
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1866333e-6b74-4a2b-94b0-08f5ac175857.roa
File: 1866333e-6b74-4a2b-94b0-08f5ac175857.roa (raw, json)
Hash identifier: iSA3IHNNisJwl478FkIaLN3fEFC/lO0lkH/Q/AIi7Ag=
Subject key identifier: FE:12:18:0F:0A:1C:D8:BE:FF:76:B3:FF:DD:D1:CD:60:F5:71:39:C1
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 540F145930740DC5BB86EAF1CE508BD218C5C34B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1866333e-6b74-4a2b-94b0-08f5ac175857.roa
Signing time: Tue 19 May 2026 02:21:19 +0000
ROA not before: Tue 19 May 2026 02:21:19 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.172.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:0f:14:59:30:74:0d:c5:bb:86:ea:f1:ce:50:8b:d2:18:c5:c3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 19 02:21:19 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=4d3c8750d50ffd5c2a13c44e20885f162e232438d421d3a6da7dcfb0fe06dcc9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:a6:ff:f5:09:f0:65:21:9d:6d:5c:3a:a2:
46:3d:de:60:c8:c3:56:2c:03:d4:31:fd:1d:43:d2:
43:ff:6b:bf:0f:3e:7c:77:c9:89:ca:81:b4:93:29:
51:2e:66:03:94:15:34:c2:64:0b:0b:1d:df:b8:fd:
6b:e4:56:45:dd:d7:c5:6a:8d:54:22:d3:6b:88:7e:
05:d5:c4:d9:3d:3b:c4:ce:73:78:b3:c2:3c:ce:97:
36:24:32:3a:b5:b5:42:17:bc:8e:99:fb:fe:70:b3:
df:fc:5f:b8:92:36:10:48:1d:bf:18:62:75:80:d6:
95:e8:90:c4:57:3a:67:66:4a:ba:7f:fa:f3:3d:26:
f4:77:c8:63:ec:4a:ec:3e:e1:e0:2a:db:d1:95:a1:
a4:b7:7e:ab:69:18:d0:5f:90:6e:1b:a4:ac:1e:59:
c9:51:68:b7:b9:f3:91:e7:a9:72:6e:50:54:62:5b:
7b:e5:87:f3:9f:b8:df:12:a8:98:9b:8e:02:0c:2b:
f3:54:ba:da:13:56:49:95:27:fd:be:38:74:09:1e:
f8:01:b3:01:b4:29:94:06:97:7e:ee:fe:43:ee:de:
d8:53:fd:b9:de:f9:52:77:70:50:d3:0b:04:f7:d1:
38:d6:1b:b6:df:a9:cc:f1:c1:f4:16:59:ac:ec:2a:
23:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:12:18:0F:0A:1C:D8:BE:FF:76:B3:FF:DD:D1:CD:60:F5:71:39:C1
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1866333e-6b74-4a2b-94b0-08f5ac175857.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.172.124.0/22
Signature Algorithm: sha256WithRSAEncryption
69:25:66:84:e6:bb:a7:86:be:2f:e9:d7:d3:e8:65:0c:bc:8b:
6d:c9:1b:57:89:d8:90:03:ca:1e:4e:53:02:12:ab:d6:6c:92:
c5:90:bc:36:d1:58:ec:ee:65:4e:ca:32:01:9a:d9:98:5b:ab:
b0:f2:39:88:2b:8b:7c:7e:97:d4:2a:1e:bf:d5:d1:4a:9a:b1:
96:58:6a:5b:4b:e7:5f:22:dc:dc:54:23:90:0c:32:10:a8:f3:
c9:df:8f:45:82:87:d4:50:f6:bc:a7:ae:e7:97:39:49:55:04:
5f:fa:00:e2:27:df:b1:e7:ba:11:10:f2:38:0f:42:d6:ef:46:
f7:72:45:ba:e2:c9:a5:6c:5c:67:b0:66:76:29:76:53:be:cd:
fe:c0:2f:c8:0d:27:32:94:65:02:af:e1:46:67:65:89:7d:47:
95:05:69:83:43:17:da:0d:c6:af:95:11:0e:37:12:24:09:4e:
6e:ad:5a:9c:f6:2e:34:e9:64:0f:21:c4:b4:c9:fa:04:ba:24:
a9:db:8c:66:4b:0f:38:be:1f:f0:ca:84:26:d9:12:3b:28:b4:
b1:f0:95:a4:b8:b8:23:7a:f1:1d:29:e6:7f:6e:21:a6:49:0e:
ec:2c:d7:2c:68:f7:17:27:0b:10:46:9f:fc:29:c7:f8:0e:bc:
6c:69:d0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:47:22 2026 by rpki-client