
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef4d1a45-51c1-49a6-8ff0-39e1b6be40a0.roa
File: ef4d1a45-51c1-49a6-8ff0-39e1b6be40a0.roa (raw, json)
Hash identifier: qUVQM54eeoajvTwQ0tdZ6UyDBM5HOVxHOK2tSSxnluI=
Subject key identifier: DA:78:7B:50:FE:94:D2:FA:21:9D:61:D3:3D:E1:EA:F3:74:45:C2:45
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5247684FB81B64D2775B88CDF1377BCD22736D0C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef4d1a45-51c1-49a6-8ff0-39e1b6be40a0.roa
Signing time: Fri 08 May 2026 01:50:48 +0000
ROA not before: Fri 08 May 2026 01:50:48 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.253.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:47:68:4f:b8:1b:64:d2:77:5b:88:cd:f1:37:7b:cd:22:73:6d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 01:50:48 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=98ca553bc50b0b2f395bd8d1e2da6c79fcaa52f36b91eb7f8842465fc19c40e5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:79:8c:64:91:43:50:5d:bb:ed:02:e8:33:
6d:2a:28:7c:1e:40:5f:22:68:13:6f:95:ff:16:0d:
e8:ae:e5:1b:4c:a7:7c:58:30:7b:54:73:f8:4a:85:
5a:9a:74:f1:5c:72:95:2b:a9:57:51:01:75:4c:f6:
cd:ae:a5:23:63:b4:2c:5b:d8:30:c1:75:b4:08:79:
cf:f1:c6:fc:13:3c:3f:aa:33:aa:64:da:80:58:ab:
2e:fe:c8:c3:ec:ea:45:7d:99:a9:91:1e:5f:97:ef:
ae:0d:ae:9f:48:aa:88:a5:b9:28:a7:8b:11:78:67:
c5:4d:5f:f2:1f:91:00:88:d7:ca:91:f2:70:b7:af:
ee:a3:4f:17:2a:6c:a7:c3:e7:ee:2c:bf:7b:91:74:
00:00:14:d0:83:24:9c:bf:06:e9:0c:38:f4:4b:d2:
6e:98:50:4f:b9:73:4d:c9:7d:d9:6d:c9:fe:e3:76:
8f:73:86:2d:11:66:3f:c2:43:ed:13:77:65:fc:0f:
b4:2c:ad:00:e5:52:a8:45:e1:e4:81:62:8c:ae:fa:
f5:3f:d6:28:13:97:49:d2:dd:8f:30:db:2e:83:af:
98:7d:ae:c1:f8:b8:ea:51:ea:3e:cb:8f:eb:c0:5c:
1b:a1:6a:40:08:61:cc:47:43:0d:63:e7:f8:c4:09:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:78:7B:50:FE:94:D2:FA:21:9D:61:D3:3D:E1:EA:F3:74:45:C2:45
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ef4d1a45-51c1-49a6-8ff0-39e1b6be40a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.253.212.0/22
Signature Algorithm: sha256WithRSAEncryption
50:f4:2a:e0:01:e9:02:20:89:93:ce:69:10:6b:7c:57:13:b8:
62:c0:d2:19:6f:82:0e:55:8b:ca:eb:cb:bd:a8:06:da:7c:92:
b9:d0:5f:18:cc:8d:cb:e0:43:22:69:f2:7c:9e:77:f8:ff:5f:
d6:db:41:cf:79:42:c5:08:51:1d:f2:de:fc:ed:b4:01:71:10:
c1:a7:d1:a9:1c:86:9e:31:d5:5f:c4:7b:5d:cb:38:9a:da:b5:
40:a1:53:28:75:7f:0f:66:ea:07:1d:e5:b8:4a:43:95:7a:86:
ce:fe:5f:14:d4:25:56:5d:a0:ad:56:4d:05:5b:e8:94:2b:2e:
c1:e4:84:38:6a:6f:82:9c:34:17:ac:3e:92:85:cd:d7:18:6e:
09:d1:f5:0c:91:bc:57:d3:2f:62:68:db:8d:35:10:e1:bc:f2:
94:d9:8b:3f:c2:b8:1f:b9:1a:3f:f5:3b:45:db:f2:11:8d:8e:
47:e2:42:ce:11:71:af:b2:fb:db:98:6c:d4:58:97:64:12:bf:
df:c6:1f:5c:98:37:42:b4:15:3e:95:c7:56:eb:74:a6:0e:87:
b4:32:81:a8:b9:1f:be:97:94:17:52:28:62:cf:15:1e:ba:03:
c0:54:28:1b:61:18:a4:43:49:47:a4:63:d0:c6:14:3d:cb:04:
d9:0b:54:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:24:37 2026 by rpki-client