
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3552eea-b91d-4f9c-a9b1-7e9edfcf6707.roa
File: c3552eea-b91d-4f9c-a9b1-7e9edfcf6707.roa (raw, json)
Hash identifier: ATE2LU/j8t3QyixmE710bhez7ZRQ1eAgglGj1nL5ajU=
Subject key identifier: 72:72:7A:2F:CF:96:57:6B:20:54:18:1E:C1:FC:3E:AD:FB:3E:C2:5A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3B46544FD48544DC9103F0AC319713AC8732E22B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3552eea-b91d-4f9c-a9b1-7e9edfcf6707.roa
Signing time: Tue 17 Feb 2026 01:50:11 +0000
ROA not before: Tue 17 Feb 2026 01:50:11 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.145.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:46:54:4f:d4:85:44:dc:91:03:f0:ac:31:97:13:ac:87:32:e2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 17 01:50:11 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=16c553155d9027cfaf7d164f2a9963857bf8241ba70712af9ee305efcca57c10, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:f4:5f:80:d1:e0:e7:29:bd:1e:fc:13:75:
08:23:d9:be:66:dc:07:1c:fb:dc:7c:e9:cf:02:14:
69:45:84:5a:6f:37:da:52:a4:0a:9a:42:99:0e:c1:
67:21:9f:b1:5c:c2:ab:98:e3:86:e4:a6:6f:2a:02:
0d:9d:93:90:ee:1d:29:cf:43:5a:f8:df:59:db:ee:
c4:cb:e0:e8:a6:8e:34:2d:e3:0b:77:3e:45:6b:61:
74:8a:87:96:f0:74:93:e0:3b:e7:2e:a8:f8:f2:cd:
32:97:3b:ab:fa:8d:f4:70:15:59:28:e6:39:44:ed:
22:18:44:a5:dc:08:ee:51:44:c9:f5:e1:5e:9a:4b:
7f:5e:c9:f6:15:0f:95:ba:3a:fd:31:33:01:f6:d9:
81:db:22:2b:d6:d9:0c:0d:e2:fb:f6:b5:c1:95:cf:
e6:64:df:42:16:f5:71:8e:12:72:b4:b6:57:70:42:
2b:f1:c9:58:e7:f1:20:e6:10:9c:96:e9:53:7e:08:
86:17:8c:a1:dc:5c:5e:b9:01:c1:7e:16:f5:e1:5e:
e9:fb:c4:d0:ae:31:80:df:1b:ab:db:5f:a2:10:b3:
4b:4e:69:78:d9:bf:3e:20:08:c6:be:a9:7d:79:0e:
28:24:4b:c1:b2:f6:09:45:a8:ed:b9:18:e9:81:d6:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:72:7A:2F:CF:96:57:6B:20:54:18:1E:C1:FC:3E:AD:FB:3E:C2:5A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c3552eea-b91d-4f9c-a9b1-7e9edfcf6707.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.145.242.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0e:4f:b0:6f:d5:63:c9:2c:85:85:36:38:05:3d:cf:93:9e:
0a:39:f6:99:b6:4e:6a:9d:29:10:c0:0b:d2:93:57:c2:dd:9a:
26:ff:1e:25:20:35:34:9f:29:89:55:0d:61:41:03:71:85:28:
dd:02:51:a5:3a:e4:ea:b4:1f:ca:15:43:83:a6:fb:e7:e0:b5:
ed:9f:81:18:95:34:59:26:e4:b9:0b:95:a5:90:a2:b2:88:d9:
39:52:f2:3d:ed:b0:7e:fa:83:37:c8:c0:47:7e:b5:c7:3d:23:
a2:95:47:49:d7:26:c9:29:b9:5d:4e:7b:8d:ef:64:b8:f8:cc:
6e:2b:f8:6a:45:15:ef:c5:a9:b9:10:9e:46:bd:c4:35:d9:c9:
94:49:50:12:11:45:2d:ba:ed:ba:f7:31:72:71:e8:e7:9d:ff:
7b:c4:66:a2:5a:4e:3a:fc:f7:c7:5b:77:7f:e3:b4:8a:d7:1f:
26:28:60:5a:b1:70:22:f2:99:4b:a7:b8:cb:3b:54:7a:fc:99:
a7:cd:a6:77:30:85:c7:48:3b:4a:bf:2c:db:48:e2:a2:46:7e:
87:75:aa:e8:3d:20:03:9e:d4:f0:8f:c2:55:bf:8a:20:b2:37:
4d:6d:74:f5:8d:c2:db:c9:db:6d:09:9b:e3:93:0f:8e:fd:bf:
3c:b2:d3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:20:56 2026 by rpki-client