
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abfffe12-ebec-4645-bb49-fcce9eb504dc.roa
File: abfffe12-ebec-4645-bb49-fcce9eb504dc.roa (raw, json)
Hash identifier: iCyyt+KFL/xUJSy1Wo0cGQ2cxcdY2wNpvNnVmsboJ24=
Subject key identifier: DF:98:E6:09:60:F2:F0:0A:66:0C:92:F2:32:02:3A:1A:4B:9A:FA:CB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 379F5602D10614EFB2AD08DF83341C2AD7820EE7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abfffe12-ebec-4645-bb49-fcce9eb504dc.roa
Signing time: Mon 26 Oct 2026 03:20:07 +0000
ROA not before: Mon 26 Oct 2026 03:20:07 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 18.59.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:9f:56:02:d1:06:14:ef:b2:ad:08:df:83:34:1c:2a:d7:82:0e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 03:20:07 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=5736a1b189ef9ca9f0639443013ea445c1751c2143e0a8b55017991b6a8dc39a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fd:71:34:d9:cb:8d:2b:69:5c:b5:a5:39:8e:
ba:b9:3b:4a:0c:fd:01:5f:ca:fb:b8:cb:bf:9b:b0:
94:fc:17:61:77:a6:0f:56:b1:68:bc:8b:3b:2b:f0:
9f:3c:1d:01:eb:23:00:82:8c:34:52:1c:1e:37:1d:
d4:53:ae:1d:8b:8c:fd:b4:71:f4:b5:6f:0c:46:b3:
c4:b6:40:ce:fe:6a:53:c0:84:87:70:b5:7f:e4:f8:
52:9e:b3:36:7b:cf:4d:4b:b0:d0:80:80:1f:0d:0c:
ed:65:af:d1:6f:76:1b:73:20:11:8e:4d:ea:a2:a0:
c6:c6:37:86:d8:54:d4:fc:5d:d0:e7:9b:1c:b5:9e:
21:66:b1:2b:b8:92:09:07:88:2e:23:15:36:4b:bb:
41:7e:79:49:48:4d:40:31:03:a5:68:7e:24:44:08:
35:a5:07:c5:c4:9e:88:75:7c:ba:a0:69:69:f2:e6:
9f:ee:ff:91:5e:35:25:36:05:9b:80:2c:a7:d4:82:
4d:96:c2:c5:f2:b4:89:d5:f8:ee:15:8e:ef:cf:72:
a7:df:5c:21:fb:99:1b:99:a5:e8:bd:75:66:fb:c6:
d2:74:5d:b4:85:8e:74:b6:24:3f:46:f5:17:61:59:
9b:1d:ce:8f:3e:ae:b8:04:ba:ca:0a:64:cc:9b:b1:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:98:E6:09:60:F2:F0:0A:66:0C:92:F2:32:02:3A:1A:4B:9A:FA:CB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/abfffe12-ebec-4645-bb49-fcce9eb504dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.59.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:f9:84:86:d0:fc:9a:3d:c1:b5:c9:ba:3d:a5:ae:b6:b0:03:
37:7d:02:10:61:06:9b:c7:86:d9:7a:1a:2f:65:db:96:37:91:
ef:23:aa:a6:48:b5:6e:b9:8f:45:41:04:0e:15:7f:7b:d4:cb:
b8:a3:36:c4:dd:a3:bb:c2:09:7d:54:0d:43:f5:41:2a:73:5a:
19:98:1f:a6:03:44:b9:80:29:5d:58:b5:63:02:eb:b3:9e:01:
70:03:7d:94:52:4b:86:41:ba:55:20:51:1b:f6:17:8d:68:fa:
59:be:37:10:fd:cf:7c:ed:58:32:22:16:a5:2e:3a:b5:c7:36:
54:09:c0:03:29:71:81:d2:8e:20:d8:61:95:4b:79:f7:b2:bb:
6f:23:16:0e:04:04:17:07:66:d5:8d:65:da:ca:97:0f:37:a8:
38:b7:fd:1b:c6:fa:70:d0:52:c5:f2:16:9f:73:44:ea:14:33:
39:88:2c:18:d9:03:fa:97:7b:0f:67:45:e1:0e:da:4b:96:16:
03:2a:21:af:21:d8:a9:70:9b:b3:03:9c:67:03:cd:16:78:58:
99:46:82:33:ce:0c:ac:64:da:ca:e3:80:97:b4:06:20:85:ed:
f9:54:d9:ce:3f:07:fa:4f:b9:4a:2e:84:10:c3:58:eb:6b:25:
d6:04:15:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 04:17:02 2026 by rpki-client