
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/360a660a-601a-4035-aeba-2dbae53bbfa9.roa
File: 360a660a-601a-4035-aeba-2dbae53bbfa9.roa (raw, json)
Hash identifier: DMWrm1vH6g+DqgvVaTbnvjBClq6D1OrMqlMz/zpPJVk=
Subject key identifier: 11:0C:3C:5D:A0:F5:FB:21:72:6B:F3:0F:F0:24:CD:61:5D:16:89:80
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 38C21ADF43221CBA09DEA64C537AA65EEDB10E9C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/360a660a-601a-4035-aeba-2dbae53bbfa9.roa
Signing time: Tue 27 Oct 2026 00:40:08 +0000
ROA not before: Tue 27 Oct 2026 00:40:08 +0000
ROA not after: Mon 25 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 18.68.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:c2:1a:df:43:22:1c:ba:09:de:a6:4c:53:7a:a6:5e:ed:b1:0e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 27 00:40:08 2026 GMT
Not After : Jan 25 23:59:59 2027 GMT
Subject: serialNumber=e41e137ea95c2f6ce3143148efb0e7320c29590c1a33d25196cd8c6222336043, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d6:77:37:45:12:94:35:a2:02:81:8c:0d:5a:
4e:ea:87:ec:69:54:1b:68:84:a0:bb:61:cb:4e:cc:
8f:57:f7:23:e5:d6:ea:e1:52:95:df:f8:9f:54:b8:
5c:62:c1:a1:33:32:31:6a:df:93:8f:c3:a0:8b:8c:
2d:ba:41:e6:52:09:1c:d8:45:e5:18:65:a9:76:da:
5b:cb:ca:dc:2a:82:fd:14:6c:3b:b6:90:c4:95:bf:
4f:e2:10:be:90:af:3c:49:f8:5c:c7:16:99:e7:7a:
b9:47:26:da:91:d5:d7:39:95:bd:e9:19:31:24:16:
3f:a0:f4:d9:2f:ce:ef:61:6b:a1:f7:73:16:91:29:
bd:e7:d4:a9:3e:b6:58:ea:ed:43:03:6e:ee:16:12:
62:8b:2f:ea:14:99:bb:63:3d:78:6f:7b:9b:eb:19:
2e:d6:ae:a3:1d:3a:7d:75:79:9f:97:8b:56:6d:76:
44:87:d7:90:8f:e0:8b:b7:7e:76:52:27:fc:d7:46:
5a:d7:c0:07:bd:19:e5:32:16:99:a7:42:13:63:d0:
ec:ca:75:d8:d9:c9:8b:d4:89:b4:1e:7f:da:1d:a0:
0f:4b:ca:dd:52:8a:37:60:94:c6:0c:01:83:9d:be:
fe:f0:ec:37:85:65:5f:80:ec:91:d0:77:2e:cb:3b:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:3C:5D:A0:F5:FB:21:72:6B:F3:0F:F0:24:CD:61:5D:16:89:80
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/360a660a-601a-4035-aeba-2dbae53bbfa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.68.0.0/18
Signature Algorithm: sha256WithRSAEncryption
17:70:53:ca:1e:bc:dd:54:af:07:ba:69:54:5a:51:ef:7a:4f:
09:7c:85:68:43:3d:4e:68:d0:88:d3:06:33:16:20:d7:a7:56:
0f:a4:19:fb:eb:e0:7b:ac:1b:3e:3d:25:aa:39:b1:1f:e3:23:
8d:1b:01:93:cc:4b:3a:2d:50:40:6e:a2:cf:2f:d9:f8:c3:e6:
fd:5e:ad:dd:05:7b:2a:2d:e6:63:75:e9:15:8d:40:2d:d1:7d:
d4:86:e2:04:bf:9d:26:7b:cb:43:72:1d:6e:74:81:50:56:35:
0c:a8:66:2c:f8:e0:1b:ce:e7:c2:4b:00:a3:95:1f:79:e7:c2:
ca:20:18:70:96:bb:cc:e4:cb:08:77:d2:02:1c:90:05:09:fc:
a0:02:a8:f4:b4:68:34:e0:4f:c1:12:32:b9:f3:36:ff:62:db:
b6:8b:fd:66:64:b3:76:a3:77:6f:cb:09:40:02:c0:52:d7:fd:
55:29:cd:b6:0b:0c:86:47:9b:83:90:44:f8:43:ec:12:eb:54:
ed:3f:69:52:bd:79:e6:7d:11:99:c3:06:d5:cc:08:95:a5:6f:
e2:e0:ed:6d:29:ad:97:4a:76:0c:fc:5c:0b:a3:bf:de:43:14:
3b:48:65:15:60:ae:a0:5c:4a:96:fd:8c:df:9b:6c:40:fb:5a:
1f:13:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 16:17:08 2026 by rpki-client