cf:6b:19:8f:35:b1:9d:36:55:92:ac:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 4 14:40:03 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=23e58dc1a3b791297eaf994bcf3d893ebd795879a3209c387466ed652e5d34a6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:6c:7e:0a:ef:b2:de:7d:4e:9c:17:ea:5a:
7d:43:8d:d6:d7:2c:fa:5a:91:a0:a1:0e:eb:8f:8d:
fb:82:9a:cc:52:f3:94:6a:07:f8:25:02:18:2a:d2:
32:dd:79:fc:ee:fb:d5:3f:ec:5d:d1:b5:42:d2:da:
6e:b7:13:26:ee:40:23:9f:00:2a:fe:8b:66:ac:7c:
34:82:a6:04:b6:6f:f8:7a:70:3d:9d:00:01:91:bb:
3a:28:24:a4:d3:cd:08:7e:80:52:27:29:70:5b:fe:
c7:59:3f:9a:b7:62:48:16:7a:5c:d3:53:9a:59:69:
ea:c3:4b:cc:d7:8d:7f:88:33:aa:88:98:d4:41:4f:
99:c1:45:bb:1c:3c:dc:72:72:0f:f0:e6:10:c8:a8:
0a:af:a2:99:58:ef:4a:e8:e7:a6:b2:9d:a5:4d:77:
a2:a8:7e:a0:c7:d4:f8:9e:83:39:43:8a:31:9c:b5:
b6:cc:0d:02:55:d9:d8:3b:b1:d7:d4:a4:3f:d4:d9:
15:e1:f6:d2:1b:cd:cd:51:17:82:ec:db:c7:9b:91:
bc:23:d6:03:32:3a:a4:42:7d:ff:2e:c4:f9:d5:42:
0b:a6:08:65:5d:4c:7c:da:cd:1f:c7:6a:da:00:65:
1a:d4:55:76:0a:20:57:13:f6:f7:79:b3:68:18:ef:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E5:32:3E:7F:0B:B9:0E:C2:F1:34:62:6A:A0:DB:FE:46:90:3D:5F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/a926660f-724f-4d66-b9f3-dd5b25efa483.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.181.104.0/21
Signature Algorithm: sha256WithRSAEncryption
24:29:87:f8:25:15:4d:66:06:85:48:07:47:7d:57:d5:0f:cc:
fa:19:65:08:86:a3:d6:9d:5c:52:4f:9d:d4:3a:c8:98:23:e8:
b1:ed:d6:10:5d:06:1b:09:c7:3e:b9:9f:a4:1e:9c:cf:8b:be:
4f:fb:92:e1:84:26:e9:90:7a:11:6d:34:0a:4e:27:e0:48:4c:
21:6e:15:bf:3b:1a:cc:d1:e9:58:c9:7e:b7:14:e2:ab:18:ee:
78:ad:68:14:fe:5f:57:b8:d7:c8:15:d5:1a:87:1c:56:af:d0:
91:d9:d9:fa:47:08:33:c0:a5:02:45:e2:d0:d6:93:78:1a:a1:
47:95:99:9c:be:d4:73:ae:65:3c:e5:b1:15:8b:ff:1e:2c:02:
10:3c:f3:bc:38:2b:be:c4:b0:69:ec:c3:25:54:07:1d:d4:c0:
e7:99:44:ea:59:e1:50:41:31:c2:27:ab:76:db:0c:7d:d8:8b:
69:7b:a5:b3:16:bf:c2:10:54:5b:29:d6:47:fe:23:b2:02:79:
3a:fc:25:2a:8b:a5:08:bb:ef:10:1d:bf:bb:6d:2d:75:b2:90:
fd:69:f6:49:04:a1:f9:8b:28:49:c3:85:a6:cd:5a:c5:32:0d:
dc:ac:d5:55:4e:92:35:cf:87:b3:b0:e4:52:a8:19:5d:d5:d9:
90:42:73:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:36:03 2026 by rpki-client