
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ecba7cb-e191-4a62-a828-b93dfdad5492.roa
File: 0ecba7cb-e191-4a62-a828-b93dfdad5492.roa (raw, json)
Hash identifier: h2SL6FUO07UVapzvALIbUgmYewmEG/e08NyMYI9Zvu4=
Subject key identifier: 58:E4:17:37:0E:59:ED:92:6A:23:31:86:D4:E2:64:5A:0A:3A:2D:27
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 517D68E30AC95C9CB76613E0958EE958D29CC449
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ecba7cb-e191-4a62-a828-b93dfdad5492.roa
Signing time: Fri 27 Feb 2026 00:11:33 +0000
ROA not before: Fri 27 Feb 2026 00:11:33 +0000
ROA not after: Thu 28 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.175.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:7d:68:e3:0a:c9:5c:9c:b7:66:13:e0:95:8e:e9:58:d2:9c:c4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 27 00:11:33 2026 GMT
Not After : May 28 23:59:59 2026 GMT
Subject: serialNumber=9ac19f242bd342c4790d469a87bb6cca45b0abd14e5748b0a13eb476e3a9b9aa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a0:11:6d:b1:14:4f:8e:14:14:03:8c:b2:0c:
ef:1f:84:77:67:b8:3b:33:40:3b:9c:ed:4a:4e:98:
53:8b:0a:a3:d9:c1:1d:d2:91:03:da:4d:ac:49:59:
38:b2:aa:1f:53:a7:e8:fe:9e:bf:a2:27:72:c2:0c:
0d:7d:f8:83:65:45:f1:5e:ce:33:2a:44:f0:21:27:
45:72:a4:fa:d6:07:38:6e:ef:5e:8d:a6:b8:e4:4e:
06:1b:e2:25:1b:84:68:f3:7e:8a:96:72:01:eb:d6:
d4:55:ee:bf:2b:c4:0c:e2:d7:98:20:67:7a:60:78:
e1:65:44:d1:a6:bc:0a:5b:8f:40:99:3a:0d:34:03:
f7:e2:16:98:72:c1:c4:39:f8:21:e2:6a:77:1b:67:
3c:52:88:8d:ec:7c:9f:99:3f:3a:2f:8d:33:2b:2e:
06:c9:2d:62:d4:ee:46:c1:93:a5:c0:f8:1f:1a:e0:
6d:38:23:7d:94:0b:78:7b:f4:2f:be:0f:0e:61:c3:
c5:5f:84:03:a9:9f:7f:c0:42:31:2e:02:d1:6a:3b:
15:9a:29:0b:84:24:09:d1:7f:36:66:01:2d:d5:52:
7c:29:32:6a:35:52:15:ae:ec:16:1f:40:7a:c0:f3:
86:b8:13:52:66:d1:30:b1:f5:4f:3b:d1:61:42:6c:
1a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E4:17:37:0E:59:ED:92:6A:23:31:86:D4:E2:64:5A:0A:3A:2D:27
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0ecba7cb-e191-4a62-a828-b93dfdad5492.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.175.109.0/24
Signature Algorithm: sha256WithRSAEncryption
af:7d:bc:30:34:2b:4a:56:44:70:6c:57:ac:de:df:7e:2e:f9:
00:b8:87:a8:20:ab:4b:45:5c:e4:d3:15:b3:27:c7:84:11:bb:
a9:b6:bc:8a:0d:aa:8d:f9:65:49:e0:f4:48:d3:2a:af:2e:26:
ff:e9:66:89:0b:a2:46:7d:a5:a5:1d:c0:da:3d:fd:f4:60:e8:
71:1b:22:43:84:1d:84:74:0f:71:d3:d3:b6:f7:ec:33:9b:5a:
10:4d:4f:a7:8f:dd:35:ef:c7:4f:c9:dd:6c:9e:58:84:99:05:
c8:05:f5:2e:c0:64:d8:3c:e3:da:c2:f1:87:45:a3:59:54:08:
1c:63:c8:a5:21:34:7a:fc:ba:68:59:a4:4f:ec:7f:05:e2:71:
65:7f:c3:ed:1a:66:e2:ea:70:01:7a:47:84:91:6d:f3:c5:03:
28:e8:20:70:08:84:ea:b1:4c:36:1f:7f:3b:f9:5a:a9:2a:1a:
66:6c:3d:62:10:00:d7:85:cc:89:f1:e0:b1:a7:87:fd:30:71:
54:bd:3d:d6:f0:69:44:94:ae:28:d5:e8:71:1c:20:d8:1f:2e:
12:0b:db:a0:ef:bd:da:b8:55:fe:3e:9e:c3:69:32:f5:03:ef:
79:25:6e:20:57:aa:bc:e3:7f:25:60:a2:c5:f9:07:e9:8e:f1:
40:77:58:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:20:11 2026 by rpki-client