
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17a77bdb-1080-4b49-b356-fbab3f0bf9cf.roa
File: 17a77bdb-1080-4b49-b356-fbab3f0bf9cf.roa (raw, json)
Hash identifier: WOIHrJGSvHn/+kDPuIJHfZVvTu5YgAkYCK1Jj3qQCpw=
Subject key identifier: E4:BC:B6:6A:08:53:A5:6D:E1:25:6E:61:54:3F:F0:FD:38:43:87:2D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3FD75F004F47BFEC0B856A4AC6BEA0CEBACE4A18
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17a77bdb-1080-4b49-b356-fbab3f0bf9cf.roa
Signing time: Fri 07 Aug 2026 01:10:05 +0000
ROA not before: Fri 07 Aug 2026 01:10:05 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.186.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d7:5f:00:4f:47:bf:ec:0b:85:6a:4a:c6:be:a0:ce:ba:ce:4a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 01:10:05 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=fd8a3b74a1d1b0eac5e5a04e44227eca1b72a3a23669bee70e16562a67464904, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:be:ba:9b:3e:a2:3c:b0:da:95:6b:37:c8:
c2:5d:c2:cf:18:41:f7:a1:20:26:83:cf:dc:92:19:
2a:00:92:18:89:7f:17:0a:83:1b:f1:03:ba:47:e7:
71:c5:7c:ea:6e:7d:4b:35:79:64:e3:3c:32:99:ef:
50:15:de:75:9f:a3:31:99:52:9c:65:06:af:ea:32:
0a:22:8c:26:e9:b9:65:47:3d:77:f2:04:0e:1d:c3:
42:18:9e:e1:92:47:7f:5b:9b:68:a8:30:de:1b:a6:
76:9b:a2:b2:48:a3:d6:8f:03:ae:3c:0b:6f:da:49:
bd:fd:46:cf:86:2c:f0:74:89:8d:64:65:62:80:91:
ab:2c:24:5d:10:03:2b:23:5f:a3:6f:0b:a9:67:1b:
8f:79:e4:82:bf:89:3b:71:b0:2c:49:e6:03:94:8c:
c9:bf:4c:8f:ca:87:21:9a:f3:fe:48:67:9e:e9:2d:
01:10:1a:c8:50:8a:8c:8b:c7:3b:78:7c:4b:7e:a9:
97:1d:49:68:d8:3a:36:e9:85:72:4b:92:19:e9:94:
ab:e8:dc:64:f4:17:2b:64:f0:6c:56:08:ec:ab:22:
a5:d5:34:44:24:c8:58:41:1e:25:25:c1:85:c3:b7:
c5:78:0b:79:32:90:78:c2:a8:02:c0:6a:9d:1b:33:
cb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:BC:B6:6A:08:53:A5:6D:E1:25:6E:61:54:3F:F0:FD:38:43:87:2D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/17a77bdb-1080-4b49-b356-fbab3f0bf9cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.186.0.0/15
Signature Algorithm: sha256WithRSAEncryption
9a:66:06:4f:a6:ee:8c:99:f2:0b:fc:56:47:48:66:03:aa:57:
f4:4c:c9:a8:d7:a9:2c:6d:97:32:d7:94:5c:30:0d:99:62:b1:
23:55:bf:21:59:8c:b4:ba:92:1f:1b:41:31:7e:c2:9b:20:69:
df:c2:2d:bc:48:17:f7:28:b3:66:bb:48:ce:36:a0:f3:fa:58:
d4:4b:04:8f:fc:60:66:e7:05:91:19:f5:0e:e5:ae:64:6c:4d:
27:38:ea:88:39:b9:07:bd:cb:ac:40:eb:a9:2e:28:ba:6e:0e:
8a:91:5d:6e:47:ba:2d:f7:b6:5b:b2:82:99:00:01:7d:c7:d4:
0c:a4:42:30:2b:d0:f5:c6:56:44:81:3e:53:72:1e:46:9d:eb:
5e:fe:6f:99:f9:e9:4a:98:83:51:3d:7f:07:da:f0:d9:1d:04:
d8:de:a8:02:f3:50:b8:69:f2:ea:ff:7d:85:df:ff:e1:9d:33:
86:6f:56:03:b8:a8:c0:bf:f9:94:cb:3c:cd:62:3c:26:c5:74:
f9:98:bf:de:64:9f:a8:92:d2:b2:9a:47:df:42:b6:10:44:8b:
6b:0c:0d:4c:b2:bc:b8:8e:88:fe:73:4d:a6:b8:d9:9d:90:4d:
46:7b:e8:02:c3:ce:0d:6d:c1:20:68:d9:e9:da:e4:74:80:4f:
31:e6:c0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:41:34 2026 by rpki-client