
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ec031c9-153c-4010-885d-f187e4165bf5.roa
File: 3ec031c9-153c-4010-885d-f187e4165bf5.roa (raw, json)
Hash identifier: ZLAoHn+NZQFwyw9dwD4hZsoXAS20zqNq3tcPtl+uL58=
Subject key identifier: 4B:9A:FE:36:AC:0A:36:98:55:83:B1:57:47:8C:35:05:BD:DD:E8:AF
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 48981A9D9D2B664D4F13944A4E951D4F345F95EF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ec031c9-153c-4010-885d-f187e4165bf5.roa
Signing time: Tue 19 May 2026 01:51:04 +0000
ROA not before: Tue 19 May 2026 01:51:04 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.162.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:98:1a:9d:9d:2b:66:4d:4f:13:94:4a:4e:95:1d:4f:34:5f:95:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 19 01:51:04 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=7dfb057ab754f894b094e931de2ef577546e87af3eebeda466e0ea302264049c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:30:70:3a:49:50:33:22:62:fb:d2:07:eb:
95:5a:ef:7b:32:9c:a4:9a:af:29:35:01:5c:a5:d0:
d3:52:ae:1e:1c:cb:5a:0f:2d:4c:db:2a:c4:c9:b8:
c9:d1:f6:bb:22:d2:d1:92:b1:49:54:9b:41:71:f4:
87:d4:ab:27:e6:6f:1e:ae:c7:84:8a:c0:68:ee:99:
e8:c9:41:07:4a:87:f2:ba:a6:54:60:21:8a:5d:2c:
cd:25:b8:83:0d:35:5c:ee:03:bf:d6:f7:22:c6:8c:
0a:1d:85:48:0e:40:59:fd:0b:31:3d:ac:00:cd:79:
4c:94:52:e7:7d:79:3c:d3:af:8d:88:43:72:52:8a:
2e:0e:2a:54:64:69:e0:ab:74:7b:2b:ff:5a:eb:68:
2c:d5:b0:1a:1a:52:0f:e8:74:4b:71:7d:9b:18:a0:
a9:c9:7b:81:0b:67:00:77:30:dc:17:af:c4:5e:7e:
5e:1b:fc:71:81:36:eb:42:f6:fb:c6:42:85:8a:54:
80:ee:74:8a:18:22:58:54:0e:ec:e6:0a:bc:d4:b1:
e0:6d:74:02:af:cc:d9:1b:4c:3e:08:3f:ff:47:c2:
95:f1:5d:72:f6:3d:18:e4:5b:ff:e6:6b:82:15:35:
d8:4c:99:da:40:ad:44:0d:89:b0:71:4d:79:08:5e:
27:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9A:FE:36:AC:0A:36:98:55:83:B1:57:47:8C:35:05:BD:DD:E8:AF
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3ec031c9-153c-4010-885d-f187e4165bf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.162.32.0/19
Signature Algorithm: sha256WithRSAEncryption
53:bf:65:55:0c:3d:a4:d4:e1:bb:6d:94:ea:5f:8e:6e:ce:e8:
15:b2:bc:ad:fe:0e:60:3e:13:fd:dc:65:8d:e8:be:a1:a1:ad:
2c:96:6a:fe:1f:cf:73:e6:da:de:86:94:50:c4:a0:56:fa:7b:
6b:9c:d6:30:8e:88:59:a5:f7:8c:3c:04:d7:1f:05:ac:39:c2:
a0:da:fe:90:7c:ed:6c:23:cb:da:fd:68:5a:96:c1:bd:b1:42:
66:bd:99:10:6f:bd:2f:52:6d:46:81:0b:d3:e3:29:55:83:ec:
ff:c4:76:c0:87:aa:8d:59:7b:78:02:d5:d4:f2:3f:28:e9:45:
e8:23:e5:57:6c:7f:df:a2:ae:13:e9:e8:ed:ee:ef:49:d5:5c:
d2:13:91:12:59:bc:ae:aa:19:b4:03:52:17:33:1d:a9:52:b8:
8e:2a:f4:05:57:6d:51:20:d8:8d:28:e1:d5:34:10:1b:12:df:
c9:30:df:9f:54:90:2e:8e:72:cb:81:30:2f:f1:d8:c8:bf:bb:
bd:32:1a:d0:26:b7:3a:ab:f4:15:fe:e3:60:67:c7:31:b3:1f:
12:7c:17:ce:25:9e:6c:43:c7:91:68:c3:4b:68:70:73:b0:0b:
a8:ec:dd:e5:f4:81:19:3f:5b:68:cb:c0:e8:77:c4:42:b9:78:
e1:ba:fc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:39:01 2026 by rpki-client