
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c012870-51dc-4825-aa6f-b9a46d8f6573.roa
File: 7c012870-51dc-4825-aa6f-b9a46d8f6573.roa (raw, json)
Hash identifier: 57oZswsMjrKx5ph7STUy1uMpy0jjhwKWMoveyeNd8ys=
Subject key identifier: B0:50:1A:3C:45:DC:02:E6:C3:AF:29:B6:A4:23:9A:D2:0E:56:C2:D8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 196400227F9B676CE4ED715E3CC9FC5A7025B908
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c012870-51dc-4825-aa6f-b9a46d8f6573.roa
Signing time: Fri 27 Feb 2026 00:20:48 +0000
ROA not before: Fri 27 Feb 2026 00:20:48 +0000
ROA not after: Thu 28 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.170.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:64:00:22:7f:9b:67:6c:e4:ed:71:5e:3c:c9:fc:5a:70:25:b9:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 27 00:20:48 2026 GMT
Not After : May 28 23:59:59 2026 GMT
Subject: serialNumber=3e8b02fe5a577538d0a17605666606ff1fea73cfb53189b70a212ff01535ea46, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:ad:74:e3:42:62:1f:31:f0:a8:a9:2a:22:
9f:f9:eb:cb:3b:03:43:40:8d:87:92:bf:ac:8a:7e:
ef:33:ea:4b:52:40:32:a4:25:a0:cb:e5:1a:2e:3d:
00:fa:23:89:65:27:54:a5:36:28:da:5d:f6:99:fe:
4c:de:04:03:69:95:42:d2:08:4b:de:a7:ab:02:8a:
a8:b8:d8:79:14:95:ed:e8:90:34:f5:2f:8e:7a:49:
c8:4d:d4:b3:e1:66:04:b5:d5:a3:b3:c7:d3:b7:ed:
40:27:cc:a3:97:4c:02:27:1b:a7:8c:ff:64:55:4b:
bb:f4:ba:66:f6:15:1c:0d:7b:da:d1:85:17:d3:5d:
77:0d:70:df:95:23:a0:ba:1a:18:6b:5f:0e:75:a7:
27:21:6e:5a:0f:b7:11:bb:1a:92:98:ad:f7:87:50:
d4:cf:1d:a8:62:13:6e:55:bb:2c:ab:11:8d:47:ef:
fd:d3:b2:10:51:bd:75:40:f9:07:b0:41:26:41:d6:
75:73:bf:80:bd:af:32:2e:7f:22:2a:75:2b:0f:ad:
1a:14:28:f6:49:b9:c4:bd:82:c2:68:6e:03:63:3f:
87:77:4e:a9:cb:7b:fb:a1:aa:c2:cb:fb:b6:f7:98:
d1:a1:8d:5d:4a:0b:5e:b5:88:0f:c5:8e:75:ac:dc:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:50:1A:3C:45:DC:02:E6:C3:AF:29:B6:A4:23:9A:D2:0E:56:C2:D8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c012870-51dc-4825-aa6f-b9a46d8f6573.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.170.178.0/23
Signature Algorithm: sha256WithRSAEncryption
24:af:a0:30:10:5d:0b:19:f2:87:54:24:85:82:b9:4f:d5:b5:
22:e4:72:d0:d5:86:1c:34:12:85:a4:f2:f1:01:46:23:37:4c:
d3:ad:c1:c1:5c:e8:9c:34:ff:b3:0c:51:0b:5c:09:80:77:bd:
0c:fc:1b:92:8a:f9:02:49:52:d3:15:46:cc:88:ff:01:96:8d:
97:68:d4:4b:03:28:f7:37:e8:83:3d:46:e7:21:74:34:bd:bc:
34:5f:88:65:0f:a9:d6:da:72:b3:96:b1:df:9e:4e:c3:18:99:
d3:ea:a9:2d:e0:6c:10:5a:c2:ef:56:43:fe:a1:a3:44:ae:3e:
97:62:eb:6f:18:5e:af:f9:c5:eb:1d:5e:00:50:b6:6e:6f:35:
cb:44:9c:87:1d:cc:8d:de:12:77:5c:1e:6b:30:fd:e0:d6:d1:
9d:48:50:ab:dc:25:2c:74:11:3c:5b:4d:4d:4e:29:ec:f3:8d:
d2:e8:05:d9:9d:5d:b2:52:46:de:e2:81:c9:8b:05:04:d2:c1:
8b:bb:37:fd:69:b1:f6:bb:b0:39:91:92:3b:3a:63:b5:e4:ef:
b3:39:65:fb:e7:47:94:a1:69:9d:c4:4d:3d:d3:e3:43:5e:28:
bd:a5:47:3d:b2:e2:2e:ac:30:df:f2:4e:7e:25:b3:e0:be:4a:
ef:7d:be:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:26:20 2026 by rpki-client