
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b095ba23-4f90-4fe2-9413-e7d439cef9a8.roa
File: b095ba23-4f90-4fe2-9413-e7d439cef9a8.roa (raw, json)
Hash identifier: v6ZluSLElU7z+bAX8ftR/3p9lV2BUbo4UL4MlsRia7Q=
Subject key identifier: 6E:AB:03:C6:4C:F6:74:A7:76:38:B4:4C:5E:AB:FD:B7:8D:90:52:61
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3FD09FE9D4481BCBB32C0932F7471FB19BF1FBEC
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b095ba23-4f90-4fe2-9413-e7d439cef9a8.roa
Signing time: Sat 28 Feb 2026 03:01:56 +0000
ROA not before: Sat 28 Feb 2026 03:01:56 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 136.20.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d0:9f:e9:d4:48:1b:cb:b3:2c:09:32:f7:47:1f:b1:9b:f1:fb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 03:01:56 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=39454f9e9ced8e49cdbbe41b4d04c41a299e581f787ad31cacb8e67225fe1d76, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:6b:96:6e:9b:f5:09:9c:b6:0c:e4:97:db:
a5:f7:c5:b9:28:45:d0:e2:1f:43:4e:5e:d6:ce:e8:
d4:84:57:18:99:f3:d0:60:21:48:7e:07:67:d7:0b:
a3:04:6c:1e:93:57:09:4a:05:92:0b:80:c7:e3:cb:
92:40:3c:d6:97:f1:15:b4:80:87:c2:74:11:bd:35:
5e:53:57:5e:15:8d:e4:60:08:a6:6b:8c:cc:7d:85:
d5:ca:54:24:ec:c6:34:28:ca:cb:2f:35:03:53:b2:
40:d3:a3:5d:fb:0a:fc:59:bd:e3:89:56:5b:eb:3e:
8b:60:fd:48:23:13:93:4c:b0:b1:e6:f8:cd:c6:ea:
28:1d:91:08:da:ee:9f:27:a8:86:00:88:37:eb:ec:
01:de:ac:6c:c8:d5:de:a0:16:63:e8:8b:32:0e:67:
93:93:51:f5:0c:3e:fe:7a:bd:c4:19:d8:92:13:6e:
28:9e:29:d7:5a:7a:b8:06:f6:63:e6:60:31:39:f1:
32:18:e5:65:47:c4:ef:9b:b5:76:09:2d:aa:e5:fe:
a4:bc:70:3d:35:c1:ff:a4:ca:9a:af:96:a3:a7:8a:
59:dd:3b:59:72:31:76:0f:a3:6f:05:1e:1d:2b:69:
ca:4f:79:31:ec:9c:44:09:f9:b5:60:b3:87:ac:72:
19:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AB:03:C6:4C:F6:74:A7:76:38:B4:4C:5E:AB:FD:B7:8D:90:52:61
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b095ba23-4f90-4fe2-9413-e7d439cef9a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.20.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0c:f5:71:15:4a:e3:48:aa:a1:8f:f7:fa:f6:2d:80:fc:6e:f9:
8a:29:bd:63:c4:b7:2a:bd:e3:8a:d0:23:37:5c:8a:72:cc:63:
e0:63:e6:3d:f7:11:5e:8c:23:f4:5e:c5:2e:43:0e:16:2e:98:
47:45:3c:b1:58:38:cb:5f:9b:61:3b:99:30:73:15:02:8e:36:
71:26:3f:e9:d1:99:7b:99:1d:f4:55:33:bb:46:8c:5e:ce:49:
64:33:54:3d:61:75:b5:db:41:52:21:8c:73:7a:23:6c:64:0d:
42:9b:a2:76:59:86:47:c1:0f:87:51:b9:89:8d:19:e9:1a:4e:
11:51:d4:f0:a6:b3:fe:00:8f:38:27:54:f2:0a:ad:9a:31:fe:
4e:a8:d1:f9:a5:c1:57:47:f5:ab:07:67:f6:82:f4:0a:f3:2c:
20:37:60:b5:5a:85:9a:e9:93:e7:ef:41:34:f2:b7:72:88:c4:
55:80:7e:2f:86:e5:e0:df:da:84:6b:2e:72:75:e2:f4:7b:6f:
e6:ba:1e:a7:0c:9f:39:0a:fc:ce:a6:fc:a5:16:62:08:fd:19:
1d:0b:b0:c9:ff:1f:66:2a:6d:72:24:eb:d4:53:01:3c:17:b1:
2d:50:f1:ae:bb:53:bb:b3:01:78:1a:22:9e:4e:0f:02:b8:b4:
80:e1:aa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:15 2026 by rpki-client