
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ad746a5-4122-4fe1-a6c1-09c23d7c31f0.roa
File: 3ad746a5-4122-4fe1-a6c1-09c23d7c31f0.roa (raw, json)
Hash identifier: ZEpiYUFpW8C9Ig5AFkjfFKWPPQiRltY8ZEn1wyj1JRA=
Subject key identifier: B5:7C:C3:4D:36:F0:E9:F5:9A:18:50:66:8A:F0:39:5A:A3:F8:BB:8C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 46B57176694C8ADF7EAC5065F9C7D5C92F8FDDCC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ad746a5-4122-4fe1-a6c1-09c23d7c31f0.roa
Signing time: Sat 28 Feb 2026 02:10:41 +0000
ROA not before: Sat 28 Feb 2026 02:10:41 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.44.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b5:71:76:69:4c:8a:df:7e:ac:50:65:f9:c7:d5:c9:2f:8f:dd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 02:10:41 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=7a824a6f0ef8e71297ca8fa284e1ef0f9aa6df337fcba34847e144b273f1e9a6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:17:f0:b8:dc:d1:95:24:b9:3f:f3:e6:fb:
0f:5a:c8:f2:cf:f2:79:cf:9d:73:0b:bd:87:f9:3a:
6f:32:14:0b:5d:36:36:51:8e:c2:b6:e3:c7:f4:de:
1c:78:de:09:b3:88:71:fc:b0:45:11:0b:d3:48:0c:
58:04:59:1d:61:7b:97:bb:50:a2:1a:35:f8:70:80:
50:6e:36:4b:b5:f8:68:1a:c6:5c:9d:fb:8a:5d:31:
4c:39:4b:94:15:3a:92:0f:27:7d:a2:4c:a6:e3:be:
d7:98:47:ff:06:d6:7e:ff:bf:62:39:27:65:6e:6c:
7a:90:26:e0:83:a6:90:8b:62:e1:24:48:12:99:9c:
1a:29:9d:22:31:ff:36:05:f6:92:9f:97:75:22:8d:
73:c6:68:f8:3d:eb:b3:30:ea:8e:39:33:ce:da:7b:
cb:db:3e:91:0f:a3:eb:77:f3:4c:52:99:07:0f:b1:
a6:63:51:82:5d:4a:80:16:b0:7e:95:d2:e5:9d:5b:
99:e4:07:0f:0b:f6:59:f5:f0:41:f0:98:f4:6e:79:
0e:d1:0c:c4:fa:db:13:5e:06:48:db:bc:94:80:16:
5a:4a:8b:72:e4:ce:0e:d7:55:25:fa:ff:76:46:1d:
c1:c4:ab:c4:30:b8:66:97:65:db:c6:d4:59:6b:7c:
b0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7C:C3:4D:36:F0:E9:F5:9A:18:50:66:8A:F0:39:5A:A3:F8:BB:8C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ad746a5-4122-4fe1-a6c1-09c23d7c31f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.44.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:12:da:15:13:38:02:81:09:87:fa:18:cc:fa:84:1b:c7:fa:
fe:12:f5:11:55:35:50:a5:9f:78:97:7a:3b:5f:d6:b1:62:57:
00:81:b5:eb:7c:af:24:52:cb:19:b0:f0:14:b6:87:c9:d6:29:
e6:e8:3b:20:3f:00:98:12:c3:86:75:34:4a:55:3e:99:0e:e7:
da:01:73:b4:f2:cb:1c:b0:5c:8c:5c:76:e7:f9:72:c7:db:f6:
bb:80:2e:2a:75:e7:5e:5b:79:a7:29:14:91:06:c3:a7:0c:20:
22:d0:64:ea:d7:a6:e4:be:4e:6a:54:4e:94:8f:6c:6e:7d:ec:
4b:e2:65:db:38:ae:e6:6e:6a:1b:12:02:fe:0e:5f:18:bd:25:
88:52:83:b5:4b:14:5e:9c:97:d1:a7:46:db:65:d7:45:98:85:
67:4b:28:6b:44:4a:4a:92:71:1f:45:90:81:bf:27:c2:57:b1:
ec:dc:52:fb:cd:11:7a:8e:6b:c0:47:0e:02:77:4a:63:58:5d:
a8:69:02:88:3c:71:a0:73:9a:9a:12:8f:8e:df:e3:99:f1:ec:
1a:2e:d8:1b:96:fd:ee:3e:86:98:fe:f2:e7:3c:2d:8d:61:93:
b4:2c:08:64:b5:9f:9e:90:ea:fa:21:75:18:b1:2c:46:d7:44:
59:a3:0f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:27:40 2026 by rpki-client