
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee6fe2ba-b215-47b2-a4c9-887dad9de8ed.roa
File: ee6fe2ba-b215-47b2-a4c9-887dad9de8ed.roa (raw, json)
Hash identifier: ZzYQIP2hfdtfkQo1rrgjLO6CTNXPsBehs11LuzGfeKc=
Subject key identifier: C2:98:8D:F0:84:22:D6:46:9D:EF:72:C9:1A:96:78:7B:20:94:E9:E8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5E28D744A764E251A4D08E6C5E3D552EDABDF929
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee6fe2ba-b215-47b2-a4c9-887dad9de8ed.roa
Signing time: Sat 09 May 2026 00:40:13 +0000
ROA not before: Sat 09 May 2026 00:40:13 +0000
ROA not after: Fri 07 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.40.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:28:d7:44:a7:64:e2:51:a4:d0:8e:6c:5e:3d:55:2e:da:bd:f9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 9 00:40:13 2026 GMT
Not After : Aug 7 23:59:59 2026 GMT
Subject: serialNumber=aee5f8a923fac93cba2857a168970ef5f41fe3bd29e3f1779f3437872c51a821, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:28:39:96:44:15:60:ac:b2:95:c7:98:b2:
95:cc:ff:a5:37:2d:0e:8d:ef:80:e5:55:cd:d4:70:
f4:76:78:b5:42:6e:b9:45:2d:53:e0:e1:6d:dd:5c:
17:3e:bf:27:19:84:ac:cf:a0:a4:55:6e:f8:87:b5:
70:fe:00:05:6d:89:fc:a4:66:f1:2b:cf:4b:9b:b3:
8c:a2:75:c4:1e:3b:60:37:f9:b9:ea:fb:f5:84:94:
65:a0:ac:ba:78:b3:a1:47:91:22:59:50:c0:14:d8:
c9:7a:c5:60:b8:bc:51:e4:8b:aa:98:37:4d:99:c6:
d3:0c:e1:2f:a5:0b:4c:a4:7e:cd:76:9d:83:1c:ef:
aa:65:52:03:c2:86:51:2e:8a:45:bb:03:7e:4c:74:
15:fb:8a:41:a4:69:ad:9d:49:eb:93:b8:14:23:c5:
04:e2:c2:17:46:23:60:bb:48:d2:6d:ac:72:80:dc:
67:3e:55:e1:10:1f:df:e5:55:0c:ba:d0:54:f6:c7:
d6:be:05:55:1b:dc:05:da:89:5e:b7:cf:bc:c5:eb:
94:ad:d1:38:80:62:c8:ff:14:40:d5:9c:81:73:03:
46:7f:0e:24:30:73:28:bd:bd:3a:4d:cc:23:5c:82:
8a:24:06:d8:84:f8:73:1b:b4:05:b1:b5:3c:63:1d:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:98:8D:F0:84:22:D6:46:9D:EF:72:C9:1A:96:78:7B:20:94:E9:E8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ee6fe2ba-b215-47b2-a4c9-887dad9de8ed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.40.0.0/18
Signature Algorithm: sha256WithRSAEncryption
22:f4:ec:98:d7:90:8a:c6:5f:a1:3a:0c:db:ff:e5:46:71:4d:
a9:91:88:75:02:b7:3a:d4:e1:13:4a:a2:fe:81:1c:c0:a9:13:
45:b8:c6:7d:e0:49:e1:58:2c:3e:5e:1e:13:aa:9c:f1:98:85:
1b:4b:89:f0:2f:5a:86:95:4e:04:47:8b:06:4a:5e:49:b8:bd:
7f:fc:b3:9e:85:7c:10:84:20:b2:fd:1e:68:50:80:26:ce:f0:
b3:81:59:6e:93:6c:2b:2f:5d:b3:a7:84:3a:fc:ad:66:14:66:
7b:4b:25:8d:53:70:d5:c3:5f:14:06:41:0d:81:b2:72:38:b7:
58:22:86:f5:1e:db:de:fd:64:e3:17:bd:6b:39:0a:72:f1:c8:
9d:c5:de:ed:4c:ff:00:b0:71:01:c2:d6:c9:5f:e0:65:a2:55:
2a:5f:68:e1:03:e4:eb:5a:3e:26:b8:7e:58:27:5b:53:5f:b0:
65:4a:cf:05:3c:25:46:23:6f:e5:ae:3f:6b:6f:1e:6b:df:6f:
e0:0e:57:7e:f7:53:42:40:61:dd:7a:d7:ff:ad:2a:45:10:91:
11:7d:c5:2d:08:c1:e3:34:ce:44:28:58:aa:11:86:3d:fc:e2:
09:2c:ca:7f:d4:00:e2:d2:42:64:28:2f:7f:43:bf:67:5d:c4:
4b:b6:7f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:26:23 2026 by rpki-client