
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e3e61d4-d511-4b5c-b686-ca4337a7cd4c.roa
File: 8e3e61d4-d511-4b5c-b686-ca4337a7cd4c.roa (raw, json)
Hash identifier: plED8ZUJfAlASkYkv7FFylwuf1zu4NawPg8o0jaMbCI=
Subject key identifier: E4:92:08:58:81:8F:0C:3A:40:23:1E:5E:64:B9:BF:B3:CC:B3:97:61
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 247520BA1EDEFB1F05E583ACF461A0BFEF28C1E5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e3e61d4-d511-4b5c-b686-ca4337a7cd4c.roa
Signing time: Tue 17 Feb 2026 00:30:12 +0000
ROA not before: Tue 17 Feb 2026 00:30:12 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.136.0.0/13 maxlen: 13
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:75:20:ba:1e:de:fb:1f:05:e5:83:ac:f4:61:a0:bf:ef:28:c1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 17 00:30:12 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=68cd39970f6ab4b8e54397e1066c4f51b88e75637772dfe8017af7656815b134, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f8:28:0f:c4:cc:8b:85:ac:26:39:c0:2b:26:
f1:12:56:f0:4c:6b:7d:1e:47:9a:f3:a9:03:72:f1:
e9:6d:bd:c4:3e:91:d7:76:f8:8b:75:7c:59:bc:05:
27:8f:d9:a1:24:75:05:0f:cd:dc:f3:d6:2d:dd:65:
db:89:47:58:11:b1:2c:80:26:86:34:21:76:c1:db:
2d:1d:06:47:b3:91:42:44:5f:34:a8:b0:76:ef:57:
b4:65:c7:77:b3:6d:3b:79:37:33:44:e0:23:69:1b:
ff:80:e3:8f:37:37:2b:72:89:52:af:1e:64:96:fb:
b6:a1:1b:22:57:c7:40:04:03:08:69:7a:05:d2:56:
da:14:c0:4c:15:6e:b9:24:d2:b9:59:9a:60:3c:b9:
3a:0f:eb:e5:76:06:fc:9c:05:97:55:d5:2b:30:bd:
44:03:9f:ad:57:a2:ee:b3:b9:57:3b:2f:d1:67:a5:
e5:c5:de:90:19:1e:10:9a:aa:7a:92:11:bf:91:75:
68:62:d1:84:3b:60:f3:5f:50:77:72:74:91:4d:8c:
f3:4b:51:8e:6c:58:ab:0f:d0:15:ae:c8:66:7b:b0:
ef:c6:18:26:57:7a:bc:87:f0:f7:92:13:07:aa:e6:
a9:b1:e7:41:cc:a1:45:0e:c1:7c:e4:3c:e3:c0:d8:
fb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:92:08:58:81:8F:0C:3A:40:23:1E:5E:64:B9:BF:B3:CC:B3:97:61
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/8e3e61d4-d511-4b5c-b686-ca4337a7cd4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.136.0.0/13
Signature Algorithm: sha256WithRSAEncryption
55:b5:74:88:01:26:6c:db:88:ea:89:90:7f:1a:b2:bc:06:55:
86:e3:ed:a5:77:95:15:29:a0:e3:24:11:4c:b5:7b:9d:0b:9a:
5e:a7:ce:cb:e8:1c:25:c3:29:e7:93:54:aa:e8:c9:a7:0f:e9:
e4:a9:25:60:db:75:53:9b:72:7c:a8:c1:34:c5:d8:9f:df:39:
2f:ba:c4:99:e3:39:f8:af:1a:35:b3:1e:a1:c6:49:a1:ce:2b:
0f:65:90:8e:a6:b4:ae:c3:9c:2c:d3:6f:18:13:92:44:de:52:
be:60:47:32:95:d3:cb:58:79:95:65:23:d5:0b:1b:2f:ac:29:
b7:e6:f4:13:74:9a:e9:32:cc:47:e6:fa:f6:53:fe:eb:e6:4f:
72:17:8f:47:89:29:32:c4:cc:60:f4:46:ff:fb:0c:e9:23:2a:
73:17:a3:72:91:45:17:c6:54:2b:38:e4:40:11:be:ad:a2:9b:
f5:7f:ad:5d:a8:98:60:6b:bc:58:57:1f:47:ef:d9:0d:9d:de:
b4:c1:eb:bf:c2:61:39:10:48:8e:cf:20:a4:0f:9c:0f:47:1e:
41:a2:64:36:58:e9:3c:5f:8c:05:55:5a:ea:e9:82:d6:4e:03:
60:79:f6:e4:12:4d:1a:4d:6a:5a:cd:b9:e8:02:ec:6a:7c:89:
6f:fc:28:ed
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJHUguh7e+x8F5YOs9GGgv+8oweUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjE3MDAzMDEyWhcNMjYwNTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A2OGNkMzk5NzBmNmFiNGI4ZTU0Mzk3ZTEwNjZjNGY1MWI4
OGU3NTYzNzc3MmRmZTgwMTdhZjc2NTY4MTViMTM0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDD+CgPxMyLhawmOcArJvESVvBMa30eR5rzqQNy8eltvcQ+
kdd2+It1fFm8BSeP2aEkdQUPzdzz1i3dZduJR1gRsSyAJoY0IXbB2y0dBkezkUJE
XzSosHbvV7Rlx3ezbTt5NzNE4CNpG/+A4483NytyiVKvHmSW+7ahGyJXx0AEAwhp
egXSVtoUwEwVbrkk0rlZmmA8uToP6+V2BvycBZdV1SswvUQDn61Xou6zuVc7L9Fn
peXF3pAZHhCaqnqSEb+RdWhi0YQ7YPNfUHdydJFNjPNLUY5sWKsP0BWuyGZ7sO/G
GCZXeryH8PeSEweq5qmx50HMoUUOwXzkPOPA2PsRAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU5JIIWIGPDDpAIx5eZLm/s8yzl2EwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzhlM2U2MWQ0LWQ1MTEtNGI1Yy1iNjg2LWNhNDMzN2E3Y2Q0Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwMDiDANBgkqhkiG9w0BAQsFAAOCAQEAVbV0iAEmbNuI6omQfxqyvAZVhuPt
pXeVFSmg4yQRTLV7nQuaXqfOy+gcJcMp55NUqujJpw/p5KklYNt1U5tyfKjBNMXY
n985L7rEmeM5+K8aNbMeocZJoc4rD2WQjqa0rsOcLNNvGBOSRN5SvmBHMpXTy1h5
lWUj1QsbL6wpt+b0E3Sa6TLMR+b69lP+6+ZPchePR4kpMsTMYPRG//sM6SMqcxej
cpFFF8ZUKzjkQBG+raKb9X+tXaiYYGu8WFcfR+/ZDZ3etMHrv8JhORBIjs8gpA+c
D0ceQaJkNljpPF+MBVVa6umC1k4DYHn25BJNGk1qWs256ALsanyJb/wo7Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:46:29 2026 by rpki-client