
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/925329b4-e04d-4679-a85f-eee98b19e480.roa
File: 925329b4-e04d-4679-a85f-eee98b19e480.roa (raw, json)
Hash identifier: flhNp38rKUdLfXPXE+MXW5g74EU1LWixvT1qSGHxgaI=
Subject key identifier: 90:FD:F7:86:30:EC:7D:FC:A3:43:F8:97:07:CC:CE:B1:C6:14:1A:70
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6C20968B9DAB4525FC436933B2E9B1716FE16033
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/925329b4-e04d-4679-a85f-eee98b19e480.roa
Signing time: Fri 27 Feb 2026 00:11:35 +0000
ROA not before: Fri 27 Feb 2026 00:11:35 +0000
ROA not after: Thu 28 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.174.184.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:20:96:8b:9d:ab:45:25:fc:43:69:33:b2:e9:b1:71:6f:e1:60:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 27 00:11:35 2026 GMT
Not After : May 28 23:59:59 2026 GMT
Subject: serialNumber=9bfe0179023f2d72ba15a85569ae1cfe816b3823479667eac16bf161e52d4cc4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:81:42:71:3c:61:24:e4:90:1c:6b:58:44:
70:6e:0b:0b:79:0c:39:1b:7b:5e:ab:46:68:dc:ab:
fa:03:d7:a2:f3:98:f2:a5:53:5e:21:71:38:50:7f:
75:62:79:fd:05:17:9a:71:5a:b2:a6:dd:16:2b:7d:
c6:55:ed:8a:15:bd:49:50:7c:03:fc:11:f7:f8:ee:
6d:09:fc:9b:cb:02:4e:d0:34:64:49:41:a1:2c:d0:
bc:92:04:4c:4b:51:16:52:f3:4d:2a:5c:0f:c8:38:
86:2e:a8:20:ce:23:2c:ec:aa:fe:c8:a0:f2:7d:aa:
d4:d2:1c:87:7c:07:a4:3d:36:48:90:ea:0e:d4:9b:
f4:40:07:cb:cb:0f:45:2b:dd:02:42:15:84:43:b3:
2a:ad:9a:1d:ec:c5:e2:95:3a:3d:b8:e4:dc:38:09:
65:09:3f:90:a9:83:2c:ff:be:c5:8d:93:4b:23:01:
bb:61:fe:21:7b:e4:ec:a0:01:9b:0e:3a:35:63:36:
77:f1:4b:1c:2e:4f:73:49:38:ea:68:97:38:44:ec:
15:ab:cd:cb:c4:c6:9e:dc:0c:16:72:f8:ca:55:5f:
b1:29:2e:d5:b1:a7:fb:b5:f3:bd:4d:ad:fa:db:ae:
36:b1:a6:c6:77:4d:91:80:d3:14:8f:8b:f5:88:29:
de:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FD:F7:86:30:EC:7D:FC:A3:43:F8:97:07:CC:CE:B1:C6:14:1A:70
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/925329b4-e04d-4679-a85f-eee98b19e480.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.174.184.0/23
Signature Algorithm: sha256WithRSAEncryption
61:15:f1:53:ff:94:ca:d9:ca:92:27:72:01:5e:b8:15:28:45:
f6:23:ab:af:1c:af:0f:1e:75:9f:47:60:4c:0b:d8:61:21:67:
ad:4c:d0:c8:35:a1:03:a2:5e:55:d6:3d:34:e0:f5:27:e5:0e:
dd:de:e4:02:bc:29:48:59:0a:ef:80:e0:90:cf:76:2a:73:39:
3f:db:00:af:0b:35:c9:6c:26:89:8e:9e:9a:86:a0:b1:f2:12:
d0:35:1d:0e:19:ac:0b:98:a8:e8:9b:9f:de:66:ea:17:35:32:
8b:8a:fa:6c:9b:8f:a9:64:af:29:5c:ce:72:ca:04:ec:b2:92:
c6:ff:1f:98:1d:d7:3c:1d:6d:46:1e:12:0f:9a:db:66:28:5a:
de:5f:82:ce:9a:19:91:f9:eb:47:58:cc:6d:9c:de:6d:91:d6:
b4:eb:65:0b:08:1b:4a:c8:17:1b:18:8a:3e:50:fe:56:8a:56:
19:0b:97:4f:3d:91:a8:d3:df:1a:57:8c:ce:03:ee:bd:ab:13:
6e:ad:4e:7d:2a:e5:2f:ac:a1:00:dc:33:45:17:27:44:2d:70:
7e:15:4a:bc:be:1e:dc:6e:40:32:ec:e1:37:b1:72:21:91:be:
d1:5a:64:ab:d5:e7:3c:76:8b:69:4c:77:c6:60:58:63:e5:54:
a7:42:8d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:14 2026 by rpki-client