
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27247bd9-2a37-4fe7-885d-ca0c9118c91c.roa
File: 27247bd9-2a37-4fe7-885d-ca0c9118c91c.roa (raw, json)
Hash identifier: 8fRvX9r4f2zjAk5yNKs6UrR3viCvAnat5dTS4GxZdxw=
Subject key identifier: 78:5E:D5:5A:DF:3F:A2:4C:69:20:B6:2A:80:A4:2D:1E:3C:D4:A7:5F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 47111C149F368243E67A81F328F610736E87E3A5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27247bd9-2a37-4fe7-885d-ca0c9118c91c.roa
Signing time: Tue 17 Feb 2026 00:40:40 +0000
ROA not before: Tue 17 Feb 2026 00:40:40 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 161.188.176.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:11:1c:14:9f:36:82:43:e6:7a:81:f3:28:f6:10:73:6e:87:e3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 17 00:40:40 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=de13eeee581d48aabb2be7042d7189815100d7ace1c2c2688759fda2a533d60e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:db:05:97:8e:2f:3a:44:07:5d:13:d2:99:a9:
82:81:1c:b8:cc:f7:16:52:83:6a:e3:71:73:90:b0:
ec:99:2e:26:a4:b4:49:3d:9d:78:69:f4:87:23:6b:
12:ff:01:1a:0a:4c:bf:39:bd:8c:4c:75:c5:07:f6:
e4:71:82:77:a4:67:79:af:18:11:e8:3d:ac:a4:03:
be:a3:61:dc:2c:21:82:cf:2f:13:b1:aa:56:ab:7f:
14:e5:9b:ca:64:7c:2f:d3:23:64:c5:59:c4:29:f2:
06:f9:4e:83:18:de:86:6b:1b:02:c4:c4:90:19:0d:
44:f2:fe:b5:50:44:f8:16:11:d3:fb:87:c2:3f:80:
66:66:19:c1:b2:d1:aa:c4:f2:9c:5b:c3:7e:2d:da:
ee:8c:b4:3c:8e:9e:b1:fe:99:06:5c:23:3e:78:5f:
13:cd:e4:e5:73:4e:fa:45:e0:3c:4a:82:88:4b:a9:
52:82:d0:51:d2:80:34:e2:68:20:a0:86:ba:2d:3b:
33:1e:07:91:15:4c:5d:1d:fd:9b:e5:64:d6:49:42:
46:05:01:d2:4a:bd:e3:5b:ca:71:0f:23:ce:00:70:
a4:44:64:30:91:68:b7:09:e3:c9:69:d8:40:ef:9f:
30:76:74:40:24:76:7a:0a:9f:51:e8:a7:b1:a5:3a:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5E:D5:5A:DF:3F:A2:4C:69:20:B6:2A:80:A4:2D:1E:3C:D4:A7:5F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/27247bd9-2a37-4fe7-885d-ca0c9118c91c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.188.176.0/23
Signature Algorithm: sha256WithRSAEncryption
64:c3:12:7d:af:37:7f:2d:87:ab:48:19:b3:fc:3a:c4:64:28:
20:92:21:e3:3e:c4:70:38:0d:3b:05:62:ce:d9:2c:2d:33:aa:
6d:cb:81:1e:d5:28:f0:97:4a:23:1f:b2:06:b0:b6:a7:e1:2d:
90:46:77:a1:f3:fd:c2:cf:15:7b:66:b2:e2:2c:e8:96:c2:5d:
6f:92:ac:9c:de:30:f7:67:35:a1:be:3c:71:00:3e:85:e2:a7:
e3:4c:2f:8a:e7:18:c3:fd:49:b9:64:ee:51:91:28:7a:6e:be:
07:15:17:1f:84:4b:b1:86:c3:83:81:f6:7f:3e:ac:e1:ad:ef:
71:f0:17:de:2f:36:da:3f:13:97:b7:ff:90:c8:00:79:87:92:
c7:d4:a7:e8:b7:a3:ee:94:54:30:9c:eb:c9:21:77:bd:73:3f:
61:7e:4a:29:4b:d2:bd:d4:2b:f2:00:14:da:f0:36:de:5a:24:
17:ad:8a:4a:f5:31:d0:89:44:bc:4e:27:dd:e1:7e:79:6f:c0:
f4:a6:fd:1a:e1:86:2c:7a:e7:4f:8d:c3:95:ad:fb:9f:af:0e:
03:a5:c0:50:50:1d:8d:1d:2d:57:c2:df:38:26:ff:0e:6a:4a:
4e:2a:b1:57:a4:2d:95:74:d6:5c:90:d0:61:2a:97:26:49:04:
95:c0:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:30 2026 by rpki-client