
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa
File: e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa (raw, json)
Hash identifier: sEaSy/oNn+wR8sSJ7vcCDfXPDO0jJZozxm5mfiZFtk8=
Subject key identifier: 21:5B:3A:0A:D3:0D:72:95:25:2D:9D:BE:14:AE:5F:65:4B:0C:C2:A8
Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial: 649D6A4416E051C991C09235DCF7926D92925884
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa
Signing time: Sat 16 May 2026 00:00:04 +0000
ROA not before: Sat 16 May 2026 00:00:04 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 184.169.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 18 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:9d:6a:44:16:e0:51:c9:91:c0:92:35:dc:f7:92:6d:92:92:58:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Validity
Not Before: May 16 00:00:04 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=56635421e1a219560f3ba411da08fab624f69092e4fba13c97c2eabe783612b4, CN=71c3876e-b944-4600-92c7-cec33d89523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:cb:00:5c:76:23:92:f1:5a:1a:53:3d:89:
aa:0f:aa:11:74:f6:a9:2d:59:d8:4a:da:af:1b:61:
9b:c2:59:e6:bf:2c:37:5f:06:b3:22:72:dd:e4:2f:
87:7b:30:c2:1a:41:f1:58:ea:f5:bc:b9:38:66:f4:
9f:f2:e2:72:dc:4a:89:cb:8d:c0:93:b1:18:7a:2c:
0e:5e:d8:54:c8:8f:1b:1b:64:03:12:14:c4:cc:e3:
ec:2d:53:87:ac:5e:da:0a:1e:cc:02:ec:d5:be:45:
0e:0c:b5:89:c3:04:5c:06:9f:84:4c:ef:74:af:71:
b2:34:86:ae:46:01:e7:a2:e0:14:e2:26:5c:67:49:
fb:c4:09:0c:46:bd:dc:8f:cf:a7:24:24:60:7f:3b:
87:75:de:ef:99:eb:e4:c3:d7:87:7f:5a:e5:78:8a:
b9:4d:e1:fe:d9:a5:0b:41:df:e5:c0:5a:7b:00:3d:
c5:7c:e5:c1:e1:d3:09:7a:e3:17:85:f8:9e:b1:5a:
08:93:2f:0f:45:c2:aa:97:82:92:37:f9:57:fc:72:
06:69:35:d0:bb:fd:9e:44:3d:d1:27:24:cc:8f:02:
10:3b:d1:68:93:80:b2:7e:28:fb:19:d2:f6:9e:10:
e9:c8:0a:0b:b0:29:15:85:f1:94:6b:ab:b5:09:cc:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5B:3A:0A:D3:0D:72:95:25:2D:9D:BE:14:AE:5F:65:4B:0C:C2:A8
X509v3 Authority Key Identifier:
keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e3c846b1-fb00-4cb7-823d-3a58bedd6659.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.169.176.0/21
Signature Algorithm: sha256WithRSAEncryption
98:7e:4f:5c:2e:0b:b1:79:9b:10:ed:51:fa:71:a5:d0:04:e1:
ec:15:11:0f:f3:0f:66:34:4c:d5:a0:18:b3:6a:5e:5e:f8:a2:
57:aa:d6:e1:60:ee:34:8e:b4:d1:e5:4b:1d:f1:54:fb:82:bb:
da:f7:aa:35:a6:a0:d9:e2:03:a6:3c:94:0e:d3:ff:f1:2e:e1:
31:0f:eb:f6:84:f9:f4:4f:7b:09:6d:63:8c:c4:de:f3:2b:93:
eb:d3:5d:22:af:a6:f4:e9:11:af:7f:58:0a:53:0e:db:62:ff:
a9:7e:1b:a7:e9:68:83:ec:f6:6c:1d:a4:93:d2:0e:75:c1:80:
74:b2:d0:92:88:b1:58:b1:b7:99:85:48:e1:b8:2f:2e:0e:e9:
32:17:db:21:33:21:3e:09:1f:99:51:13:45:f0:39:14:77:d0:
bc:af:33:46:37:63:a4:a1:ae:b4:59:6a:b0:58:fb:ab:7b:05:
d9:ef:ae:70:0e:32:a1:c2:44:a8:f0:08:12:e4:e5:5d:b0:b9:
58:5d:1e:fa:09:cc:00:72:ae:d7:32:7b:e0:17:26:b7:a0:44:
4f:ed:cc:55:1d:a1:fd:b2:e6:98:b1:2e:fd:f5:ff:ee:40:36:
5d:9c:d1:7c:a8:35:5c:a1:f3:c0:7f:77:82:2d:cb:64:93:57:
7d:c7:b7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 08:46:28 2026 by rpki-client