
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e36d787b-b664-4de8-84ea-da189c7848fe.roa
File: e36d787b-b664-4de8-84ea-da189c7848fe.roa (raw, json)
Hash identifier: +1zi0kL1bM1mUUEjyGgORf5ki/ADpPQkqab0IX0iuuQ=
Subject key identifier: 9A:FB:79:8E:0A:0D:6F:A2:72:F0:BB:6D:52:64:42:93:1B:CF:D0:D1
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0B9DF6E7AC512F6F0A62EDD54C16A6B3E9107B62
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e36d787b-b664-4de8-84ea-da189c7848fe.roa
Signing time: Thu 26 Feb 2026 01:00:07 +0000
ROA not before: Thu 26 Feb 2026 01:00:07 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 161.188.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:9d:f6:e7:ac:51:2f:6f:0a:62:ed:d5:4c:16:a6:b3:e9:10:7b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 26 01:00:07 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=2e2461cf03db6fde1cff513d7d84a8ad872037cde8f74bd387a9d003ce551f37, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:86:44:a8:9e:f5:52:6c:c2:85:7c:f5:19:c9:
53:7e:a8:dc:8f:50:ef:c8:e9:9f:eb:cc:69:cd:56:
f3:be:38:5b:55:7c:09:05:fe:47:1c:c4:0f:e5:23:
86:a6:fe:61:73:5a:35:85:c3:57:f1:ba:fc:20:e0:
14:e9:57:b7:95:6e:16:b1:32:89:3e:8c:07:e1:4a:
4a:ab:47:b3:04:ae:e4:94:0c:47:10:3c:a2:d5:0a:
27:c8:e2:74:d9:f2:4f:b9:3f:f7:35:cc:2f:aa:66:
8f:6c:0b:4b:fa:44:2f:8f:d8:1d:f6:be:30:71:54:
08:88:10:0d:f6:9e:81:30:0a:2e:05:f0:6a:e6:21:
e4:e4:7c:97:08:23:7c:49:3a:81:d3:c9:f4:32:30:
89:cd:47:1e:78:29:18:cf:b5:65:ee:33:bf:de:be:
f2:79:be:61:2f:0c:71:30:ba:23:bd:ef:8b:9f:d2:
5f:1f:3b:75:27:fb:a8:1b:20:04:49:ca:98:d4:82:
39:91:78:16:3f:d5:db:67:db:70:e2:eb:97:8f:95:
38:16:0b:28:45:2c:22:6e:94:69:d1:7e:05:fa:47:
58:97:0e:4a:7b:99:29:cd:1c:64:5d:db:4d:77:69:
25:cd:4c:98:78:09:42:69:50:c6:57:ad:3e:86:52:
f4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:79:8E:0A:0D:6F:A2:72:F0:BB:6D:52:64:42:93:1B:CF:D0:D1
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e36d787b-b664-4de8-84ea-da189c7848fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.188.174.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:0f:c5:12:ba:06:3d:d3:10:d1:ca:03:43:a8:9d:30:88:3c:
f3:fb:67:f2:6c:7f:27:4f:b5:cd:ae:d5:ec:7a:39:e5:75:5d:
80:62:f5:bc:9b:b3:88:f1:fb:04:73:40:f7:0f:13:06:81:73:
24:02:8f:0c:7a:df:e1:1d:63:aa:7a:9d:27:53:cb:99:99:ce:
4a:38:3a:72:b6:88:dc:a3:cb:d8:3b:ec:88:6d:81:cb:7b:a3:
fd:c3:6b:e8:a5:09:76:77:94:db:51:b7:d1:06:32:60:58:91:
58:85:98:8d:26:64:57:e5:56:a1:71:0c:a9:90:4b:9d:2e:bf:
1c:7e:8a:fe:54:fd:65:db:77:06:67:f1:d3:86:75:89:f8:bd:
f9:0a:9e:da:01:27:2d:d1:c8:b1:db:06:03:e0:50:9a:c4:66:
d6:55:3f:87:94:ac:a6:dc:78:5d:de:d0:7b:64:34:7d:e0:6b:
0c:0d:22:09:99:d9:da:51:b9:64:a3:bf:63:fe:fc:bd:d9:88:
59:8b:a7:1e:58:8a:ab:50:3c:58:db:55:ed:32:d4:36:fc:8f:
e8:d4:fa:a4:35:ce:b4:84:28:01:21:ae:70:6b:22:35:69:0e:
c7:48:51:3d:d8:d8:9c:4e:3d:9a:aa:f7:90:da:30:f7:4a:ef:
a1:d1:48:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:45:54 2026 by rpki-client