
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c1edc99f-6d41-41c9-8d49-89ed5afe9775.roa
File: c1edc99f-6d41-41c9-8d49-89ed5afe9775.roa (raw, json)
Hash identifier: g55hyjsr1UWHEbLcvIped/lBbxMourvt3rGWhMmrook=
Subject key identifier: 81:CA:4D:59:D4:41:8A:EE:E8:96:BA:35:00:6A:E1:04:A1:E8:E3:9C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4540DC6A32CE983B2B33B5C84069A6C8562B71C5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c1edc99f-6d41-41c9-8d49-89ed5afe9775.roa
Signing time: Thu 23 Jul 2026 14:10:07 +0000
ROA not before: Thu 23 Jul 2026 14:10:07 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 3.2.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:40:dc:6a:32:ce:98:3b:2b:33:b5:c8:40:69:a6:c8:56:2b:71:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 23 14:10:07 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=579eafad403de867a2dcfaf347ef5677b5aea0f627edde94670b21e350117f57, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:27:84:17:a5:4b:b5:78:a2:b5:0e:d1:14:
1d:b6:b2:7c:be:89:39:50:90:53:be:3e:9b:7a:39:
05:8f:a6:f4:22:91:a3:51:df:06:00:f7:4a:36:f0:
63:96:0b:7f:ef:f4:3d:64:12:8a:f6:aa:df:0c:a8:
31:b9:15:8c:53:77:a3:2d:7d:7f:6a:6e:2c:09:fa:
e9:ed:5b:75:60:87:df:e9:a1:a9:e0:3f:ca:30:be:
74:8e:0f:dc:c9:6a:77:7f:d6:78:04:43:61:09:59:
9e:74:a9:40:3c:53:68:5a:f6:22:d8:a5:6c:c3:0d:
45:90:20:e9:9a:37:b3:f5:86:ae:90:7b:2d:38:03:
2e:a6:cd:ca:68:02:bc:bd:4a:76:b6:ed:92:bb:9d:
f9:18:66:9c:b7:3d:09:e0:9a:f7:00:3a:8c:ba:bf:
34:d3:49:8b:7d:23:60:08:df:ad:bd:e6:1f:24:a5:
f0:30:e7:ad:54:5a:9e:40:93:35:7b:d7:63:d4:af:
8e:49:ab:c2:98:4b:a0:b6:d6:dd:2b:e1:fc:87:94:
2e:08:ce:34:ad:b5:65:47:80:6f:18:b4:fa:80:fb:
d3:7b:ef:a4:6b:54:7a:d3:0f:c1:ba:91:c9:90:8b:
5d:ce:09:db:0a:95:dd:0d:29:3c:36:92:8c:7e:7f:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CA:4D:59:D4:41:8A:EE:E8:96:BA:35:00:6A:E1:04:A1:E8:E3:9C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c1edc99f-6d41-41c9-8d49-89ed5afe9775.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.2.69.0/24
Signature Algorithm: sha256WithRSAEncryption
58:59:5a:83:3b:99:6a:42:fa:67:d5:a6:22:c8:3c:7f:ac:11:
92:8f:42:26:42:c2:97:09:d6:bd:da:cd:81:89:8b:fb:51:bc:
05:da:c7:da:4f:d8:2a:65:a8:6c:fd:27:57:03:39:60:b7:b4:
48:88:cc:34:09:5f:81:bc:5c:61:ba:e3:d5:57:70:16:85:26:
8d:91:59:d4:c0:c3:c5:51:ae:3d:16:d0:d3:e2:18:1d:21:6b:
2a:5b:ef:72:84:19:f9:2f:42:d9:3f:39:4c:1d:f1:37:e8:6d:
09:95:54:81:58:eb:c3:c2:61:26:62:7b:fe:2e:63:1e:33:ee:
d4:d6:3b:bb:5c:5a:4f:55:07:cc:16:07:03:c2:9a:12:08:fe:
3a:6e:c7:ec:ed:79:61:88:06:63:d8:e4:9e:01:32:fa:13:ea:
a1:e8:16:4e:1c:1f:b1:46:7a:be:14:ed:e1:4d:32:b0:11:cf:
57:01:12:36:fe:e0:f4:89:ce:7b:57:3f:68:46:27:72:c1:30:
0f:4a:29:a2:25:fb:f9:f2:9d:1c:30:ef:aa:82:75:c4:02:e2:
83:f4:aa:f4:dd:2b:d3:66:a4:f4:22:3a:85:a9:55:26:46:00:
b2:5e:69:80:2a:0c:4c:e4:d9:a4:85:8b:1a:df:96:18:3d:f9:
65:6b:2d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:42:16 2026 by rpki-client