
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97fe0f38-a6b4-446b-af5f-79b357ff78fb.roa
File: 97fe0f38-a6b4-446b-af5f-79b357ff78fb.roa (raw, json)
Hash identifier: uxTMbaEsZE/zMS93g3afKKLGHz0mRk/ywinF88tU0q0=
Subject key identifier: 24:ED:18:1F:60:4E:0E:66:00:3A:11:F8:BB:32:51:03:BF:6F:4D:3F
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3AC678C14A5638617B5AA16D255F13BFC49BCA4C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97fe0f38-a6b4-446b-af5f-79b357ff78fb.roa
Signing time: Sat 28 Feb 2026 04:20:04 +0000
ROA not before: Sat 28 Feb 2026 04:20:04 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 167.149.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c6:78:c1:4a:56:38:61:7b:5a:a1:6d:25:5f:13:bf:c4:9b:ca:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 04:20:04 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=0dd853a0eaf4c1237333cbf8db5769f1e0216dbbdc0c7adf1d7542b59cdd6910, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:79:df:8b:fe:61:56:a4:97:36:57:82:c8:7c:
28:b3:fc:8d:73:94:be:7c:5b:5e:49:a0:bd:90:95:
21:08:9e:b3:f2:a1:1d:c7:eb:dc:d0:68:b1:29:ad:
b0:93:2a:9e:5e:8e:b9:89:1e:4f:77:e9:e9:cf:16:
e4:77:0c:51:c7:2b:16:4d:08:1f:f7:bd:6b:a4:59:
83:18:18:79:7b:01:72:fb:95:78:65:65:23:52:c4:
38:6a:98:79:69:58:ad:7d:44:8d:2f:16:5c:de:9d:
d1:d2:36:82:e0:6e:61:77:1e:14:77:f3:c1:8f:9e:
f1:1e:16:cb:8c:31:50:2b:89:0d:9f:a2:89:c5:67:
cc:24:d7:6c:4a:9e:d4:bc:28:8c:45:25:4e:7a:5b:
f1:d5:cb:29:de:c5:00:75:3c:9d:6b:89:eb:e9:63:
4f:c1:5a:78:44:f7:6e:d9:91:09:d3:8b:85:97:e3:
d1:ca:9a:3e:97:6e:5e:cb:49:1d:ff:c4:6c:8e:00:
bb:e8:70:cb:8f:c2:2e:26:69:b3:e7:05:93:bb:fa:
5d:1b:b4:df:24:91:1d:ae:05:1b:03:ed:ad:42:e1:
a1:9a:ff:f7:dc:81:5c:55:54:40:12:cd:0e:ac:67:
98:5d:fe:c4:db:37:90:10:89:ad:09:2f:ac:79:c0:
71:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:ED:18:1F:60:4E:0E:66:00:3A:11:F8:BB:32:51:03:BF:6F:4D:3F
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/97fe0f38-a6b4-446b-af5f-79b357ff78fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.149.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:27:48:da:1a:93:e3:4a:ad:e3:1a:c5:8b:f5:18:4d:eb:cb:
6d:d8:b1:17:1b:31:b2:3f:4e:2e:69:5e:4f:3d:9d:de:a4:57:
58:e8:f5:2b:af:06:87:5f:d6:0a:f9:07:4a:1e:ae:77:38:da:
70:22:04:5b:f6:7b:9e:2b:ba:96:d2:20:dd:0b:d2:49:6a:4b:
93:cd:22:5b:92:3b:18:d6:2d:14:05:24:94:3b:7d:c6:28:c1:
ec:d5:94:0a:de:6c:62:04:c7:b7:24:e4:a8:ad:dc:9d:65:7c:
6b:a7:1d:32:cc:5c:75:bc:62:ce:eb:b0:e0:77:cc:24:4e:5e:
52:61:71:e4:5b:f4:88:63:70:f9:7b:23:e4:76:a7:9b:29:2c:
32:8f:0b:8a:ef:3a:81:ce:1d:7e:47:07:17:ab:64:6a:9d:d6:
34:85:02:5c:d7:a8:f9:ed:30:08:a7:3d:94:ee:1c:b0:25:47:
ac:14:15:15:08:f6:b3:53:02:fa:bf:6c:28:89:b4:2e:56:26:
da:ec:9f:13:5b:26:1c:84:11:8d:99:4b:ef:25:85:05:03:7b:
02:6d:8d:7d:ef:bc:52:0b:94:05:d5:1a:bd:b5:09:b7:46:a6:
a0:95:ab:46:64:2c:27:11:7f:62:93:e5:24:55:2c:f4:c1:fa:
3d:d6:49:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:24:36 2026 by rpki-client