
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93cc34eb-cc89-4385-a9fe-4c6e17c4f8d8.roa
File: 93cc34eb-cc89-4385-a9fe-4c6e17c4f8d8.roa (raw, json)
Hash identifier: 0ntmpJ+uv1a4/ccwojFAcsIfCrMvFvbejPeRBMkwyzE=
Subject key identifier: B7:4B:47:8E:72:84:D3:58:1C:26:43:85:83:34:07:6E:AF:5C:31:36
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 68F675324F0CAA67FD0C67DC55504650CDF0BAEF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93cc34eb-cc89-4385-a9fe-4c6e17c4f8d8.roa
Signing time: Sun 25 Oct 2026 00:03:18 +0000
ROA not before: Sun 25 Oct 2026 00:03:18 +0000
ROA not after: Sat 23 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 3.172.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f6:75:32:4f:0c:aa:67:fd:0c:67:dc:55:50:46:50:cd:f0:ba:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 25 00:03:18 2026 GMT
Not After : Jan 23 23:59:59 2027 GMT
Subject: serialNumber=45ed8cc98b5de1d720040d1c29cfa6fbf0ec718f89859e42964ce17f258aa189, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:41:00:37:49:8f:90:2c:2b:ca:f5:27:7f:
db:64:98:cf:cf:d7:fa:a6:2a:51:36:e9:a6:b1:71:
40:6e:35:8e:6d:1e:5b:f8:42:4a:3b:3f:83:cf:12:
62:ef:f0:8a:fb:4d:74:61:9c:e8:47:5a:df:e6:85:
d8:12:02:53:8e:30:56:fb:45:74:4d:b4:df:af:60:
9c:8d:b9:3f:a4:8e:99:62:02:61:cc:61:0c:87:61:
e5:72:48:54:11:2d:86:bb:7b:f2:be:5c:d9:87:36:
93:bc:bb:40:34:c5:f7:6e:6c:51:14:80:b3:b2:85:
3c:7f:53:d1:39:5e:7f:2c:aa:26:de:3b:fe:9e:17:
d2:89:0e:f0:37:03:27:c9:ec:bd:ce:29:4b:70:77:
14:3d:77:74:77:c5:22:f9:2b:9f:99:49:4d:cf:0d:
56:c8:55:f7:d0:34:21:e9:ad:2f:7a:c7:d2:b0:7e:
df:1b:d3:70:46:66:a7:e7:49:de:e0:22:7f:69:5e:
1e:db:5e:a1:cd:40:17:4c:42:d6:10:f8:33:bf:35:
e5:be:dc:27:9d:8a:68:7e:ec:af:c4:bb:04:6b:59:
54:f4:8a:16:8f:2d:1c:4f:f1:56:26:76:54:23:44:
bb:0d:8f:03:82:73:14:0d:ad:16:6b:f5:bc:12:60:
f3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4B:47:8E:72:84:D3:58:1C:26:43:85:83:34:07:6E:AF:5C:31:36
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/93cc34eb-cc89-4385-a9fe-4c6e17c4f8d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.172.68.0/24
Signature Algorithm: sha256WithRSAEncryption
80:38:63:d7:ef:ec:ad:2f:1c:07:10:05:ba:02:8e:75:f7:5b:
20:02:94:49:db:a5:40:8d:df:2d:bc:ed:90:8c:c6:5a:5a:32:
ef:43:f7:2f:6e:ad:e6:f9:0a:c6:b5:67:80:e9:cc:da:be:64:
ff:c7:49:85:2e:3d:ee:d9:06:6e:20:a1:40:ae:24:b3:5a:c5:
8f:6a:88:78:4e:c3:e5:31:2e:5c:73:8f:13:96:29:73:86:23:
5c:b5:dc:03:6d:41:cc:b0:5e:dd:26:70:b5:85:e7:f9:32:d3:
d0:f3:2e:3f:3d:50:af:3e:18:bb:cd:54:39:72:b5:41:e9:49:
c9:65:f1:82:2d:35:0f:64:15:19:7e:87:f8:83:77:2e:26:88:
ae:23:8b:a8:39:71:9a:83:bb:45:fd:79:34:d6:07:6d:99:bf:
3d:a3:27:03:c5:b5:b5:91:fe:09:6b:2b:1d:18:fb:2d:27:c3:
23:6f:d6:f5:09:fe:09:12:c1:a2:5d:08:1c:e5:77:f1:02:1f:
a1:ed:39:93:c6:09:30:f0:c3:e0:14:f4:b5:51:a4:56:c6:5d:
36:61:f6:1e:3c:ce:ae:38:0d:d1:0a:cf:12:95:46:ab:93:20:
58:36:82:3e:46:ed:99:a3:a6:73:7a:45:3d:c2:40:73:02:a4:
67:ee:1c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 18:38:30 2026 by rpki-client