
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/646ca2ce-9692-42e4-9657-70d79c5090e3.roa
File: 646ca2ce-9692-42e4-9657-70d79c5090e3.roa (raw, json)
Hash identifier: cXrUJOg8gVgqNDdZC05fntTKRStxE344tGh/Qw8EGA4=
Subject key identifier: 4B:89:D8:BE:86:FB:62:46:D5:D7:F9:A4:48:49:C5:C4:6B:61:64:63
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 386C3ECA0BEB337E76EC550F73720DAF0ED356A7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/646ca2ce-9692-42e4-9657-70d79c5090e3.roa
Signing time: Sat 28 Feb 2026 04:20:41 +0000
ROA not before: Sat 28 Feb 2026 04:20:41 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.162.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:6c:3e:ca:0b:eb:33:7e:76:ec:55:0f:73:72:0d:af:0e:d3:56:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 04:20:41 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=93d6474c6276dfebb3831b8a47735c28859988f859120d7e8c15374634fee478, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:e2:a5:9c:0c:ad:35:5a:65:0e:13:db:b4:
fd:ff:0c:cb:44:64:6f:49:4c:94:5e:66:24:7f:b1:
a6:79:03:8f:a4:e5:b8:be:32:f5:b8:51:7a:8e:72:
8f:32:6f:43:6c:bb:03:b8:ea:7e:0c:19:ee:e8:c6:
c8:5e:fd:ee:99:e7:f6:3c:38:ef:4a:c3:e0:67:41:
b4:fc:e0:7b:b9:e8:19:99:d0:e5:45:e1:23:8e:80:
9f:10:89:b5:60:87:0e:42:75:f2:d3:9a:27:f1:2d:
21:8b:d6:6d:f4:74:ee:97:06:11:27:61:36:5d:7d:
fb:07:df:8b:12:44:94:8e:6e:4c:ff:91:12:64:45:
23:cd:fb:6a:7f:2a:c6:89:ee:8e:e5:43:da:07:db:
c5:43:f0:9c:04:5b:48:79:fc:24:5a:9f:f2:8d:75:
61:0e:f5:03:c4:41:3b:af:41:1c:6c:8e:e5:7b:85:
28:e7:5f:86:83:7e:91:b7:44:b0:e7:fa:55:60:9b:
8e:36:01:41:3f:44:ee:5d:c7:d4:93:cd:ed:33:af:
3e:19:80:97:75:0d:ad:66:d8:9e:55:c3:c8:83:a3:
69:2d:b2:1c:83:b0:dd:3c:28:0e:38:1f:2b:04:98:
e6:3d:46:05:42:d1:38:e4:29:d6:0b:73:28:f0:36:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:89:D8:BE:86:FB:62:46:D5:D7:F9:A4:48:49:C5:C4:6B:61:64:63
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/646ca2ce-9692-42e4-9657-70d79c5090e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.162.64.0/18
Signature Algorithm: sha256WithRSAEncryption
32:4a:73:8a:2d:3a:58:da:7f:87:dc:93:5a:e8:f0:e5:a7:ab:
eb:d4:9b:59:f7:8a:2e:ce:c7:6a:23:5f:45:d3:1a:0e:99:8f:
ae:41:3c:d4:f0:ee:e1:9e:6b:ed:57:f0:78:44:c9:38:b8:20:
5d:32:74:f5:a1:4d:ee:6e:c5:b3:53:7a:f2:e2:a9:89:c6:6f:
6f:c7:df:0c:c1:ac:47:39:53:61:dd:b6:65:e1:db:69:7e:e3:
50:05:56:b4:9f:e7:8e:49:ff:f1:d5:fb:bb:2e:83:8d:3f:09:
63:af:70:11:c7:d6:82:16:5e:b1:bb:c7:f1:58:a4:64:30:9c:
3c:9a:b2:66:12:77:cd:02:1f:c0:83:33:7a:38:05:dd:72:51:
8b:8f:1e:0b:f9:4b:34:6f:a4:cc:37:8e:a1:3e:b6:62:5f:21:
e9:06:29:13:79:cd:84:06:b2:fb:96:6e:ea:59:82:8e:4a:68:
c1:17:4f:30:12:80:23:c9:c7:f0:e9:6e:f6:be:cb:88:cd:53:
77:f3:d4:3b:2b:81:d5:4c:1c:75:39:ad:59:68:be:12:df:f4:
97:ac:59:45:f4:c9:e3:bd:20:91:76:fc:a7:7a:37:93:82:8d:
01:8b:e9:ce:96:33:e1:1e:22:07:6b:14:18:85:60:2d:68:60:
4d:b0:8b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:24:41 2026 by rpki-client