
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acdcc333-c896-4103-b807-398a4c4209e5.roa
File: acdcc333-c896-4103-b807-398a4c4209e5.roa (raw, json)
Hash identifier: qbX/jpfpopHDXkyqjOI+QOtCeDIEcFsJaPJiv3L6NjQ=
Subject key identifier: DD:64:C6:BC:A7:29:F0:AB:71:37:8B:38:B7:3C:B2:5F:69:7F:06:E0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7B64513441DC142811ABB1524576A878F63729AE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acdcc333-c896-4103-b807-398a4c4209e5.roa
Signing time: Fri 08 May 2026 00:40:10 +0000
ROA not before: Fri 08 May 2026 00:40:10 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.160.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:64:51:34:41:dc:14:28:11:ab:b1:52:45:76:a8:78:f6:37:29:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 00:40:10 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=dcfad3f1673a7773ad3748906fc28490e66b70981c0bc6e2d485b60e955e085c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:dd:75:ee:70:b5:3d:e2:4a:fe:e4:7c:61:
e3:7f:e4:78:53:ef:68:29:87:02:69:25:83:14:a4:
98:09:f0:6d:bf:58:39:da:39:34:4c:c0:96:cf:e5:
26:c2:d2:1d:1a:e7:c7:31:3c:6e:f7:c9:48:89:35:
65:05:57:38:39:fa:9a:36:4e:e7:54:96:16:43:5c:
5d:c0:6a:f4:08:fb:1f:48:df:d8:5f:6d:25:c4:cf:
3b:0e:88:f9:a0:fc:33:de:6e:a2:c0:7f:00:44:bf:
76:44:db:1a:8e:90:bf:fc:01:30:4a:2d:0b:5f:75:
0b:34:42:05:46:67:0e:f1:19:3f:b8:19:52:72:95:
8d:b5:a4:6c:56:e1:5f:8f:58:ab:98:72:e8:c6:19:
dd:4e:2c:11:cd:cc:b4:09:9e:b1:f5:13:3b:ec:fc:
22:96:9a:35:0d:6a:2f:6a:e8:d2:6c:94:1f:39:05:
96:71:d4:d6:b6:92:70:b0:7a:55:7c:b1:92:51:ee:
1e:45:d1:79:d7:4a:7c:51:af:f5:c2:c3:37:15:3a:
3b:7b:03:83:ff:0a:88:25:92:09:8f:1e:b6:5e:61:
86:b3:d4:ba:74:b8:e6:01:27:e4:4b:2d:4a:95:e3:
a9:d5:a5:34:1b:52:ee:c6:13:c7:31:d1:28:da:38:
6c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:64:C6:BC:A7:29:F0:AB:71:37:8B:38:B7:3C:B2:5F:69:7F:06:E0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/acdcc333-c896-4103-b807-398a4c4209e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.160.128.0/17
Signature Algorithm: sha256WithRSAEncryption
7d:15:50:15:0a:31:21:4a:7c:0a:c2:58:ed:7b:f4:85:eb:d6:
38:4f:c9:39:f6:2c:88:20:73:61:6e:77:07:c1:5b:8d:9c:7b:
dc:18:e9:33:73:de:8a:11:c4:6f:3b:46:d3:df:09:ed:4f:6c:
80:46:47:27:9a:ce:c2:00:10:d5:29:1f:0b:29:e5:48:71:43:
cf:ec:bc:a1:5e:47:aa:35:3e:b9:ce:28:f3:f4:75:84:5a:aa:
17:d0:4b:6c:b1:88:df:ca:3e:d0:6f:6e:29:fe:16:1c:a7:e4:
09:1b:c3:17:8b:f0:25:27:f4:f0:11:d1:39:5c:e7:4e:d1:25:
6c:13:b8:ef:32:f5:d4:c1:f2:cb:37:a6:ce:7c:8b:78:8b:07:
af:09:16:f6:ce:ab:69:c3:36:98:29:c1:55:10:dc:48:95:dc:
4f:43:c1:87:0d:70:fb:37:58:b7:de:98:15:99:05:89:41:12:
d0:cc:93:e7:5b:cb:7a:00:ba:48:26:a5:77:7d:88:2c:c5:f0:
d7:8d:e2:cd:cd:76:13:17:00:79:88:9e:8b:a7:9d:2d:ec:31:
58:80:54:00:25:c1:44:92:e0:35:fd:78:ce:84:63:b9:28:f2:
b4:bc:af:76:c2:fd:fe:c3:26:57:f6:47:12:7c:76:e6:c9:8d:
8c:af:9d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:25:40 2026 by rpki-client