
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c45110f-9696-4929-a4ff-bf5a3baa69c7.roa
File: 3c45110f-9696-4929-a4ff-bf5a3baa69c7.roa (raw, json)
Hash identifier: WpiBIz6a3gi4hnVZYBZ4wkG5mX9OZv5P6u0cXqiQGe4=
Subject key identifier: 06:67:E2:2B:F1:DE:FF:BD:BE:34:DD:FE:7C:D9:15:50:6A:1B:82:DA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5916C873839C62614D45D1F6B094B867168B1255
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c45110f-9696-4929-a4ff-bf5a3baa69c7.roa
Signing time: Sun 17 May 2026 01:40:09 +0000
ROA not before: Sun 17 May 2026 01:40:09 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 398378
IP address blocks: 161.188.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:16:c8:73:83:9c:62:61:4d:45:d1:f6:b0:94:b8:67:16:8b:12:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 17 01:40:09 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=a527a85a17818cf07ae5023b5101f281601fce30434e6ead4315fcd4af46f124, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:21:15:77:58:ea:02:ae:7c:14:f2:2f:3e:
a9:5d:05:7e:e6:5d:f7:a9:dd:58:35:3c:38:bd:e8:
97:34:16:5a:10:81:6b:50:30:71:aa:a4:5c:6a:dc:
43:8c:c8:cb:aa:c1:e2:99:e4:94:64:bc:b0:6c:03:
fa:fb:63:fa:d1:e6:a2:29:df:69:ff:f9:7d:46:11:
1b:da:4e:14:a4:d9:4b:7d:a7:7b:34:3e:7f:7a:98:
34:a7:c9:c0:d2:88:be:e0:d8:fa:8f:fc:d1:75:f8:
45:31:88:2e:8f:74:43:5b:ef:a2:c2:ef:09:c2:ab:
dd:ca:f9:df:6e:4e:ca:5f:77:88:b6:fe:51:ea:a9:
ff:b7:41:89:54:e2:6f:ab:4f:eb:65:1c:de:a0:e7:
b1:32:6e:79:9d:2e:f5:2a:de:a8:41:79:81:f8:ef:
62:8c:23:14:56:a2:2c:db:f9:da:25:3f:ab:9e:91:
3c:ea:cc:5b:91:be:c7:85:f2:04:1c:27:54:41:52:
62:95:36:5c:f8:8b:fb:ec:b7:b9:94:97:b2:53:f2:
4c:53:9d:45:b4:93:1c:33:02:17:96:42:db:c7:5d:
e8:79:a8:60:f2:e8:e5:51:f4:68:c0:3f:2e:7b:35:
3a:4f:e7:db:ad:92:6c:78:b1:a7:59:b7:53:c9:70:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:67:E2:2B:F1:DE:FF:BD:BE:34:DD:FE:7C:D9:15:50:6A:1B:82:DA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3c45110f-9696-4929-a4ff-bf5a3baa69c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.188.128.0/23
Signature Algorithm: sha256WithRSAEncryption
93:58:ef:1c:59:03:8c:20:6f:a0:6a:84:ae:43:b1:75:6d:9f:
f7:33:33:1b:f3:a5:17:4e:7f:84:a9:61:35:b9:cb:77:e6:62:
f6:77:5e:90:1f:ea:26:40:2d:e2:f7:14:d8:d9:30:53:12:38:
e7:4f:da:26:f4:a7:82:8f:4e:d8:96:68:33:bb:f2:3f:61:ea:
7b:5b:36:56:f7:3e:dd:fe:bc:93:f3:b1:19:48:76:52:8c:e3:
e7:ea:54:8f:61:1d:94:ec:91:eb:44:af:e2:41:86:77:38:65:
0e:5c:d5:24:6d:5f:9e:e2:fa:7b:7a:93:f0:a0:05:7b:74:55:
7f:fe:d7:c5:f6:e4:0a:ea:b0:ff:11:21:a3:ef:f1:59:3c:97:
b4:2f:f3:47:44:6d:f1:42:1b:60:e3:d6:c3:70:e3:21:58:01:
7b:b8:2d:0b:e5:1d:e4:ca:25:fb:f2:a4:54:40:e2:d8:40:fc:
1e:fe:68:22:8a:62:9e:37:2a:77:ae:99:5b:96:f2:83:27:73:
f7:fa:48:8c:50:cc:c7:25:ac:40:07:c0:48:7a:e0:34:15:35:
06:58:f7:3d:06:d7:6b:3d:b2:fa:ba:46:35:67:08:49:5a:7a:
24:89:77:4d:42:a3:f8:57:b9:e6:8c:ed:6e:9f:f2:b4:07:fb:
0f:76:c1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:06:27 2026 by rpki-client