
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00ab4ebc-d828-4c31-a613-0c82a01b933c.roa
File: 00ab4ebc-d828-4c31-a613-0c82a01b933c.roa (raw, json)
Hash identifier: gSy7UhIaBxuPwZ/eowTD03dqoZiRfkisf+u/aoHkagg=
Subject key identifier: 66:CC:F0:0C:78:A8:92:0F:9D:02:13:EB:2B:A7:A8:81:9A:30:28:74
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 19519EDE36C0F5C1454ADC29944066891A36C9D9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00ab4ebc-d828-4c31-a613-0c82a01b933c.roa
Signing time: Sat 28 Feb 2026 04:00:05 +0000
ROA not before: Sat 28 Feb 2026 04:00:05 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.173.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:51:9e:de:36:c0:f5:c1:45:4a:dc:29:94:40:66:89:1a:36:c9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 04:00:05 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=548ea86c82065f1d0a2439a1f2843887e206c9ac5811120d77bb36d2f72e82bd, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:bf:09:5c:52:5d:71:02:d6:5b:85:6e:ee:
54:9a:a4:84:57:b0:0d:6a:60:0c:59:f1:76:6c:82:
3d:54:ef:a4:f3:17:df:89:c5:fc:15:4e:d8:15:92:
59:54:2d:ff:41:db:15:9d:e8:65:e9:00:f2:03:aa:
8e:4c:36:a3:81:62:04:41:2a:29:be:2a:55:dd:fc:
fb:d8:47:a2:32:ed:d9:ed:5b:4e:e9:88:94:6e:93:
98:ba:09:78:1d:31:29:b4:7f:a0:c9:d5:72:e1:6c:
76:91:9e:26:b1:21:4b:cc:4d:76:d7:da:e2:96:11:
f1:16:c8:6c:23:d8:5a:9d:fc:d6:6f:a4:c5:85:61:
5c:7d:00:19:1c:9f:17:26:7f:04:81:22:ac:ac:b8:
d7:2d:9e:5d:05:b1:74:23:29:f7:bf:f0:6b:e1:e3:
84:ee:5e:af:e7:54:32:c2:05:ff:8e:bc:89:e8:59:
f4:72:9e:a6:30:05:0b:33:11:bd:3e:7d:ae:ea:ec:
62:fc:24:a2:42:93:31:e8:dc:3f:23:4a:6a:33:6d:
09:1a:ef:df:3e:72:b5:5c:6b:92:af:9d:78:81:b1:
58:ee:5b:75:ab:fc:b2:3c:5e:82:6c:21:ed:91:d5:
e0:95:f4:74:0a:e5:80:cb:9b:f7:cc:26:71:24:c5:
92:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CC:F0:0C:78:A8:92:0F:9D:02:13:EB:2B:A7:A8:81:9A:30:28:74
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/00ab4ebc-d828-4c31-a613-0c82a01b933c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.173.80.0/20
Signature Algorithm: sha256WithRSAEncryption
31:e2:1a:e9:5b:88:2d:47:0f:57:a5:ed:fb:ae:fa:4e:83:f5:
47:87:8e:e4:fc:c8:aa:70:ab:28:27:68:55:1e:ef:2e:0d:97:
aa:93:13:26:d3:f3:16:e8:c2:7c:24:f7:d1:aa:f7:24:db:c8:
9b:da:49:f7:ad:ce:60:70:fc:be:37:83:80:0c:77:d6:40:84:
6f:7f:c3:da:c7:58:5c:89:a0:bb:35:51:29:ad:ca:b6:aa:9d:
3d:76:5a:25:9d:52:f2:3c:02:96:e1:47:92:35:07:b1:2d:8c:
e9:0d:27:23:66:62:83:ae:4d:2a:50:9d:b9:79:23:fa:73:1e:
26:ed:e9:8a:0a:fb:81:7a:5c:a1:ed:3f:ad:2b:f5:56:10:5e:
db:b7:a4:c0:13:6b:dd:5f:12:62:40:a5:86:96:27:b9:8f:77:
34:2f:ac:14:fc:c1:f9:17:bd:69:07:c9:7a:b3:89:58:38:51:
8c:0c:82:13:3c:0e:74:7f:61:5b:31:aa:d6:d0:79:15:9d:1f:
52:45:c8:6e:ea:23:c2:72:41:87:e9:7c:b9:83:63:eb:b6:19:
98:b5:c5:09:fc:2c:85:3b:0b:1d:ed:b3:2c:53:41:0e:08:89:
00:e9:78:4d:e1:6b:9d:a6:c1:29:54:d1:7f:c9:d3:bc:30:63:
65:19:89:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:50:02 2026 by rpki-client