
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3da7e45d-166e-4c9c-ab80-0786ff77d12b.roa
File: 3da7e45d-166e-4c9c-ab80-0786ff77d12b.roa (raw, json)
Hash identifier: FpXq9+iVFkMs80LPlc70IuCCMuYaXvjrCE0iD3NjgAw=
Subject key identifier: 9A:15:20:6E:A7:EC:60:15:5A:74:FE:16:12:14:73:F7:38:79:3A:46
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 172CA1B89B3A12ED1042A8CD757161BDB7F7CD69
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3da7e45d-166e-4c9c-ab80-0786ff77d12b.roa
Signing time: Fri 20 Feb 2026 01:11:30 +0000
ROA not before: Fri 20 Feb 2026 01:11:30 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.158.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:2c:a1:b8:9b:3a:12:ed:10:42:a8:cd:75:71:61:bd:b7:f7:cd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 20 01:11:30 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=c31dfa6c871d8a195e9905cc04bd4d09c2f51a91ac24ee1e758aaed268ece235, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ee:3f:74:21:6b:10:8e:0a:4d:05:cb:86:22:
71:7b:df:0f:2a:93:96:c9:00:67:d5:ad:90:7e:ad:
8e:35:d8:3d:c7:45:04:be:ab:5f:95:d0:c7:5a:c8:
30:93:ac:5b:24:b1:6d:6c:63:e5:88:c5:de:e2:b5:
aa:bc:d9:46:38:9c:40:3a:08:40:78:11:03:b6:0f:
a7:d0:3e:ad:fe:3a:54:57:57:2e:b8:3e:59:7c:65:
f6:e2:87:88:b6:b6:44:53:0f:39:9b:9d:20:97:48:
93:0d:ae:39:1a:0b:c9:47:45:29:0c:19:2c:ea:f4:
4c:6a:48:cf:92:1f:44:58:b6:a2:27:ca:90:7c:fc:
b0:2f:f9:4e:85:ed:9b:df:dc:71:39:2b:d0:1c:59:
16:4e:5f:54:3a:8f:cf:c2:0b:8d:e9:1e:78:59:3b:
0d:34:5f:98:af:68:e6:b2:79:c2:08:bf:c9:58:43:
81:6f:1d:86:a1:43:e0:47:55:9c:13:dd:ec:af:7b:
3f:82:ce:29:0e:a5:c3:05:2f:29:43:8b:3a:a0:9d:
1d:1b:35:fb:a2:ed:16:2e:2f:0a:59:43:14:50:e9:
b3:48:37:c4:84:eb:d9:06:a6:68:e6:f7:43:f3:e9:
0f:d6:f5:dd:51:d7:88:e6:80:2d:00:e2:38:a6:3f:
8a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:15:20:6E:A7:EC:60:15:5A:74:FE:16:12:14:73:F7:38:79:3A:46
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3da7e45d-166e-4c9c-ab80-0786ff77d12b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.158.180.0/24
Signature Algorithm: sha256WithRSAEncryption
19:88:7e:b4:ab:5c:0a:9c:bb:3b:e7:4f:ee:b8:81:ac:9f:60:
d3:71:da:ef:74:fb:1f:30:77:d7:05:07:fd:1c:80:d1:81:1b:
b1:36:a4:ee:d8:b5:bc:5c:de:3a:79:b1:e8:c8:be:46:ba:42:
b9:aa:51:7f:35:ec:2b:47:f1:4a:f7:63:05:b5:22:77:8e:99:
54:f8:1b:50:df:ea:b7:92:55:a1:b9:75:af:6a:9c:e1:91:9c:
f1:cf:de:d9:70:65:f2:91:fe:ae:34:32:0d:43:84:7c:73:b5:
94:21:72:d3:3e:dc:63:c3:60:d7:39:af:28:c7:93:ab:a9:29:
26:1e:39:6a:65:45:af:c4:25:d0:81:76:93:61:6f:98:fc:c7:
be:73:23:da:16:fe:3f:c2:1a:ac:35:30:31:3e:c3:9a:b2:96:
71:d5:27:bd:17:a8:9f:5b:9c:ae:2b:2b:1e:55:9d:8c:8f:37:
a8:83:9c:46:ac:97:7f:15:0e:20:48:32:e5:f0:a4:d4:8c:02:
8c:50:ee:4d:4f:16:10:a5:98:13:7a:83:59:d0:32:79:bb:73:
c2:e6:48:af:57:49:5a:35:5c:9a:76:7b:1b:47:7d:39:cb:36:
42:2d:8c:25:0d:54:25:9e:4d:0d:1d:f5:e1:e1:88:90:ad:0a:
d3:e9:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:00:24 2026 by rpki-client