
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bab7b6a7-7e37-4432-90ce-4d8046584c47.roa
File: bab7b6a7-7e37-4432-90ce-4d8046584c47.roa (raw, json)
Hash identifier: 4iegToKGKvsyQPru/jni0lgzLeS8THUdKPvg55rsTv0=
Subject key identifier: 0C:90:36:1F:BC:68:C8:32:92:7E:1A:2E:11:AA:7F:06:E2:E8:72:6C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3B1AAFCA3EAF7CD00F76B4BAF5815239D01478E8
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bab7b6a7-7e37-4432-90ce-4d8046584c47.roa
Signing time: Mon 04 May 2026 14:40:08 +0000
ROA not before: Mon 04 May 2026 14:40:08 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.197.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:1a:af:ca:3e:af:7c:d0:0f:76:b4:ba:f5:81:52:39:d0:14:78:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 4 14:40:08 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=5d48695fe47e209049702d1ebbf17805f34049cc030c9f8af177699303c3c131, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:23:70:0b:25:6e:2e:b5:96:0d:f3:f2:08:
9a:16:b9:85:21:0b:2f:0c:f8:46:58:2f:c5:fb:95:
bd:43:f6:de:b8:8c:77:7e:5d:26:8b:ba:d0:fd:bb:
9c:04:b3:46:77:5e:80:6f:a7:72:59:17:26:f1:1e:
48:61:34:a0:4b:3d:95:57:8a:5c:c4:72:20:df:5b:
f5:11:9d:de:86:20:bf:be:e3:db:24:16:27:43:bf:
7d:e2:b7:e5:c5:66:57:79:e7:77:db:ab:da:a7:60:
d6:64:17:d0:00:de:f0:20:76:9a:d3:20:14:94:5a:
1f:d5:f2:ad:b1:a5:66:54:88:40:b4:a7:6d:31:4d:
dc:60:4d:84:48:46:6f:37:c0:79:43:8d:37:40:64:
81:2c:76:b7:7c:82:86:db:2c:66:d7:56:5f:a8:f8:
e2:c8:47:f5:0b:5d:0d:29:a1:bd:00:f6:83:db:b7:
2b:79:63:51:fc:fe:14:b7:31:82:d4:bb:96:a9:fe:
89:66:2b:17:90:0c:8b:d3:9e:27:63:11:51:db:80:
ca:48:00:c3:92:1b:ac:1f:85:68:5d:53:39:f1:00:
4f:0d:65:a9:26:86:1f:36:67:8f:ae:8e:11:de:1f:
cb:6a:5d:5d:b2:e4:2a:c3:54:11:88:69:77:61:85:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:90:36:1F:BC:68:C8:32:92:7E:1A:2E:11:AA:7F:06:E2:E8:72:6C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bab7b6a7-7e37-4432-90ce-4d8046584c47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.197.240.0/20
Signature Algorithm: sha256WithRSAEncryption
57:99:49:3b:d3:ae:1e:29:02:53:77:ba:17:fc:09:56:53:3a:
80:e5:ae:cb:93:ac:35:2a:c7:47:d2:f9:2c:03:15:3a:c2:f9:
f7:37:3c:97:d3:d2:6f:c6:ae:ab:ac:f6:cd:fb:9d:63:d9:3a:
b4:3f:58:95:7b:29:a9:84:26:7d:f4:ac:98:c4:1f:15:ed:42:
01:cb:1f:5d:0a:8a:f2:d7:a7:dd:4a:8c:04:e2:e1:9f:ee:20:
dd:71:37:4d:8f:b9:13:07:5e:bb:1a:d3:21:50:f5:4d:53:58:
d3:44:2e:f0:27:a7:3c:94:62:ee:d0:e0:65:6c:72:71:ec:40:
ad:c7:f5:6a:ff:1c:e6:85:a7:e2:d3:77:5b:48:29:7d:25:01:
bc:cc:eb:60:07:d2:44:bf:be:ad:6e:2c:e7:a9:6e:8b:94:9a:
0d:0b:6f:ea:d4:2b:04:47:56:72:83:4b:64:4a:fd:1c:2d:8b:
4b:54:24:9b:ea:59:00:18:6f:72:d9:3a:5d:72:ff:14:57:a2:
7e:85:42:78:d9:23:02:ef:0a:19:eb:80:ea:74:f1:d0:00:b8:
03:a1:07:ed:09:22:af:3b:10:32:13:fe:be:ab:17:26:9a:b8:
31:35:f8:8d:e9:71:f2:d5:79:b5:2c:cf:9e:0c:3d:ff:c0:a9:
0d:88:de:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:00:32 2026 by rpki-client