
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ede7f351-4d0f-4c75-9915-6673e09863e1.roa
File: ede7f351-4d0f-4c75-9915-6673e09863e1.roa (raw, json)
Hash identifier: pmkejRCWd0zfFqJ9Eh++oBE421Hiz5EFt8zyOQfWjlk=
Subject key identifier: 4D:AA:4D:6C:33:98:66:80:18:13:20:52:33:F4:F3:8B:0A:F8:C5:B3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3829BD1FC3A698119ADAF087CE5AACFFA155D673
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ede7f351-4d0f-4c75-9915-6673e09863e1.roa
Signing time: Fri 08 May 2026 01:10:48 +0000
ROA not before: Fri 08 May 2026 01:10:48 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.15.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:29:bd:1f:c3:a6:98:11:9a:da:f0:87:ce:5a:ac:ff:a1:55:d6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 01:10:48 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=8f96ce80c8e9f86e68d433e2a51861c137da0dfb9fab8416f7ee420253fca317, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:67:68:d8:6c:02:25:9b:17:a9:ef:aa:fa:
fc:72:73:3b:72:31:82:e7:64:34:b1:b7:23:e9:51:
b8:b1:88:e6:24:80:1a:ea:61:e4:50:77:2a:e8:c4:
88:bc:5b:b6:8c:41:b0:09:eb:e3:4b:40:08:21:ea:
a3:bb:09:2f:d0:11:26:86:f2:22:a1:d6:84:b4:b9:
de:8c:fb:00:eb:1b:2c:67:12:86:b1:70:87:ad:40:
26:c6:ef:b9:3c:74:4e:95:94:68:7d:de:ea:44:97:
c9:07:d8:5f:74:a1:df:2a:83:99:47:a4:80:74:c9:
ff:8a:b8:f6:7a:76:b5:a4:06:74:52:e5:b2:f2:24:
d6:a9:79:81:57:64:31:8c:54:d7:51:45:d8:27:ac:
60:21:65:da:ec:77:40:c4:65:7b:75:07:6d:74:56:
e4:12:7d:bc:43:17:c4:70:a6:2f:4b:65:f4:af:42:
b4:26:7d:c6:f8:71:10:af:3d:6b:1d:f3:f8:3c:66:
fd:2c:83:0e:6c:4e:47:cb:ef:81:af:c9:7e:5d:02:
8c:a7:2c:93:ec:6a:64:ca:2a:14:a7:b3:d4:94:26:
27:53:3c:aa:f0:06:f2:df:b1:6a:a6:4c:c4:a5:b8:
f2:d8:fe:9d:10:7d:cf:8c:47:ef:05:95:c3:8b:e3:
2a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AA:4D:6C:33:98:66:80:18:13:20:52:33:F4:F3:8B:0A:F8:C5:B3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ede7f351-4d0f-4c75-9915-6673e09863e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.15.64.0/18
Signature Algorithm: sha256WithRSAEncryption
8e:73:bd:94:b6:8d:2a:73:af:85:72:94:4f:53:40:c6:1e:96:
06:82:5a:54:de:e9:6f:43:60:38:3f:7b:14:68:16:95:e4:99:
06:0a:31:d2:10:74:48:1b:f6:2b:82:f1:18:b2:6b:c9:fb:67:
73:82:f4:e1:bf:26:b7:86:71:c2:a9:c3:99:13:cb:2c:98:54:
d0:55:5b:09:0d:31:24:bd:3d:42:67:16:67:52:ae:70:9c:fb:
56:10:48:76:7b:9e:03:1e:6f:5a:66:c0:f4:b4:5b:7d:bc:86:
d3:7b:ab:12:33:49:cb:85:cb:3d:5a:83:9a:24:73:b5:bc:08:
28:21:37:67:63:9e:29:4e:37:3a:b5:a4:74:74:3e:17:3e:c9:
30:a2:88:50:51:44:a6:6e:ff:4e:c1:d7:7a:37:ba:fb:a8:15:
ea:58:2a:2f:c2:5d:7e:51:32:a1:7c:ff:38:87:14:02:a7:ec:
f7:62:36:69:0b:0f:52:1a:9e:07:61:3c:00:5e:8e:7c:56:85:
11:2f:29:83:5c:30:3d:82:9d:ef:2b:83:c7:98:60:d7:d6:e3:
0b:53:1f:56:27:f9:67:47:3a:8d:54:ed:2f:54:40:dc:5e:d0:
7e:3d:7b:c5:52:5d:41:e0:1b:c9:d3:60:63:98:1e:71:b2:88:
b7:63:61:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:25:16 2026 by rpki-client