
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8930a4e-f0cb-425f-bfdf-dadc8fd48c04.roa
File: b8930a4e-f0cb-425f-bfdf-dadc8fd48c04.roa (raw, json)
Hash identifier: RP+SYkt7nxQvlci6aXux8TfUFu0WKXZVBn4/mggxX+k=
Subject key identifier: BA:25:0F:F8:24:34:57:4D:1B:B2:80:A7:76:4E:76:87:46:7D:8F:2A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 683C20D97CB0961C018985EBF88AE3BCEC783233
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8930a4e-f0cb-425f-bfdf-dadc8fd48c04.roa
Signing time: Thu 14 May 2026 00:31:48 +0000
ROA not before: Thu 14 May 2026 00:31:48 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.68.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:3c:20:d9:7c:b0:96:1c:01:89:85:eb:f8:8a:e3:bc:ec:78:32:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 14 00:31:48 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=0aef53508bb584cf6236d715dcda210c3f64d950a736b05a3b57faecc407c0c7, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:c2:f0:85:14:ef:de:2a:10:98:52:f4:39:
a0:35:61:54:93:19:36:4b:51:a1:34:f7:be:1e:71:
9d:60:5d:6e:56:26:cb:19:3c:55:17:98:eb:ee:03:
5d:82:24:73:88:3f:a1:ed:c6:45:71:68:e5:36:41:
fb:b1:3e:c7:79:ec:6f:b1:6e:26:79:8e:0c:04:5d:
9a:3a:73:76:fe:3a:a4:e4:45:57:cb:5b:9f:66:0d:
4f:64:74:b9:54:c4:1f:3d:fb:ec:54:22:b6:d1:7a:
fb:f8:40:24:b4:5a:3e:ce:c5:02:44:29:7c:d3:08:
28:43:7c:8c:50:ac:47:b9:9c:b4:3c:29:18:f4:21:
55:88:04:81:3d:f2:90:f6:66:49:04:75:02:b6:3c:
7f:74:41:4c:45:4e:15:8d:e9:38:c3:af:70:43:d4:
d7:81:f8:8c:06:fc:df:16:a1:61:c3:e1:ed:b3:ef:
93:80:78:94:d0:20:61:1b:e4:ad:77:39:22:3f:b2:
2d:18:63:fe:4e:38:33:f1:94:ec:8b:64:1b:6b:88:
7a:4a:f2:e1:49:32:45:1c:9c:b0:e5:80:30:7e:04:
4c:c8:46:c6:ce:4b:b2:0f:59:95:60:8e:a9:9f:da:
67:32:ea:50:f0:29:4b:d8:2c:1f:90:39:14:8d:0e:
72:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:25:0F:F8:24:34:57:4D:1B:B2:80:A7:76:4E:76:87:46:7D:8F:2A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b8930a4e-f0cb-425f-bfdf-dadc8fd48c04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.68.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:eb:4d:ef:bd:97:a6:71:fa:02:d5:a6:f6:7c:6c:c4:3e:18:
68:a2:61:64:61:01:10:33:33:3d:55:a8:57:63:b4:4a:99:4b:
04:ca:fc:74:67:e5:29:26:86:f3:bd:85:03:3d:0a:1e:62:2c:
ba:bf:d3:37:1e:1c:4d:8a:4b:86:e5:e4:05:65:4c:2f:9a:7f:
02:6f:81:0a:4a:d5:8f:ce:c2:6a:44:e1:5f:f5:eb:fb:2c:e3:
34:75:47:03:6f:1e:af:c3:fc:98:e3:fe:3c:1f:e5:cf:b0:20:
76:4a:b5:ee:20:56:1e:b4:f2:be:58:5d:27:eb:41:4b:9d:fe:
07:92:72:9a:73:22:0b:72:f0:21:28:3a:4f:0f:ca:ed:e8:f4:
2e:45:d7:24:6b:3a:3e:6d:ad:a3:54:3a:cb:b4:c6:d7:72:5f:
ad:37:e5:67:5f:85:06:38:82:f8:01:d2:da:de:34:8a:cd:27:
bf:9c:ec:9f:f8:22:ec:d0:2d:dd:72:6f:a9:c2:4a:a3:bd:72:
84:fb:6c:a3:33:d0:9f:ac:8e:bd:5c:1c:81:e0:51:8e:ca:e9:
b4:63:ec:2c:fa:8c:72:b6:26:9d:62:df:c7:b3:be:3e:41:55:
b7:b7:26:da:39:dc:46:6a:79:7d:3c:82:26:5e:3b:24:ef:a3:
61:24:55:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:46:18 2026 by rpki-client