
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33c2df43-f3be-49cc-8cea-9cbc178fa8e7.roa
File: 33c2df43-f3be-49cc-8cea-9cbc178fa8e7.roa (raw, json)
Hash identifier: k0quF0AZObHBewX1hzu8SCmCRb7L4M0taaqHtWvJJGg=
Subject key identifier: E9:36:50:6A:A7:7A:FC:F0:CF:EC:B0:D5:B5:F2:2B:28:B1:08:2B:95
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4AC75447B7F80EECAC69DE8FBD9374E78346769B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33c2df43-f3be-49cc-8cea-9cbc178fa8e7.roa
Signing time: Mon 23 Feb 2026 01:41:11 +0000
ROA not before: Mon 23 Feb 2026 01:41:11 +0000
ROA not after: Sun 24 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.68.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:c7:54:47:b7:f8:0e:ec:ac:69:de:8f:bd:93:74:e7:83:46:76:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 23 01:41:11 2026 GMT
Not After : May 24 23:59:59 2026 GMT
Subject: serialNumber=d9b31829c870469b52b86dc9318489269fb981035e23aafbac615dab4a73c3d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c8:3d:6c:f8:12:35:40:15:2c:e1:4b:ee:1b:
b1:ec:78:b6:63:80:2d:dc:a2:9f:aa:a3:73:03:aa:
88:70:c6:c0:41:dd:17:1e:0f:1b:c3:18:be:a3:dc:
73:5f:c7:5f:5d:0b:7c:8d:05:24:98:26:3d:7a:ed:
a8:84:b3:3e:87:c6:ef:33:80:15:c4:a1:2a:04:9c:
d7:83:db:46:c9:3d:4f:13:55:73:4d:93:41:bd:f7:
82:4e:20:79:70:99:a7:e3:7b:da:90:56:69:68:aa:
be:d4:9d:bc:70:92:0c:1c:85:33:ef:aa:36:9f:7c:
19:1f:08:da:3b:b2:0b:48:97:b2:23:f2:b9:0c:cc:
4f:0c:28:51:36:5e:6a:ef:0c:be:04:98:49:25:a7:
9b:02:3b:e6:c4:be:90:a5:e6:19:df:3b:b8:6b:d1:
81:b0:6a:25:f5:cf:a2:db:8f:e7:c8:3b:1e:22:de:
f4:ab:29:ff:8c:c2:b6:ac:2b:30:65:51:5a:96:c6:
bc:90:1e:6b:b8:13:2b:d6:36:46:91:05:30:47:69:
e9:d1:a8:5c:91:e5:fd:38:9d:02:ca:3e:60:68:9f:
6f:df:5c:02:c3:74:e6:9f:1e:08:97:b4:ce:19:0c:
4e:26:a3:5f:8a:7f:15:71:c4:66:42:78:39:c3:ce:
6a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:36:50:6A:A7:7A:FC:F0:CF:EC:B0:D5:B5:F2:2B:28:B1:08:2B:95
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33c2df43-f3be-49cc-8cea-9cbc178fa8e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.68.113.0/24
Signature Algorithm: sha256WithRSAEncryption
11:4e:ca:c6:c7:7f:ce:8c:19:ca:a6:cc:65:19:64:f5:44:cd:
76:46:a3:a5:e5:f3:76:23:10:36:7d:f9:28:5e:97:50:64:89:
26:d5:53:b5:b7:8c:49:20:e2:ca:15:91:98:2c:7b:0a:b8:3f:
6d:c6:2c:6d:ed:eb:3f:40:2b:da:86:7f:dd:7b:c2:a8:87:af:
c2:2f:89:f2:63:ed:d6:30:09:40:2c:b6:1b:20:8b:7a:8e:4c:
18:d2:77:22:78:08:09:ee:9c:21:bb:82:e7:83:9b:55:a4:e0:
07:40:c1:e5:13:57:73:3f:4f:ac:94:d5:55:80:33:0a:56:10:
d1:b7:87:e2:64:92:07:89:86:8b:83:38:b8:ec:7f:b9:94:20:
0e:19:e7:55:d7:4f:d4:e7:ae:dd:72:b1:dc:fd:9c:82:41:4e:
f0:70:ba:a6:10:7a:83:54:db:a4:35:9d:11:85:61:17:a8:d0:
91:6d:66:fd:7a:d9:02:61:f3:67:2e:77:fd:b3:29:70:64:f8:
b9:35:6c:f6:b9:74:bf:83:d2:27:66:d1:55:e7:d0:0f:d0:ca:
e3:ce:16:fa:f1:17:70:0a:85:09:ae:fe:7a:72:af:e9:00:5d:
95:8a:1f:51:8f:2c:b7:3e:78:53:40:c5:60:75:b4:1b:07:d1:
12:1d:71:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:42:06 2026 by rpki-client