
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/617cf818-f42e-43e8-aca6-8abc1159967c.roa
File: 617cf818-f42e-43e8-aca6-8abc1159967c.roa (raw, json)
Hash identifier: HrJy/UF9PpQXIgTWg8lozVPKyA4gDmJe59TmhQjc7SY=
Subject key identifier: E2:7E:4F:E6:FA:39:E4:C8:74:D6:37:82:7C:7F:F4:92:5C:E5:38:51
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 520FBF16ACF76451DB6A9A8467EFEBBF5B0A5F3D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/617cf818-f42e-43e8-aca6-8abc1159967c.roa
Signing time: Mon 18 May 2026 00:00:47 +0000
ROA not before: Mon 18 May 2026 00:00:47 +0000
ROA not after: Sun 16 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.173.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:0f:bf:16:ac:f7:64:51:db:6a:9a:84:67:ef:eb:bf:5b:0a:5f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 18 00:00:47 2026 GMT
Not After : Aug 16 23:59:59 2026 GMT
Subject: serialNumber=f4d337ece681a912bc36375a807cca839973a06ad5593a5168ab7cd4393a3232, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:fa:1b:cd:18:f4:1e:7e:c7:2a:35:1c:f8:
89:49:c4:c7:c5:97:1e:53:95:f7:7a:ee:04:0a:83:
ec:e4:4c:ef:05:dd:55:3b:2f:5e:8c:4c:92:f5:90:
cc:a5:24:db:19:b8:7a:08:c1:0e:ae:16:16:c6:15:
d6:b0:cf:41:d7:ed:ef:90:40:28:86:8f:5a:70:1d:
c4:34:c6:0b:97:ef:65:8a:ec:84:bf:67:99:79:ae:
17:22:99:d0:41:b2:92:4c:bb:e6:53:ba:3f:de:af:
b1:3b:9d:45:58:e1:7c:bf:7c:1e:24:78:1b:2d:7a:
8f:3e:8c:1f:af:a4:83:33:87:ac:6b:47:8c:c0:a2:
e1:90:5e:f7:b8:1a:ae:78:2b:1e:db:c9:c5:c3:5a:
b5:47:70:24:0b:70:8a:0b:9b:c9:b8:3d:93:1d:de:
c0:68:31:8b:26:39:fb:16:76:f3:bd:9b:4f:b5:60:
31:e1:b8:f7:45:a2:9b:eb:6a:3c:50:de:e2:97:b2:
0b:dc:d1:e6:9a:4b:1b:25:04:eb:50:47:1d:bc:6f:
80:5f:13:86:1f:72:4b:88:c3:18:cb:60:81:5b:11:
f4:a4:4c:e4:20:04:9d:57:75:c8:40:14:80:c9:00:
58:cc:9a:51:40:d8:28:cd:43:7b:e4:fd:8c:57:1a:
d8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7E:4F:E6:FA:39:E4:C8:74:D6:37:82:7C:7F:F4:92:5C:E5:38:51
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/617cf818-f42e-43e8-aca6-8abc1159967c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.173.92.0/24
Signature Algorithm: sha256WithRSAEncryption
64:fa:b8:16:86:59:9a:fc:b4:3d:93:7b:f0:74:a7:2b:7f:a9:
8e:83:90:01:a1:44:92:0d:84:41:1c:25:0c:c8:7f:db:09:b0:
78:41:f9:c4:f0:b2:44:fd:fb:1f:ef:07:01:41:4c:21:f3:52:
d1:ae:86:cf:7d:69:bc:da:68:ea:bf:06:2b:d7:10:a6:e3:7f:
c6:f9:11:94:1d:65:c2:48:01:04:be:31:8c:eb:0b:49:01:3b:
57:4d:32:93:d7:42:e5:21:9d:32:ff:75:6a:b5:35:e5:d5:b0:
0c:4d:e8:26:25:af:3b:cf:52:b9:df:36:0b:ae:29:ae:6b:7a:
10:01:e7:01:6f:94:b0:ef:01:94:e7:92:b6:8c:e9:ac:9a:a6:
ee:c8:9e:42:f6:a3:38:55:1c:ab:67:11:f7:01:46:0e:f1:87:
16:3f:d9:6d:f8:aa:cb:59:4e:74:be:e9:de:9c:80:02:84:f5:
94:f0:ff:fb:af:d1:26:e0:ee:34:5a:0e:13:5f:f8:cc:37:29:
40:21:ae:eb:46:0e:9d:c2:cb:66:29:26:51:36:2e:86:f0:b4:
94:47:e4:9f:6b:c5:43:59:4c:9c:bd:8f:66:cd:56:28:07:85:
26:65:b4:e4:e4:cb:9b:c8:15:33:23:6f:ac:40:f8:c6:ae:b9:
9f:e3:57:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:35:53 2026 by rpki-client