
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/36f11e82-bc71-442c-ab59-243123ca3029.roa
File: 36f11e82-bc71-442c-ab59-243123ca3029.roa (raw, json)
Hash identifier: yuQPYirLTnqAAT6ejiIiEGjYo5kKfMRDLQllhSbXIuM=
Subject key identifier: 1E:E0:8F:CF:D4:1C:50:EB:1F:AF:7E:2B:65:7B:5B:94:89:7A:32:80
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 37BAB0AA6B6F7384EE1C2CBBAEDC6DAFE488CC88
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/36f11e82-bc71-442c-ab59-243123ca3029.roa
Signing time: Fri 07 Aug 2026 02:31:12 +0000
ROA not before: Fri 07 Aug 2026 02:31:12 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 47.128.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:ba:b0:aa:6b:6f:73:84:ee:1c:2c:bb:ae:dc:6d:af:e4:88:cc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 02:31:12 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=bd45aee303f484fbe2155e5f2cbaae35c09a9fe44c6529d972154d9b1801dbca, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2e:cd:e5:23:43:43:e6:fe:b8:97:c2:45:90:
6b:8b:a8:b2:9c:87:ec:88:6b:78:20:45:62:db:40:
0d:ea:d5:0c:fb:d0:a6:43:47:b5:fb:e9:1e:9f:47:
44:ea:6d:c5:82:53:17:ed:c4:83:85:7e:94:36:57:
07:16:65:33:58:11:b6:5f:18:18:86:c6:eb:6d:fc:
d8:b1:d9:cb:8c:a2:2e:4f:73:21:5c:e1:0b:4e:b4:
72:c7:9e:7f:9a:8f:9c:96:f7:e1:65:3d:f8:ce:5a:
ef:94:77:c2:11:e2:3f:5b:25:46:74:c8:26:a4:30:
6c:ab:e6:6c:e3:e9:66:97:10:97:a1:2b:9d:c7:cd:
90:29:18:64:b8:29:db:46:3d:07:88:3e:e6:60:65:
6e:93:bf:ed:41:a7:01:c8:f7:c0:02:17:5e:ff:61:
9a:e6:e8:49:ff:e3:82:ff:98:ba:56:64:1f:f3:f4:
07:1c:11:3a:1f:0c:69:74:de:4a:b9:50:a1:ec:a0:
e2:80:df:fc:e6:59:e7:64:5f:d4:75:8d:cb:97:61:
cc:88:9d:fc:1b:24:f1:56:cb:6e:20:c4:9b:b8:89:
61:56:2e:cd:f0:64:55:59:40:5f:9c:b0:bd:ed:7b:
c1:72:53:a1:ea:d4:e7:fa:43:37:3e:ec:5c:08:9c:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E0:8F:CF:D4:1C:50:EB:1F:AF:7E:2B:65:7B:5B:94:89:7A:32:80
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/36f11e82-bc71-442c-ab59-243123ca3029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
47.128.8.0/23
Signature Algorithm: sha256WithRSAEncryption
20:71:80:93:45:d9:01:e0:1f:69:67:4a:14:b2:b4:75:b5:12:
cd:70:ac:51:58:b9:73:7a:b0:c3:a4:4d:62:7c:9e:c8:12:36:
98:e6:18:99:00:f9:19:d4:92:38:31:bd:df:1f:78:ec:c7:7a:
c8:bf:4d:12:38:bf:a8:12:d2:27:fe:a1:19:ad:76:a2:f0:69:
c6:df:c8:89:10:d7:9c:f8:49:e1:84:54:3b:3e:f5:e8:2b:78:
c9:b3:e7:cf:94:de:ec:bf:5e:ef:d9:d6:9a:db:ba:e5:82:5b:
69:5c:86:24:af:f0:82:3b:d8:ba:b0:08:78:b0:c9:33:d4:9e:
51:e9:da:81:d5:d8:2c:a0:73:f9:ee:6c:8a:7f:64:cc:d6:b2:
84:6b:fa:1b:5a:8c:77:77:7b:a6:68:b5:01:f7:eb:18:2a:dd:
db:0c:75:10:91:c9:f3:e9:ec:80:23:6d:bc:be:34:07:4c:cd:
18:16:a8:68:ae:6b:2f:d0:dd:bc:2e:f8:c7:2f:d7:0b:10:0f:
b8:57:ef:82:64:c2:98:10:49:4b:ec:8f:6b:09:e1:e4:4e:61:
57:96:91:2c:81:28:15:44:45:38:e1:04:5b:73:71:3d:85:a8:
c9:b4:17:21:b7:39:13:c3:46:03:38:dd:84:ff:b1:51:47:b3:
16:6f:77:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:43:04 2026 by rpki-client