
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc4fbb2f-8181-4042-a0fb-8b62064b76fb.roa
File: fc4fbb2f-8181-4042-a0fb-8b62064b76fb.roa (raw, json)
Hash identifier: SN68FmIbkxAHGd/7sj4EURwwgV7CMJoTd6Ae7dhF7gc=
Subject key identifier: 85:6C:C6:C6:4F:D3:2B:8C:FE:09:6F:CA:13:30:5A:36:FE:CB:0B:03
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2A7C25192300F57C560357D442519C7B2EA97E1B
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc4fbb2f-8181-4042-a0fb-8b62064b76fb.roa
Signing time: Thu 08 Oct 2026 01:05:09 +0000
ROA not before: Thu 08 Oct 2026 01:05:09 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 3.173.94.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:7c:25:19:23:00:f5:7c:56:03:57:d4:42:51:9c:7b:2e:a9:7e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 8 01:05:09 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=477707e6639cfe939df679ac48bdcd405c848361dd422025ba2a359674b903d5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:43:ef:34:2c:06:cd:10:b0:50:0a:7a:70:9a:
81:fa:24:67:30:e6:88:d8:c9:d8:c8:87:ce:3c:eb:
a0:7d:f8:46:4b:89:fb:f0:af:1a:96:35:41:21:14:
72:0b:8b:c0:39:1b:b0:8a:da:63:88:bf:f8:9e:6a:
4e:93:ed:a9:13:dd:86:57:81:97:e4:16:60:e2:5c:
77:5e:4f:39:0c:75:94:1d:36:8d:94:06:84:43:cc:
c2:cd:e6:30:ef:25:ae:da:49:96:8f:59:06:d7:c3:
0c:1b:4f:9d:e8:88:34:f2:92:06:eb:bb:e2:38:5f:
da:d9:1c:39:aa:dc:09:56:7f:0c:00:be:d0:3b:14:
00:27:fb:3f:c4:1b:05:85:83:07:76:7c:66:5b:eb:
06:aa:5b:03:e5:05:5c:e3:7d:ab:a6:7a:04:e1:46:
b9:f7:38:1c:f2:4f:09:9e:cb:2d:3f:04:3a:2a:39:
62:43:08:b1:92:c2:a1:50:94:94:b0:a8:fa:2c:62:
36:9d:97:53:dc:63:6d:3b:2d:dc:d3:ce:f1:e7:80:
28:8e:68:00:e4:6d:d3:ad:0f:70:9e:aa:23:bc:d9:
ff:e2:4b:0e:2e:9c:b3:a9:6a:1f:37:73:bd:1a:22:
04:d6:39:77:4e:20:89:b9:71:fb:3d:3d:80:4f:fb:
14:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6C:C6:C6:4F:D3:2B:8C:FE:09:6F:CA:13:30:5A:36:FE:CB:0B:03
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc4fbb2f-8181-4042-a0fb-8b62064b76fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.173.94.0/23
Signature Algorithm: sha256WithRSAEncryption
18:ee:ff:eb:bb:8f:ca:57:4a:0f:49:61:2b:0f:f5:10:10:68:
51:2e:22:b1:6e:08:d0:88:32:dc:b7:5c:92:71:40:d3:33:5a:
9b:b8:08:01:e0:bf:1f:a6:08:f0:e5:8d:b0:1d:f3:7e:7d:aa:
51:fe:8f:d6:f4:2b:68:58:99:d1:a5:37:e7:a7:26:bc:b1:a6:
20:c9:cf:a0:3f:fa:40:d1:55:71:a1:6c:24:04:33:57:ce:72:
9f:64:b8:73:d5:71:23:4d:e8:00:07:b3:f2:26:0d:1e:8c:bd:
90:ea:37:d8:7e:8f:60:b8:02:92:94:36:54:8b:09:8b:50:3f:
71:1b:20:0e:9e:a8:50:2d:b3:f2:03:80:65:57:76:64:be:95:
8f:4f:b0:53:ff:2c:55:d5:2f:01:15:47:b2:f7:05:cd:18:0c:
28:f7:13:d3:c7:76:29:6a:83:9f:be:80:b5:99:cf:d6:ec:03:
5f:3d:38:b4:58:00:fd:8c:e9:8b:df:a4:c6:e5:8a:c0:63:95:
b0:46:ab:53:a2:7b:06:a9:f8:04:48:bf:75:cd:32:3f:81:92:
ea:fe:ac:20:15:76:d6:08:f6:ea:5c:fe:f8:b4:b7:26:3a:f6:
48:46:24:8d:2d:d1:a8:2e:d4:e0:86:3f:0b:e8:1c:d7:9f:61:
ad:ca:e3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 17:09:27 2026 by rpki-client