
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/191de0ae-0124-484d-9697-eb4c11a47537.roa
File: 191de0ae-0124-484d-9697-eb4c11a47537.roa (raw, json)
Hash identifier: NoQvKFOZj1rAx0/8biizoftTebnuqXQllvRzjnwhu84=
Subject key identifier: 71:3C:1A:B4:0D:F3:7C:95:C3:59:B6:27:3B:1E:83:66:36:91:9B:9E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 117200DCD3BCA06EEA5582B1F9B21A8E6951848E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/191de0ae-0124-484d-9697-eb4c11a47537.roa
Signing time: Fri 07 Aug 2026 01:40:08 +0000
ROA not before: Fri 07 Aug 2026 01:40:08 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.173.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:72:00:dc:d3:bc:a0:6e:ea:55:82:b1:f9:b2:1a:8e:69:51:84:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 01:40:08 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=839b135cbaf1d2c2530ee1333e2b3d763b77e483165f11d308feefef2a6ef14e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:21:2f:2c:4b:12:20:3f:0a:b8:cd:37:75:
8c:12:14:50:86:5d:b0:24:d2:53:82:1b:79:16:b7:
49:1f:d8:8b:d3:35:83:8e:4a:0f:dc:a2:4a:54:cb:
22:2b:10:c3:b5:78:7b:7e:d1:a5:16:4b:a0:95:b7:
35:fc:4e:ec:0f:53:39:d9:0e:10:7a:68:f8:6c:73:
72:ca:72:24:cb:a2:db:8c:c2:4c:07:e8:9c:2a:1b:
a1:f6:c9:02:77:7b:6a:f5:33:46:50:83:6a:40:c8:
b8:f8:af:ee:13:f7:75:46:cf:5a:59:79:13:25:e6:
90:2b:41:f4:9d:a8:d0:8f:8e:62:ce:15:6f:a2:4e:
4f:d7:3b:aa:1e:91:31:a8:9e:bc:cf:6e:91:42:72:
56:1d:23:3a:59:7f:6a:18:15:5f:63:ff:e0:01:57:
f4:66:c1:5a:1a:fb:4b:e1:38:8e:d1:fc:7d:fb:91:
b8:b9:31:9e:56:c7:6e:98:a6:60:eb:1d:f2:05:a5:
82:72:8e:c9:01:cd:89:52:70:b1:27:89:72:b6:f8:
bd:53:1f:7d:c4:3d:37:d8:f6:40:08:de:76:63:6e:
ec:d7:9e:53:a7:68:1f:cd:88:8c:43:c2:d3:33:b0:
31:be:3f:3c:b0:c3:64:cf:8d:bc:75:59:1c:26:c2:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3C:1A:B4:0D:F3:7C:95:C3:59:B6:27:3B:1E:83:66:36:91:9B:9E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/191de0ae-0124-484d-9697-eb4c11a47537.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.173.92.0/22
Signature Algorithm: sha256WithRSAEncryption
38:9f:f6:fa:02:0a:7c:01:63:d0:89:ff:52:05:99:6c:c1:6d:
9c:d3:eb:56:57:41:9d:28:90:d3:92:e8:66:c0:2d:05:71:26:
ec:55:1d:ae:90:ad:e1:9b:15:e1:a7:2c:17:84:ee:3d:58:e9:
1b:f6:6f:70:9b:db:e1:73:60:2e:ac:e0:b3:88:73:b6:6e:e6:
9a:cc:42:c9:04:7f:fa:08:34:02:44:64:d6:eb:f3:06:9d:da:
dc:43:9d:01:64:57:35:8b:03:5a:24:90:1b:68:fd:58:aa:dd:
04:aa:89:bc:be:0b:05:62:3a:81:f2:ae:3e:8a:7f:eb:38:42:
36:f1:d5:6a:18:84:02:05:f2:bb:84:f2:04:cd:7c:29:73:8f:
23:e2:b3:d7:dd:a9:03:3f:99:27:52:00:9a:eb:c1:72:7a:7d:
f6:ba:9e:85:d3:4f:a9:85:68:8f:9d:37:5b:d6:d4:be:ba:d9:
2e:e2:3e:e4:a7:20:74:df:58:0a:3c:ba:bf:84:ae:8d:61:5c:
77:fd:5b:0a:dd:35:94:03:1c:56:99:12:e8:fc:bd:40:d2:b1:
b4:d6:14:3d:a9:a8:d8:67:ba:bd:39:2d:c7:dd:cf:e7:ce:35:
f9:27:f2:37:b1:aa:3d:57:78:b6:fa:a1:34:12:d7:c4:7d:aa:
4f:7c:53:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 08:45:12 2026 by rpki-client