
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c5b666e-ca62-4459-a174-4630c68dceaa.roa
File: 4c5b666e-ca62-4459-a174-4630c68dceaa.roa (raw, json)
Hash identifier: 1j2fbkwegO/O6MDM85hKwBDHP3JrqZgL6E/WtUEe5xE=
Subject key identifier: 1F:A1:6F:3B:56:BB:FB:4B:9A:1D:58:F4:45:90:0F:4A:D8:8B:C5:48
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6D8BC85575B2392A39E030C61A81BC78E633D9A9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c5b666e-ca62-4459-a174-4630c68dceaa.roa
Signing time: Sun 21 Jun 2026 00:00:53 +0000
ROA not before: Sun 21 Jun 2026 00:00:53 +0000
ROA not after: Sat 19 Sep 2026 23:59:59 +0000
asID: 14618
IP address blocks: 3.5.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:8b:c8:55:75:b2:39:2a:39:e0:30:c6:1a:81:bc:78:e6:33:d9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jun 21 00:00:53 2026 GMT
Not After : Sep 19 23:59:59 2026 GMT
Subject: serialNumber=67bf08c89c02c0467fa08e2e339996b2ab99622871b98adbd606904b6ea2189f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:45:1e:73:a3:f9:51:0b:c2:99:a5:dc:63:
23:a5:3e:b9:78:78:ee:5d:f8:37:1d:9b:61:79:2f:
6f:f6:72:6e:1e:0b:3f:79:95:e3:10:88:9a:18:9c:
a5:56:fe:d8:70:c6:82:d1:e9:0e:78:db:f0:9b:01:
ae:8d:6e:96:7e:c2:31:38:ca:df:0c:42:46:16:05:
02:b0:45:c7:48:19:a4:2b:f4:2d:40:08:ed:a7:9e:
a8:81:8d:9b:d5:fc:2d:f6:2b:ae:19:c5:f3:c5:ea:
0b:4c:c2:fd:1c:61:88:27:f7:1a:59:90:18:cd:e6:
7a:be:c0:9a:b9:03:cd:fe:83:c9:22:60:ee:1f:3a:
b6:e8:19:22:fb:9c:32:a5:0b:be:a0:be:33:4a:85:
72:0d:19:63:0b:e3:91:66:8b:db:82:2b:f1:61:04:
f3:9c:c0:7e:12:06:4b:52:85:8c:c9:c5:24:ef:18:
ca:dd:3d:4f:a5:73:65:a5:05:c7:53:df:d6:d1:36:
80:dc:c4:b2:d3:bc:5a:35:ac:0b:44:6f:70:7d:f2:
ea:00:ee:a2:0e:c4:17:eb:4c:67:ec:61:31:c4:7f:
af:49:0b:22:9e:6b:60:9f:b3:cb:c0:b2:4c:a1:26:
e5:0e:61:30:89:5f:db:09:8f:e5:fd:b0:7c:c4:61:
24:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A1:6F:3B:56:BB:FB:4B:9A:1D:58:F4:45:90:0F:4A:D8:8B:C5:48
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c5b666e-ca62-4459-a174-4630c68dceaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.5.126.0/24
Signature Algorithm: sha256WithRSAEncryption
74:84:f0:7b:94:04:72:9e:69:b2:62:fc:7d:5b:63:23:11:3c:
ae:53:67:20:ec:0e:68:2f:52:e8:20:46:2a:78:12:30:f7:48:
79:9a:5f:8b:07:55:a0:70:7a:06:51:1d:dd:24:b2:5a:d4:a1:
2e:23:31:0b:4c:37:3f:4c:26:0d:9c:cf:c8:70:77:8b:03:34:
28:e8:10:81:cd:c4:ba:b0:47:4f:7b:ae:fd:d5:bb:77:97:27:
f4:ad:58:e4:5c:0d:a2:f9:43:a0:12:6b:57:a8:25:84:9f:2f:
7d:fe:fa:3c:6f:4e:12:ff:4b:41:23:6d:17:39:47:04:8e:b0:
07:24:77:61:31:81:00:18:3c:3f:ce:c8:36:dd:98:54:b9:ba:
43:05:92:91:10:5e:c7:ac:f7:ac:ea:4f:1e:f0:24:b0:d1:81:
e2:cf:05:d9:3e:cc:f9:7c:51:a5:07:5e:a9:35:3a:83:06:bf:
b2:bc:d5:84:24:6e:63:36:72:8d:5a:c3:38:98:6d:93:dd:ba:
f1:37:d2:27:6d:e9:7f:20:99:2a:5d:1f:75:53:5f:31:6b:3a:
4e:22:d1:ec:8b:cc:b9:ad:d9:eb:51:d4:fc:26:91:d0:11:0a:
0a:ab:9e:ad:ad:ae:fc:85:1b:7c:6e:8a:44:84:ef:f6:fd:37:
13:0f:c4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 20:11:31 2026 by rpki-client