
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3091a7a2-dc63-4f1f-9101-ed9ff624d837.roa
File: 3091a7a2-dc63-4f1f-9101-ed9ff624d837.roa (raw, json)
Hash identifier: 9oJjTr4X4PPQtdI3NPWdYRQzv7KTRKk+/irKf0g9Yhc=
Subject key identifier: 23:96:EA:A8:B7:62:24:FA:58:90:44:ED:1E:9A:54:98:6E:EE:AD:1C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2FE73F8FB45ECCE2043306AC1E7C330E4051773D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3091a7a2-dc63-4f1f-9101-ed9ff624d837.roa
Signing time: Sun 25 Oct 2026 00:03:19 +0000
ROA not before: Sun 25 Oct 2026 00:03:19 +0000
ROA not after: Sat 23 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 3.173.150.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:e7:3f:8f:b4:5e:cc:e2:04:33:06:ac:1e:7c:33:0e:40:51:77:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 25 00:03:19 2026 GMT
Not After : Jan 23 23:59:59 2027 GMT
Subject: serialNumber=b17407462fade11f35a79d48664a2f406ad482aa0bd5073a3076e715cf80bbe7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:2f:f6:a4:bd:f3:cc:32:77:dd:b6:1a:be:
89:86:a0:a3:2b:3d:b8:8b:11:a0:e4:d4:5e:9c:03:
94:4e:97:73:20:4e:0d:15:68:92:22:42:04:4a:8c:
0e:f8:90:a5:f3:02:37:0e:ec:b3:c9:01:e0:3c:92:
78:79:5c:c1:06:27:e6:cb:c9:91:ed:7f:f3:0a:b1:
e9:9e:f6:05:06:99:c7:25:12:14:1b:e3:db:1e:10:
b9:c6:12:d6:05:1b:79:4d:45:ce:92:7b:4e:7f:af:
23:51:ca:27:e3:89:b7:a3:83:c0:d4:54:5c:27:77:
d4:48:fd:d5:fd:f3:ae:93:92:42:e6:57:fd:10:12:
d3:35:e7:a1:fc:8c:e8:1c:44:91:4e:ce:12:a4:97:
31:14:e0:f5:ae:8d:93:0e:2b:1e:e5:7d:bc:c2:bd:
6e:a8:c6:0f:9b:bb:38:08:66:bc:79:04:d8:8c:89:
40:14:33:83:1c:40:a3:27:ed:69:14:2e:63:28:12:
42:25:0e:b5:38:4c:01:bd:30:56:79:47:5b:92:03:
de:37:24:be:de:02:9e:85:67:4d:a8:bf:d7:cd:cf:
82:9b:d8:ae:0b:53:c2:65:db:45:5c:6a:39:67:eb:
a7:f3:10:27:5f:41:a0:97:63:ec:ed:26:63:87:49:
ab:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:96:EA:A8:B7:62:24:FA:58:90:44:ED:1E:9A:54:98:6E:EE:AD:1C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3091a7a2-dc63-4f1f-9101-ed9ff624d837.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.173.150.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:fa:6e:c9:4e:29:66:ed:4c:1f:4d:1a:5c:6c:b7:df:03:7f:
61:38:3d:f4:2a:9d:a7:fd:76:27:13:67:e0:f8:f7:94:1a:e1:
9a:ea:e7:be:5d:37:5e:64:44:47:48:25:7b:68:e8:1d:56:59:
9d:03:a9:b8:13:5b:0f:7d:ca:f4:17:65:4b:34:d2:d0:d7:5c:
9c:73:cf:63:1b:de:cf:ce:6d:56:b4:8e:1e:da:99:42:74:34:
ed:62:9c:70:31:73:e5:87:e1:c4:01:ac:df:94:b6:8c:2e:65:
17:b3:b4:f8:8e:44:f8:b5:ab:d6:4a:e6:88:7a:27:1f:95:76:
fb:e8:7f:f6:8f:7d:d9:3a:5a:75:35:c3:7a:41:08:47:34:9d:
8a:27:99:59:56:de:98:9e:93:e4:66:13:2e:1a:a6:3a:05:02:
20:a6:98:34:1f:9e:43:a9:e9:7d:42:fd:2d:6c:a8:8f:0d:19:
9a:9f:9a:f4:e3:14:86:44:5b:f8:f9:59:39:94:45:fa:55:93:
36:a9:34:5a:a4:ef:e7:5d:20:22:46:69:a7:4a:64:70:4b:12:
18:50:1b:43:93:58:ef:27:e9:43:f3:14:09:35:58:04:d3:6c:
44:29:a6:3a:29:e1:47:a3:c9:60:e1:f8:ea:7f:2e:80:2a:14:
50:42:56:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 00:34:13 2026 by rpki-client