
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/918816ce-47df-460d-ab97-1b4c93d8ccd8.roa
File: 918816ce-47df-460d-ab97-1b4c93d8ccd8.roa (raw, json)
Hash identifier: 5KkIkC+OuX0DCs/xp5bIya9v4p4LZd7fLGWBcgP2EhY=
Subject key identifier: 69:E0:33:55:FA:51:CB:41:46:B2:BB:E8:4A:95:F7:33:67:83:D1:2B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5CE70D4A9EEC6A296840DF74B0F235B05831E1FD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/918816ce-47df-460d-ab97-1b4c93d8ccd8.roa
Signing time: Sun 21 Jun 2026 00:00:52 +0000
ROA not before: Sun 21 Jun 2026 00:00:52 +0000
ROA not after: Sat 19 Sep 2026 23:59:59 +0000
asID: 14618
IP address blocks: 3.5.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:e7:0d:4a:9e:ec:6a:29:68:40:df:74:b0:f2:35:b0:58:31:e1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jun 21 00:00:52 2026 GMT
Not After : Sep 19 23:59:59 2026 GMT
Subject: serialNumber=4cbf5e122cb7904f9652a7bae64fcc6b17511f50a2073f05099e7a2e87a054ca, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c4:f1:9c:0b:41:a7:1b:b7:54:28:2b:67:e4:
da:7b:96:85:d7:2f:c4:4e:5b:8f:3d:ff:ae:a6:fe:
65:2e:f6:3d:bd:88:10:32:df:7e:d6:71:ee:fa:04:
ad:24:1d:1c:0c:b4:b1:c9:c5:32:47:cc:c1:d4:db:
16:44:9e:9b:dc:48:9a:67:34:4e:d7:01:48:3d:aa:
22:3b:8b:70:2c:24:c3:20:0c:71:00:9f:8e:13:2f:
7f:31:ad:c1:f6:cc:9d:3c:59:9e:85:ef:f3:0d:86:
1d:bf:4b:3f:d4:89:32:66:03:25:3c:e7:a3:76:a6:
b9:2f:e4:a6:24:18:30:d1:74:95:6f:20:00:67:1e:
37:ed:ef:9a:8b:aa:f1:ee:e2:69:ea:82:8e:05:1a:
f6:e6:bf:81:1a:73:19:83:37:cd:c1:70:59:2e:c1:
9b:38:e9:b1:da:a8:55:b5:cb:c3:03:3b:64:c5:c3:
d0:ff:4c:bc:33:4b:39:13:33:16:17:c1:4d:fb:d8:
4e:28:4d:45:e5:47:70:e1:a1:0a:58:70:a0:e6:09:
40:ea:86:39:10:88:ba:2c:32:ef:bc:d8:5c:d1:d5:
74:16:f1:22:10:78:34:31:02:d2:b7:4f:6a:75:16:
3b:f2:bc:fd:5d:c0:3b:66:04:bb:bc:59:fd:9c:e8:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E0:33:55:FA:51:CB:41:46:B2:BB:E8:4A:95:F7:33:67:83:D1:2B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/918816ce-47df-460d-ab97-1b4c93d8ccd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.5.88.0/24
Signature Algorithm: sha256WithRSAEncryption
17:5f:0e:54:6a:19:eb:e2:ce:c2:73:ec:12:64:6a:37:b5:bf:
09:43:df:f6:6a:02:db:79:78:64:60:73:3c:4e:9c:be:d9:34:
c6:30:2d:13:c2:06:7c:94:00:a5:25:6d:7a:fb:93:d3:d5:d0:
b0:04:78:2e:1a:71:a5:c4:db:65:b6:25:d2:66:4f:58:0b:31:
0b:08:c0:d7:44:e8:3f:db:84:f1:2e:7e:cd:99:5f:d7:36:0c:
42:83:71:9a:74:3f:03:8a:ea:1c:78:60:50:fd:f1:79:12:7f:
a8:fe:a3:c9:aa:4f:86:5c:24:0a:fb:7f:e4:0e:78:da:8b:44:
67:05:10:ea:a7:02:c8:82:5f:0f:d9:04:dd:2f:79:a6:ec:e3:
ae:55:15:d1:37:99:6a:a6:b5:15:3f:cf:cc:c8:14:2a:08:5a:
14:c1:32:82:81:e4:c4:3d:f2:3c:98:7c:90:a5:2e:87:f0:aa:
c4:8e:49:cb:c0:a1:bd:d9:0e:7b:f0:c2:75:fd:ee:c3:15:59:
e5:81:9d:81:7f:ea:c4:fd:3d:76:7e:70:93:f1:fb:c5:bd:74:
9e:cd:60:b9:4a:32:36:c4:74:11:82:9b:bf:bc:a1:35:b3:0a:
30:d7:b1:9b:dc:4c:70:57:c8:3f:62:fc:44:35:ac:16:ff:6f:
b7:28:3d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 20:11:30 2026 by rpki-client