
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f04501a-e42e-4e8d-92db-f2de0979982c.roa
File: 2f04501a-e42e-4e8d-92db-f2de0979982c.roa (raw, json)
Hash identifier: Xg59pgn9C2xftW9K9HOzXqBgr/EHRr9epFyiF9Wjn3s=
Subject key identifier: 6F:7C:F0:23:16:92:45:2A:32:48:F0:D4:1E:47:F9:50:9A:BD:9C:9E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 43494672C1DA2DC1A7052DF67D96761BDA39AFB9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f04501a-e42e-4e8d-92db-f2de0979982c.roa
Signing time: Mon 27 Jul 2026 02:20:11 +0000
ROA not before: Mon 27 Jul 2026 02:20:11 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 3.208.0.0/12 maxlen: 12
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:49:46:72:c1:da:2d:c1:a7:05:2d:f6:7d:96:76:1b:da:39:af:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 02:20:11 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=94a8fa55ca73f9e08d16ab62a3262f5e9c4237f6d99bec45bffde30b5dc1ea3c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:2b:f7:f6:a2:0a:e5:c1:9c:77:10:2a:89:
37:d4:19:f8:7a:22:e8:4d:99:a3:6f:18:06:70:41:
f7:e5:ef:5c:92:eb:d3:27:57:27:64:fe:31:12:bd:
79:54:a9:8d:75:00:cf:50:0f:b2:3b:ea:0b:be:85:
e2:aa:47:5c:26:1a:93:e0:32:ee:7e:95:92:75:d1:
9f:c0:00:3a:7a:5a:ff:7a:34:09:a1:40:33:f0:b6:
87:5e:00:78:0b:3b:f0:68:95:14:74:6d:bf:a6:a2:
95:ab:e3:d9:a0:59:93:9a:f0:1f:53:01:e8:dc:8e:
87:80:a4:aa:c0:a5:d7:b0:0f:ce:1c:85:69:19:24:
d4:9b:c7:f4:91:90:e7:5e:ce:dc:48:6c:d7:c6:1e:
6a:f9:0a:b7:28:c0:06:cf:b4:d5:84:95:2e:ea:50:
e1:f0:a0:cd:06:6e:15:de:d8:cb:18:af:75:6b:24:
73:f5:18:61:10:7e:f6:0e:bd:3e:37:38:fd:ce:17:
ed:8b:85:e1:aa:22:32:37:35:d0:b4:cc:ad:e8:5a:
c2:dd:17:f4:c5:39:e7:6f:c0:b2:d1:f5:f5:28:a9:
f7:7e:8a:31:a3:8d:b0:7b:e0:b0:65:a6:cf:3d:d8:
5d:c9:94:a7:79:4e:21:97:90:a6:4b:77:90:35:3c:
f1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7C:F0:23:16:92:45:2A:32:48:F0:D4:1E:47:F9:50:9A:BD:9C:9E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/2f04501a-e42e-4e8d-92db-f2de0979982c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.208.0.0/12
Signature Algorithm: sha256WithRSAEncryption
8a:6d:c0:2c:f2:b7:de:44:6b:2c:f8:2c:99:f3:93:0d:dc:85:
be:d9:ab:26:3a:da:74:e4:3b:d5:8d:e0:91:e6:50:47:f7:9b:
b4:a1:97:00:a0:07:fe:20:d9:f0:f2:18:77:2a:60:3f:80:5c:
14:a9:d7:b9:03:b8:71:c2:6a:51:8c:76:ec:22:22:83:4d:4b:
80:05:1e:f9:0d:70:c4:b1:18:5b:72:17:98:01:fa:d6:e6:83:
27:cf:89:4d:25:4c:6b:39:a5:de:b9:22:45:9b:20:36:aa:91:
70:31:a0:c4:ee:74:3d:2d:89:fa:4c:60:39:a6:9b:02:4c:f5:
75:52:76:2d:10:ad:3b:d4:46:c7:96:cf:13:1e:07:30:5c:c9:
91:d1:46:70:9e:c1:be:00:b8:18:d8:4e:ac:8e:7b:ef:c4:bb:
1d:ca:b5:81:d6:f1:4f:71:f3:83:91:12:1a:f5:c5:f4:ea:08:
4a:b6:b6:d6:2b:e0:ef:35:cf:9f:db:9d:b8:97:99:9a:59:97:
a9:f3:9b:56:aa:5a:61:a7:72:de:4d:de:38:a0:b1:68:92:b0:
3e:c8:21:45:ff:c0:61:42:b5:76:12:b0:51:cc:27:42:5f:b5:
76:09:3e:29:51:e1:43:9d:7d:84:02:4a:d6:f0:10:79:9c:dd:
b6:ed:10:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:02:08 2026 by rpki-client