
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3598d04d-85a1-4b4a-a4e6-3dceb856f84a.roa
File: 3598d04d-85a1-4b4a-a4e6-3dceb856f84a.roa (raw, json)
Hash identifier: /lpHRXC6FNJl49BF/FGmhutTpGAKTRh1bO+lq1tdmys=
Subject key identifier: 9B:96:71:4F:6E:4F:E8:00:14:6F:50:C7:26:88:EE:84:C4:5C:B5:0C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 68C74C63F3406FDD61FF1E8D4801C25BC5B00816
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3598d04d-85a1-4b4a-a4e6-3dceb856f84a.roa
Signing time: Wed 28 Oct 2026 00:02:16 +0000
ROA not before: Wed 28 Oct 2026 00:02:16 +0000
ROA not after: Tue 26 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 18.164.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 07 Nov 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c7:4c:63:f3:40:6f:dd:61:ff:1e:8d:48:01:c2:5b:c5:b0:08:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 28 00:02:16 2026 GMT
Not After : Jan 26 23:59:59 2027 GMT
Subject: serialNumber=a10d42d32ea5c5bd35a4cd08d57ade0e59030581fda5342c13c0a6225f864250, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:99:1f:b1:40:7b:7e:b0:6b:00:1d:ef:bc:fc:
23:07:20:e0:30:40:24:9c:a3:43:d4:a5:b6:bc:bf:
4d:c7:d5:db:11:9b:59:6a:ef:71:f1:6c:54:2c:06:
b4:d4:05:28:f2:e1:dd:e6:ef:c2:07:bc:69:d0:5c:
5e:cc:05:32:bf:c8:81:94:36:bf:d5:4d:42:65:a6:
c7:15:e7:dd:36:39:49:f3:93:cc:01:1c:ac:23:ca:
b6:8f:d4:31:58:6e:2f:70:f5:e9:46:53:cc:83:4d:
fc:19:25:62:8d:6e:c9:3e:a3:c6:84:66:a9:e3:51:
af:d3:33:5b:53:4e:05:f6:f6:1b:5e:c7:19:a4:d2:
49:bb:e3:8e:e5:8c:7f:9a:7b:16:eb:23:e3:6b:74:
db:5e:ba:c3:65:39:0d:f4:65:47:73:d7:1f:52:52:
d7:e8:b2:a0:fd:96:af:1f:04:ef:6e:23:2b:54:71:
80:df:8d:85:37:51:5c:7a:ea:a2:55:08:e2:5e:f3:
2f:b8:1d:fc:cf:28:40:37:d8:f1:5a:ec:92:b7:95:
6e:5f:0e:84:d3:94:0a:0d:8f:3c:c1:af:32:99:95:
5b:02:bd:bd:2c:03:8f:13:b4:e0:4f:3f:38:aa:3d:
f2:5a:c3:8b:65:2c:ad:03:ab:2b:91:4e:2e:57:14:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:96:71:4F:6E:4F:E8:00:14:6F:50:C7:26:88:EE:84:C4:5C:B5:0C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3598d04d-85a1-4b4a-a4e6-3dceb856f84a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.164.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9a:33:a6:ec:bc:df:6b:0b:bd:71:28:b4:2b:64:3f:be:ab:3c:
08:a7:0d:f3:27:79:e8:09:2f:7e:b3:ac:0c:48:93:45:35:59:
b9:e9:83:da:64:91:2f:bd:f9:e3:1c:7d:67:75:f0:7a:f3:9c:
65:97:a7:85:a5:86:a7:7a:c9:73:6a:71:0f:a9:a2:da:74:ac:
33:3c:75:28:01:56:a1:8d:32:a4:41:74:eb:76:32:60:87:bb:
9f:e9:96:82:3b:9f:4f:fa:24:45:b9:c0:67:8f:c6:b1:a6:4e:
15:7e:36:7a:0f:f3:06:ae:34:c4:27:3d:f9:4b:0c:a8:15:15:
6f:18:ec:fe:19:31:53:48:26:e8:38:01:ce:77:8d:c8:39:e3:
96:94:49:8c:2b:f7:98:f3:83:56:6e:fa:06:93:4d:3b:72:09:
49:9b:49:bb:0a:8c:0c:71:98:47:29:15:aa:40:e8:49:f1:74:
1b:f1:ea:9d:6c:ce:64:c9:b0:1e:6f:e4:21:fd:fb:29:e5:77:
88:b8:99:e0:72:e5:fd:35:bf:aa:8b:95:3c:30:e4:51:20:29:
f9:b8:01:3b:3d:5d:9c:0f:70:28:b8:2b:de:67:27:29:b7:da:
65:9b:38:20:54:8c:e3:11:dd:b2:53:c2:56:7b:15:f0:a4:84:
58:2d:bf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 16:11:15 2026 by rpki-client