
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c1121342-9f44-4d24-b703-ca1361291d77.roa
File: c1121342-9f44-4d24-b703-ca1361291d77.roa (raw, json)
Hash identifier: 1qy2QhDaY6wBdqMV0vQCvH5nmUqDM8v1F3tTu9mFgKI=
Subject key identifier: 79:36:66:86:13:C0:CB:5A:0C:DA:E1:60:01:40:61:50:64:E6:F7:F5
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 59987B35752B9A71A44A6DA1F7B39AEFC2BCA3EB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c1121342-9f44-4d24-b703-ca1361291d77.roa
Signing time: Mon 11 May 2026 01:20:07 +0000
ROA not before: Mon 11 May 2026 01:20:07 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.158.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:98:7b:35:75:2b:9a:71:a4:4a:6d:a1:f7:b3:9a:ef:c2:bc:a3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 11 01:20:07 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=66c45545b550152893ee2c3eada378538f45e8b08e4dd5381dc45019aee97889, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:81:80:bb:cb:c1:a9:66:bd:fd:37:46:ba:
69:23:13:f4:3f:15:a3:f0:1f:81:f8:32:18:3c:fc:
4f:8e:52:fd:73:18:bf:2d:84:8a:f2:52:bc:49:41:
95:74:ba:c8:ed:90:ba:dd:89:15:1a:25:57:83:d8:
ed:3f:c1:c8:42:78:d1:e9:5c:e9:73:7b:c5:3d:d5:
91:2a:ef:bd:b0:d2:e3:07:7f:7e:8e:24:b7:f1:f4:
91:4c:7f:4c:81:ce:de:10:b9:00:18:f0:81:8f:9f:
47:0d:4f:4d:8b:86:a2:e4:c7:be:3f:c0:66:cf:cf:
ac:f7:3d:75:41:a3:a6:8c:08:ce:5c:a2:f1:bb:f7:
cf:e9:77:25:4e:81:8d:4a:5b:16:43:4c:e7:67:7e:
0d:50:4a:e3:cf:fd:f2:2d:67:3d:42:bb:e0:fe:a2:
ef:b5:1b:3e:64:8e:89:06:df:4e:23:2d:a5:b4:f8:
c3:7f:5e:a4:0f:7c:ea:ce:ed:e8:6f:c2:47:7a:63:
ed:e2:1a:a5:6d:78:08:d9:3c:f1:a9:76:9a:cc:e8:
92:20:63:c4:21:24:7d:c2:5f:e2:1a:e8:03:c9:d1:
ee:0d:cb:31:1a:09:7d:67:e2:ec:81:5c:5c:50:0e:
39:0c:09:a9:bb:33:99:11:da:94:2b:30:e6:bc:6f:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:36:66:86:13:C0:CB:5A:0C:DA:E1:60:01:40:61:50:64:E6:F7:F5
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c1121342-9f44-4d24-b703-ca1361291d77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.158.176.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:24:e5:3c:c6:28:0a:8c:cd:84:fd:52:1d:6b:20:0b:ef:3e:
e5:b7:6b:df:23:3b:18:5e:ee:b1:c7:24:2d:63:5d:6c:79:df:
00:30:26:c5:67:69:39:0d:aa:ab:ad:52:ab:b1:da:07:2e:21:
20:8c:ab:a3:03:d3:ee:b2:bf:78:24:3e:94:6a:d9:f2:48:77:
2e:5a:bc:9f:4e:d4:f0:17:d9:45:85:2a:70:1f:f8:e9:df:c2:
1d:89:fc:fb:1e:f4:82:b0:e4:16:7d:25:8d:83:7b:97:03:5a:
01:75:fd:49:db:9e:64:cb:b1:11:fc:2c:f4:52:31:48:f5:ff:
38:7a:5e:67:fe:73:8c:0a:22:2b:24:e7:09:34:b3:a0:2a:ac:
0b:98:21:ad:0a:48:2d:52:aa:ce:82:99:39:ba:95:e5:1b:a6:
fc:44:85:97:89:30:e5:bc:11:92:a0:65:e1:13:d3:fb:e1:ad:
c1:a7:a3:1f:e0:e9:5e:6c:26:1b:31:64:8b:49:e3:dc:64:ce:
94:77:32:6a:eb:2b:56:9d:8c:67:e1:eb:42:ce:ea:d7:9d:da:
48:3a:19:b9:90:6d:b7:b8:ab:7d:62:aa:5f:b0:16:da:19:0a:
6f:f8:6e:1a:37:a4:31:78:bc:e1:ab:3d:f4:51:e1:8b:20:5e:
c4:fc:42:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:24:52 2026 by rpki-client