
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90ebf1bc-924e-4e44-bcdd-47fe60c0191a.roa
File: 90ebf1bc-924e-4e44-bcdd-47fe60c0191a.roa (raw, json)
Hash identifier: axtvmWdYSkwrCNZpCHAvK4i0AbT+864FyKPv7BAG3xs=
Subject key identifier: 18:F9:B4:2E:41:79:DE:00:1D:7D:2F:D5:3D:52:B3:44:A6:43:AD:D2
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 76B854D7A5E363223358649702483CCE200BCB06
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90ebf1bc-924e-4e44-bcdd-47fe60c0191a.roa
Signing time: Sun 17 May 2026 01:50:29 +0000
ROA not before: Sun 17 May 2026 01:50:29 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.38.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b8:54:d7:a5:e3:63:22:33:58:64:97:02:48:3c:ce:20:0b:cb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 17 01:50:29 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=a8cb8b0e72c6b083df1de5d39a30bc2bca0502b0871af32216f39d172e0f7fe6, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d7:71:a9:e6:58:b3:ca:eb:a0:41:bb:aa:8f:
ac:f5:94:17:79:5a:2d:44:db:b8:68:92:75:4b:19:
7f:c9:70:d9:30:c6:1f:02:8d:d0:d7:8c:7a:0b:34:
e4:53:3c:21:4f:75:3b:35:fc:d7:9c:61:06:b5:a4:
2b:0e:4c:f4:a0:31:d5:35:03:0c:29:67:b9:d3:09:
74:47:c0:0b:53:e7:ab:99:fb:08:24:88:b4:9f:d0:
c8:3d:1f:a1:a7:5a:81:5e:45:b8:a1:73:fe:37:18:
26:32:35:44:ec:99:9f:2c:0d:e5:51:9d:5d:b1:ec:
76:4b:a0:05:a0:34:bb:cd:fa:87:e5:f8:01:db:26:
b8:84:73:e2:20:0a:1a:2a:84:56:4b:86:b7:96:25:
ac:bc:0f:36:3a:ef:b6:4b:57:8d:f6:ed:f9:20:97:
83:fd:32:d1:7a:65:81:2c:66:ec:65:82:c9:36:f9:
4c:e6:0e:b3:47:a7:14:02:83:04:f5:6b:65:76:df:
ad:7d:60:b3:db:5f:84:97:cf:d4:d9:ba:5f:02:c1:
8d:83:ea:64:3b:13:b6:89:7f:42:fa:7d:9b:81:23:
70:1a:6a:92:f7:93:87:43:a6:9c:f8:37:15:f2:1d:
77:37:fd:ef:50:61:42:34:26:9e:29:37:59:60:84:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F9:B4:2E:41:79:DE:00:1D:7D:2F:D5:3D:52:B3:44:A6:43:AD:D2
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/90ebf1bc-924e-4e44-bcdd-47fe60c0191a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.38.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:65:e2:7b:e9:99:42:64:d5:31:6c:35:3e:0b:58:f6:cc:f3:
d2:8a:2d:8a:2a:df:4e:62:d2:25:22:0f:cb:62:37:3d:2e:51:
8a:1d:b0:bd:70:61:63:66:f4:d0:61:66:c3:1b:5e:1b:f3:41:
51:61:45:0c:89:3b:5e:1f:8a:9d:a6:f2:e3:29:04:ba:dd:87:
da:f2:fa:f9:af:08:c3:4f:24:2b:70:97:39:eb:00:48:86:47:
cd:b7:96:0a:2e:90:50:6d:88:27:2a:6e:06:b8:8b:20:2c:23:
76:29:8c:8c:01:0a:1c:b4:99:54:de:de:35:d0:02:cd:b0:d6:
dc:9e:66:28:74:4a:bf:91:32:cf:cf:39:78:65:3b:14:53:21:
e2:c1:78:d8:4d:ba:00:61:b1:fc:3e:e3:0f:39:0a:2f:4a:4e:
f6:30:f3:aa:a5:1f:95:05:1b:8c:ce:15:97:b5:7e:db:36:42:
02:07:4e:ff:0e:88:ba:57:8c:b6:a0:fa:e5:d3:e6:68:c9:12:
7b:5b:eb:ee:9d:7a:ed:f7:d6:de:30:f0:2e:0f:33:b3:14:a8:
31:01:f6:8f:ee:1e:84:ce:02:e8:63:89:2b:9e:8e:a3:b5:6d:
d8:60:5b:2e:0f:c4:76:ae:07:1d:a9:a5:69:61:a8:73:0e:4f:
13:5b:1f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:49:51 2026 by rpki-client