
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e289b8b-2eb3-4694-a4fc-e8ce7237fbd6.roa
File: 3e289b8b-2eb3-4694-a4fc-e8ce7237fbd6.roa (raw, json)
Hash identifier: z5F9zllXWj+pwWEw2ADsONoYsBY2RYGbsYVy0pryoAI=
Subject key identifier: 89:09:E8:A3:3C:2A:0D:64:94:A3:37:9A:A2:69:6C:AC:68:EE:D7:21
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 330312D06ABB2E2A6B3F7EA63E6BB6FE84490EDF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e289b8b-2eb3-4694-a4fc-e8ce7237fbd6.roa
Signing time: Sat 28 Feb 2026 01:51:29 +0000
ROA not before: Sat 28 Feb 2026 01:51:29 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.141.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:03:12:d0:6a:bb:2e:2a:6b:3f:7e:a6:3e:6b:b6:fe:84:49:0e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 01:51:29 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=cc5a004990f726e61cf1b674c8513464a1b9ae3af7924c5707fc66bf0a019a6b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:de:e6:1e:6f:84:3d:d5:54:26:24:c7:6e:1d:
87:1e:c2:d6:f3:c0:84:6b:58:38:a8:db:45:b9:8c:
e4:7c:28:c2:7d:bb:be:78:65:75:4a:10:83:ef:72:
19:85:93:34:f6:34:ad:78:dd:e6:a8:43:bc:d3:d3:
a2:4d:2c:8d:f9:b7:ac:34:f3:6d:10:d8:67:6a:92:
b8:54:58:ea:70:b1:a3:0e:74:85:18:f8:ed:8c:c0:
6f:01:7a:ae:cc:04:ec:37:f2:a1:a4:f5:e7:18:5a:
f3:79:fd:bf:91:3e:eb:3a:97:cc:de:a9:a5:d3:5b:
a6:79:0a:6f:29:a4:1e:30:d5:69:7e:10:e0:50:13:
5f:45:42:17:27:d3:34:5f:36:b2:68:6b:57:5e:ad:
b4:8f:30:cc:e4:83:82:0d:00:23:70:fa:8e:58:e2:
ab:67:0b:03:b4:45:26:a1:7e:7d:8b:91:17:50:bf:
4d:1a:66:8c:30:49:84:f1:1f:21:f6:5c:58:0b:5c:
06:fb:7b:a2:fa:97:5b:22:9b:fd:d9:a0:29:4a:f1:
9e:a3:18:a6:41:08:7b:39:44:cb:44:54:f2:e4:5c:
1d:0f:d5:82:84:7b:b5:df:43:2f:37:a3:97:dc:90:
c7:cc:7f:02:06:e8:51:9b:11:66:f0:87:42:54:47:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:09:E8:A3:3C:2A:0D:64:94:A3:37:9A:A2:69:6C:AC:68:EE:D7:21
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3e289b8b-2eb3-4694-a4fc-e8ce7237fbd6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.141.170.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:8d:33:c3:1d:c1:19:53:fc:d9:f0:43:bf:0d:74:81:50:b9:
87:90:ee:67:dc:5f:e2:51:2f:37:ba:6f:3a:f0:96:8b:67:0f:
7c:c5:5c:b2:2c:fb:d3:5e:7d:b1:d7:9f:13:87:89:03:e3:c1:
13:c4:32:c0:95:90:5b:8a:b7:f3:12:15:75:4e:a7:30:30:f5:
5f:40:d6:56:a6:6b:29:5b:d4:81:81:7a:6c:50:27:ac:54:cc:
68:da:04:5c:77:47:38:b2:b4:b7:9f:23:af:72:b6:21:8f:23:
22:99:aa:70:e5:5c:3b:c3:ad:b1:b9:1e:b5:cf:77:a7:ae:54:
4f:9a:b2:4f:10:7c:96:2e:6f:44:17:a5:7a:b5:1e:f0:f4:94:
a2:98:b8:d0:4c:e6:ba:44:1c:a1:e6:e2:5a:44:a0:91:52:b1:
8a:ea:7a:88:66:74:f3:18:c1:f1:df:a7:fc:71:c1:02:b3:9d:
23:8b:66:96:fa:b5:5b:3e:95:0f:d8:f9:bf:26:b1:cf:d4:a3:
6f:cb:76:02:e0:2f:87:5b:1e:36:85:bf:f7:28:e3:c8:07:b7:
42:79:1d:46:de:ed:d5:c4:f5:a0:a4:fe:0d:e1:31:61:ef:42:
91:02:a1:b9:d2:50:09:43:e1:05:51:1f:20:7c:a4:ab:f5:6b:
17:ba:80:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:09 2026 by rpki-client