
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12fd78ac-fcd3-4f08-b871-cf4ec74e2ae3.roa
File: 12fd78ac-fcd3-4f08-b871-cf4ec74e2ae3.roa (raw, json)
Hash identifier: jpSUU5D6jZNM3ZrlNTBU74C2duOt2qEFCuI2c0rTP2Q=
Subject key identifier: 13:36:FC:29:17:8E:E1:69:DB:3D:30:5C:E3:0E:C0:E9:3C:B7:90:71
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 28D0AF5A1D6063BA410A8A21E097B89FE7B16D21
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12fd78ac-fcd3-4f08-b871-cf4ec74e2ae3.roa
Signing time: Fri 27 Feb 2026 00:10:37 +0000
ROA not before: Fri 27 Feb 2026 00:10:37 +0000
ROA not after: Thu 28 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.173.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d0:af:5a:1d:60:63:ba:41:0a:8a:21:e0:97:b8:9f:e7:b1:6d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 27 00:10:37 2026 GMT
Not After : May 28 23:59:59 2026 GMT
Subject: serialNumber=96e41edf12d386df7ffd515501a80808fa71f669300adea8087df914f2a2a7ae, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:cc:76:7d:0b:d0:53:cb:9b:40:b0:06:96:
44:cc:99:17:d1:a1:14:c2:f1:8e:17:d1:79:ef:92:
4b:64:3a:36:b3:a7:2a:de:7d:9d:3d:98:dc:32:86:
b0:ca:dd:31:b5:a4:95:fc:e9:e7:8c:93:89:4d:4a:
01:7d:45:3b:1e:43:07:b4:c8:fe:d9:b9:63:ac:ef:
63:ca:d9:ff:75:5b:1a:a3:bb:9c:81:69:33:8a:ee:
f5:c7:3f:9e:a8:b9:63:1a:9f:ec:4b:6d:69:42:86:
bb:12:14:21:71:1a:55:02:f3:5f:e5:fd:14:06:1d:
9e:64:07:b9:ca:7f:e5:7b:d2:97:5b:eb:ed:b6:e5:
86:13:72:8a:21:9d:52:a3:d3:26:49:38:95:8f:47:
15:80:b2:99:da:ca:85:34:e2:9a:c4:24:5d:c2:77:
df:cf:64:ec:80:a7:c1:27:da:b4:06:44:da:33:c6:
72:3c:e1:67:01:73:d1:8c:40:b5:fa:c5:8f:8a:93:
c5:49:dd:4f:c6:4b:98:d4:23:24:7d:9f:23:90:18:
ed:7a:6a:2f:5e:d1:cc:0b:0c:b8:70:09:02:ef:09:
a7:ac:a4:bf:cf:ef:e5:c6:70:c9:de:2e:04:89:1e:
94:26:68:79:79:45:aa:d0:68:cd:63:50:09:26:b0:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:36:FC:29:17:8E:E1:69:DB:3D:30:5C:E3:0E:C0:E9:3C:B7:90:71
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/12fd78ac-fcd3-4f08-b871-cf4ec74e2ae3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.173.226.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:1a:45:4b:fc:b0:af:5d:2c:8c:75:09:87:75:4d:45:d3:dd:
59:93:dd:9e:42:96:18:34:ef:a3:df:f8:58:a1:c8:67:be:3f:
02:ce:00:ac:56:1a:20:1e:28:c8:ff:b8:fd:77:3a:90:1a:5c:
cc:4b:8b:b3:4f:eb:e4:45:a9:85:8b:f6:95:6f:45:3a:89:f4:
37:cc:ee:a2:ac:67:2f:32:93:68:bd:71:eb:3f:b7:56:6d:59:
2d:44:97:ae:d2:fc:eb:74:46:17:fb:42:33:5b:c0:2f:d4:45:
a8:72:4d:f3:45:23:bc:46:a4:c0:86:84:00:bc:46:92:24:6a:
99:59:ff:c2:fc:9d:85:8c:ab:68:49:3c:41:24:53:20:88:cb:
93:5d:82:39:7f:75:1c:bd:5a:36:37:c5:73:dc:26:ad:89:e7:
20:9f:f3:a9:0e:ce:1f:58:b6:b0:e2:d6:3b:55:18:c5:86:a8:
e2:cf:91:03:e7:89:d9:2a:73:56:c3:e1:06:41:f1:76:2c:c2:
c1:cb:43:60:61:56:82:40:39:03:39:3c:eb:94:54:0b:fd:77:
8f:93:d9:0d:71:af:a0:6e:d6:e3:81:08:5a:95:c0:6d:f6:62:
76:39:a7:48:4b:bf:89:64:cd:8a:18:3e:49:db:df:6d:66:e3:
1a:b6:eb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:20:57 2026 by rpki-client