
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f38a5e1d-de4a-4f9c-9eb2-f957a2f26faf.roa
File: f38a5e1d-de4a-4f9c-9eb2-f957a2f26faf.roa (raw, json)
Hash identifier: x3YE/jppgDeUvFrv7Ln2hJtV3kSG4RvOdlonUHYMkvg=
Subject key identifier: 72:17:B1:8E:56:91:E3:A3:71:34:6E:DD:28:C5:FD:C7:8F:90:92:3E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3EC3B790BC7B364FC64A09E7A3D9309A94B21B2A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f38a5e1d-de4a-4f9c-9eb2-f957a2f26faf.roa
Signing time: Mon 27 Jul 2026 02:31:58 +0000
ROA not before: Mon 27 Jul 2026 02:31:58 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.249.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c3:b7:90:bc:7b:36:4f:c6:4a:09:e7:a3:d9:30:9a:94:b2:1b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 02:31:58 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=c577190c852d72d4e89116b2b36bf024dfe6122b75b8637da562821ecca59a31, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e8:9a:47:51:03:d9:51:be:9f:8e:ec:f0:a9:
2a:cc:da:99:04:8d:b5:f7:2c:a0:22:41:50:da:fd:
d4:74:7b:91:75:88:c1:65:a3:ac:fb:cd:98:ea:2b:
00:db:1d:dd:44:27:f5:a7:df:e4:29:54:be:45:95:
33:8f:bd:a6:f0:0c:bc:7e:86:92:95:90:63:8f:6f:
4e:0b:dc:98:6a:21:e1:77:34:d4:a7:d2:57:2d:3a:
67:b3:3b:41:68:9e:da:7f:32:cf:4a:24:6d:de:c2:
b9:8f:99:50:10:04:1c:b6:98:69:c6:f7:87:16:46:
f6:50:93:84:77:e9:28:d5:dc:84:99:db:17:cd:1d:
f5:fc:ae:7f:99:fa:3c:ca:89:99:61:ee:66:b1:75:
a9:f1:11:94:41:47:42:7c:d1:24:42:12:f4:eb:68:
a5:de:9a:8e:11:1f:52:3e:23:26:95:88:31:13:eb:
5a:7d:96:25:a7:a4:3f:9b:53:71:53:9f:d9:f6:05:
f5:13:84:b1:05:0e:2e:b7:08:e4:36:65:a9:f2:03:
46:e6:f1:c4:f4:e6:c5:34:6e:29:e0:61:c1:2c:09:
1f:52:b7:48:dd:5f:67:60:42:aa:db:d2:79:45:7f:
18:a2:f4:09:1f:cf:f4:ed:f1:19:07:9b:b2:24:f8:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:17:B1:8E:56:91:E3:A3:71:34:6E:DD:28:C5:FD:C7:8F:90:92:3E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f38a5e1d-de4a-4f9c-9eb2-f957a2f26faf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.249.0.0/16
Signature Algorithm: sha256WithRSAEncryption
45:1a:33:b5:4a:d6:71:f6:66:38:70:d7:c9:88:36:c9:7d:9a:
6b:b2:e8:4a:d5:a6:fe:eb:63:43:7f:ca:8c:96:d7:3b:06:69:
f9:75:f5:57:15:90:c6:c4:67:1f:3c:ab:8f:7b:c3:34:be:c2:
bc:5a:08:7d:53:91:5d:2a:fb:05:14:46:54:aa:7c:dc:f3:7f:
eb:c5:3c:f3:73:ab:ba:30:71:53:00:58:c5:f6:e0:13:90:3a:
52:d4:70:b2:11:53:92:15:15:51:c3:49:ec:9c:43:9f:14:01:
2e:38:44:b0:45:57:6b:bb:1d:a5:87:06:da:b4:69:13:0b:01:
94:13:9b:36:3b:9a:b8:6f:06:3c:e4:17:9d:12:47:e5:08:19:
c3:fb:ab:b1:e4:0b:0b:d2:ec:17:91:95:af:ee:bf:c3:4b:6c:
5c:74:7e:d0:f7:45:e4:8a:b7:58:4f:d2:b2:69:38:29:e9:50:
fa:e0:8b:e5:09:49:99:fd:32:e8:5d:92:42:15:02:b4:68:9a:
8a:61:9c:e8:5f:33:6e:bb:38:8a:7c:02:83:02:12:39:e4:46:
35:be:8b:4b:25:ee:f9:28:91:d2:93:e1:81:e5:42:84:5c:0a:
ec:4a:83:9c:ee:20:21:02:8c:70:4b:af:5c:3c:26:81:b8:c2:
04:97:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:02:55 2026 by rpki-client