
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b3c15da3-724a-4835-ab80-0663647939de.roa
File: b3c15da3-724a-4835-ab80-0663647939de.roa (raw, json)
Hash identifier: ZW5mZh+4s/0h7BlpJRbVNCkFTlpod79qDjJN21fFbZg=
Subject key identifier: 5F:DA:28:FE:32:E1:F1:DF:D8:FE:0C:9C:95:99:78:2F:33:FE:D2:88
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5C344943CA60DFE5A0F908A6A37DF91A36A42CF4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b3c15da3-724a-4835-ab80-0663647939de.roa
Signing time: Thu 23 Jul 2026 14:35:04 +0000
ROA not before: Thu 23 Jul 2026 14:35:04 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.93.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:34:49:43:ca:60:df:e5:a0:f9:08:a6:a3:7d:f9:1a:36:a4:2c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 23 14:35:04 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=5fd9de9ddfc1b6a29ed80080e6a49d74378675ab290424e7851fbf3535077f90, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fd:a1:5b:49:32:b6:80:63:cd:8f:82:d4:43:
e2:e9:7c:36:0b:01:fc:20:61:df:02:ae:a0:8b:29:
1c:75:56:85:90:75:c9:7d:df:62:14:20:16:cf:61:
b1:97:6c:7c:a7:ee:55:c0:fc:2e:a0:6e:8c:0c:e2:
c2:2d:ca:bb:29:3c:20:d1:a7:83:c9:bf:fe:29:2d:
fe:f4:c0:6c:86:27:70:a3:19:fe:d7:91:28:46:08:
a0:b0:9c:2c:90:4c:ae:dc:9f:b1:fe:22:70:fc:9f:
29:69:71:69:90:e5:02:dc:3f:76:78:78:29:ce:b8:
97:3d:76:ca:02:6f:d2:0c:0f:22:fd:a7:6d:03:13:
8d:ee:d7:75:a6:05:6d:ac:1c:a0:13:2e:11:87:12:
99:65:6e:1a:ce:be:1d:fb:0a:14:26:4a:24:eb:9a:
f9:d8:b6:17:e5:b6:79:cd:c3:56:0b:32:64:f9:cd:
7b:21:d2:19:3d:a5:d7:d5:ec:35:f8:1f:76:01:e7:
f7:ac:41:f4:e4:8e:64:78:50:80:c8:69:d4:ca:6d:
fe:c0:10:42:3e:4c:4f:62:a4:bd:23:d0:ab:9d:ab:
f1:b9:13:25:8b:65:a4:22:f3:6a:69:25:a5:3c:fc:
9f:44:81:38:83:12:dc:d6:fc:6a:2b:d4:15:72:ad:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DA:28:FE:32:E1:F1:DF:D8:FE:0C:9C:95:99:78:2F:33:FE:D2:88
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b3c15da3-724a-4835-ab80-0663647939de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.93.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:65:e4:8a:e2:a8:9d:8e:0b:f8:ca:a9:92:b5:62:e5:4d:49:
63:77:77:7d:b7:c3:06:4d:b5:e4:19:ad:1a:0d:e7:27:bc:47:
c8:9a:ec:cc:bf:b4:f3:42:0b:5d:32:28:26:b2:af:6c:0a:16:
f4:34:2c:0e:ff:a0:60:94:35:20:69:7b:78:85:28:36:5d:d0:
0c:0c:42:fd:a2:ec:2f:f4:c6:03:58:c9:ca:3a:d3:50:50:9d:
a6:6d:d8:b4:0d:26:72:0b:0f:90:18:39:c1:50:96:2f:54:82:
a2:00:7f:e7:a9:63:ce:98:c6:05:06:c0:da:67:39:65:aa:bf:
80:6d:b5:7f:12:cf:20:e6:9f:35:96:3d:78:4d:b4:cf:bc:fa:
ff:34:f6:f4:bf:17:ad:1b:0d:a8:ee:30:8d:a8:c5:76:a1:72:
0d:80:4a:6e:cc:85:2e:9d:c4:8d:ba:86:74:2f:e1:ba:7f:f7:
24:fe:4b:14:a6:3e:cc:48:75:55:76:f0:56:c9:1d:61:cf:0f:
ef:24:c5:d6:0a:f4:1c:78:ee:02:54:68:78:fa:2c:3f:bf:54:
a6:d0:b5:0b:45:dc:22:50:7f:69:28:61:c1:b2:22:2a:2e:65:
11:3c:5b:a6:fe:56:7e:b5:95:9e:93:1f:c8:d4:be:c2:85:3e:
1c:88:dd:9b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUXDRJQ8pg3+Wg+Qimo335GjakLPQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNzIzMTQzNTA0WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZmQ5ZGU5ZGRmYzFiNmEyOWVkODAwODBlNmE0OWQ3NDM3
ODY3NWFiMjkwNDI0ZTc4NTFmYmYzNTM1MDc3ZjkwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDN/aFbSTK2gGPNj4LUQ+LpfDYLAfwgYd8CrqCLKRx1VoWQ
dcl932IUIBbPYbGXbHyn7lXA/C6gbowM4sItyrspPCDRp4PJv/4pLf70wGyGJ3Cj
Gf7XkShGCKCwnCyQTK7cn7H+InD8nylpcWmQ5QLcP3Z4eCnOuJc9dsoCb9IMDyL9
p20DE43u13WmBW2sHKATLhGHEpllbhrOvh37ChQmSiTrmvnYthfltnnNw1YLMmT5
zXsh0hk9pdfV7DX4H3YB5/esQfTkjmR4UIDIadTKbf7AEEI+TE9ipL0j0Kudq/G5
EyWLZaQi82ppJaU8/J9EgTiDEtzW/Gor1BVyrddjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUX9oo/jLh8d/Y/gyclZl4LzP+0ogwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2IzYzE1ZGEzLTcyNGEtNDgzNS1hYjgwLTA2NjM2NDc5MzlkZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA0XT0wDQYJKoZIhvcNAQELBQADggEBAGpl5IriqJ2OC/jKqZK1YuVNSWN3
d323wwZNteQZrRoN5ye8R8ia7My/tPNCC10yKCayr2wKFvQ0LA7/oGCUNSBpe3iF
KDZd0AwMQv2i7C/0xgNYyco601BQnaZt2LQNJnILD5AYOcFQli9UgqIAf+epY86Y
xgUGwNpnOWWqv4BttX8SzyDmnzWWPXhNtM+8+v809vS/F60bDajuMI2oxXahcg2A
Sm7MhS6dxI26hnQv4bp/9yT+SxSmPsxIdVV28FbJHWHPD+8kxdYK9Bx47gJUaHj6
LD+/VKbQtQtF3CJQf2koYcGyIiouZRE8W6b+Vn61lZ6TH8jUvsKFPhyI3Zs=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:54:26 2026 by rpki-client