
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1d5ca7d-454a-4bf5-bbe9-1e8e731a79a5.roa
File: b1d5ca7d-454a-4bf5-bbe9-1e8e731a79a5.roa (raw, json)
Hash identifier: NZxtfKyQRkLwhL3DpNmKERz+hBq7IzJoY9wW1xOJ/fQ=
Subject key identifier: 70:29:69:75:7F:F7:5A:22:28:BD:BB:EE:E6:16:25:8F:CA:83:C3:E3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4D346935AFC34C92A7E365E7D1BA122E2EBCEA8C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1d5ca7d-454a-4bf5-bbe9-1e8e731a79a5.roa
Signing time: Tue 17 Feb 2026 01:31:01 +0000
ROA not before: Tue 17 Feb 2026 01:31:01 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 7224
IP address blocks: 3.2.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:34:69:35:af:c3:4c:92:a7:e3:65:e7:d1:ba:12:2e:2e:bc:ea:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 17 01:31:01 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=427a822ad7c08530f0852ec91c5e2a0a7f70ceb5823b83bcc6d169fe5f779163, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6e:5c:34:ba:59:7a:cd:d9:3d:36:57:23:e0:
b7:f2:3b:29:0a:86:47:0d:0d:81:1a:ba:8f:79:79:
bb:cb:74:92:2d:b9:41:0f:8c:aa:f0:20:22:77:db:
b2:2f:ed:f2:01:a6:5e:b3:4f:50:f5:7d:ad:65:e3:
23:bc:8b:6f:3e:4e:c7:49:7c:47:e6:83:ac:11:bf:
a7:b8:ac:11:88:c1:94:f4:f6:63:1b:92:0c:8a:70:
53:41:a7:82:54:86:99:83:7f:11:fd:89:f8:7c:23:
cd:df:e1:a2:03:b6:66:a6:3e:43:f0:f6:ba:c5:8e:
36:de:78:3e:de:b3:70:a7:72:fe:76:f9:c1:53:24:
29:e5:56:40:a7:02:7f:d4:c1:d8:d3:f0:4a:b0:d6:
be:1d:ff:f7:66:c2:e7:d1:93:a4:ed:68:3b:0f:f1:
87:5b:35:57:bb:8b:09:ff:df:5c:e3:6d:c9:8c:2e:
20:f9:2b:78:d3:c3:21:30:fe:f1:0e:41:d3:36:cb:
00:04:b6:3c:cc:e5:51:c5:5e:f9:02:32:78:63:97:
e6:50:8b:e0:ce:64:5e:db:7e:fd:91:3f:b6:cc:b2:
37:2c:7e:80:5a:df:cd:7a:39:a1:ed:cf:4e:19:8a:
82:5a:30:13:a4:11:b7:f2:8c:4e:42:38:79:ef:f7:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:29:69:75:7F:F7:5A:22:28:BD:BB:EE:E6:16:25:8F:CA:83:C3:E3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b1d5ca7d-454a-4bf5-bbe9-1e8e731a79a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.2.24.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:4d:a0:ab:4a:f4:57:66:e7:e0:76:86:d1:02:5c:54:00:68:
67:50:a7:a0:13:a4:5e:49:65:da:44:9d:82:6e:64:0c:dc:e4:
5b:fb:11:9c:e3:8e:4e:7a:03:9b:ae:55:95:ee:16:15:7b:bf:
12:8d:27:3a:b3:b2:a0:dc:69:93:30:b8:8d:6d:2b:77:d1:78:
98:ea:98:59:a0:3b:f6:af:ca:cb:df:e6:23:6e:15:73:14:2b:
6b:e9:6c:aa:6e:a5:47:12:4f:cd:6b:8c:ce:2f:df:0c:8e:2c:
d2:03:1e:de:0e:96:36:e3:24:28:7d:42:4e:16:39:de:15:25:
e2:1e:ef:54:6e:65:37:d6:ea:9c:01:a0:0f:e5:52:dd:e0:92:
ed:82:8d:31:2a:ae:c2:09:cb:5b:33:55:b1:20:f1:c3:28:7f:
be:3f:85:01:29:0f:cd:19:5a:b2:a5:90:0d:89:72:60:f2:d8:
b9:d4:09:6d:ec:da:e4:45:e0:f6:61:3e:fb:8e:51:49:9b:30:
29:d7:eb:b3:bb:9a:0a:5a:75:fb:91:03:c8:50:b6:18:b1:70:
f7:31:0f:71:7e:e1:bd:e9:cf:66:ac:14:af:d8:7a:81:58:d8:
9b:44:dd:18:ec:e7:6b:a2:c3:9b:b2:94:17:bc:01:0d:d4:cb:
76:0f:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:38:10 2026 by rpki-client