
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/151f9992-550b-4a23-b833-2b882a051b4b.roa
File: 151f9992-550b-4a23-b833-2b882a051b4b.roa (raw, json)
Hash identifier: muwy49xYHX/Zm/rQ7RgF+cqndBwDYoe2g+w8Fsui4wc=
Subject key identifier: 27:B4:66:5D:1A:C4:DD:1A:21:0C:33:9E:2C:22:4C:3D:22:F8:F7:A4
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 753EE6E11319D872E95229A165DB30961F5DE72F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/151f9992-550b-4a23-b833-2b882a051b4b.roa
Signing time: Fri 01 May 2026 01:20:12 +0000
ROA not before: Fri 01 May 2026 01:20:12 +0000
ROA not after: Thu 30 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.167.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:3e:e6:e1:13:19:d8:72:e9:52:29:a1:65:db:30:96:1f:5d:e7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 1 01:20:12 2026 GMT
Not After : Jul 30 23:59:59 2026 GMT
Subject: serialNumber=ec05a9a567fff4cf3c689708d66db77332fa2409c6faac6222b09f47c4dbe009, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:02:c2:5e:c1:b9:28:ab:5d:43:31:e1:c1:
21:a3:8e:a0:be:95:82:2e:6c:cb:7d:cc:50:20:b0:
77:30:62:f4:14:e8:e9:4a:fc:89:48:bb:a6:18:ab:
3b:c7:2a:1e:3e:fb:8e:99:9e:25:79:26:15:5b:d8:
c6:5c:f0:3d:c6:42:e9:0d:08:ae:2e:4d:5b:7c:a2:
e9:79:1f:97:d9:6d:2a:2b:16:77:ac:d7:eb:13:bf:
c6:8e:2c:97:d8:00:02:d6:fe:31:78:69:8b:87:99:
ac:1b:12:af:b4:b5:60:99:ad:16:5c:37:ab:97:18:
4c:f7:64:a6:ad:26:0c:32:96:18:92:fe:47:b6:2a:
93:3b:97:fa:0d:8e:33:83:94:2d:33:ae:12:8f:ec:
ee:63:fc:70:7f:32:96:30:1f:99:c2:2a:4a:4f:c9:
c0:dc:3b:95:c0:b1:0c:08:0c:32:dc:9e:02:6e:cc:
9b:30:21:b5:42:40:c2:4e:5d:b6:45:74:82:ca:ef:
c6:18:1e:ac:3f:21:05:c4:88:df:5e:0d:e1:4d:8d:
36:cc:2b:56:df:fd:ef:82:c5:3c:10:ac:d3:a0:8f:
69:c2:13:2a:b8:6f:36:8f:18:d5:6d:99:04:07:22:
a9:8e:32:f2:75:68:a6:dd:47:7e:c0:58:f2:4e:a7:
e3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B4:66:5D:1A:C4:DD:1A:21:0C:33:9E:2C:22:4C:3D:22:F8:F7:A4
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/151f9992-550b-4a23-b833-2b882a051b4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.167.32.0/19
Signature Algorithm: sha256WithRSAEncryption
15:92:32:7a:35:9c:f7:78:ea:82:a9:96:fb:3e:87:31:e3:14:
65:85:5b:b6:2a:47:a0:37:ab:70:aa:e4:7d:6f:95:3a:cd:6a:
31:a9:17:f4:9b:cd:d4:0f:87:6b:5d:8c:85:53:49:dc:ff:43:
4b:5a:96:97:25:4a:f3:86:38:c5:80:73:28:b2:8a:6e:6d:f2:
a3:fb:ae:c6:50:51:f4:e2:8f:ab:a7:30:7c:71:af:b4:be:ab:
ac:61:c0:9c:2c:6d:78:88:eb:6c:c4:cc:19:4a:04:b2:b1:00:
b9:25:15:d4:d6:fc:9b:fb:10:16:af:db:5a:9e:ec:f2:73:22:
6f:93:0b:55:a6:93:40:d3:e5:a7:06:3b:6b:49:3a:71:9c:cd:
7d:67:be:bd:97:b1:28:8d:bc:60:bd:42:63:26:8e:2b:fa:9e:
68:07:58:46:79:b0:96:e3:45:a8:1d:4a:02:fe:8a:47:0d:f3:
68:01:88:ab:fd:c6:be:d0:8b:87:54:8c:2b:fb:89:bf:f9:49:
d7:47:2b:bf:ad:3b:f2:bd:20:bf:96:d3:d7:3b:1b:6a:44:a5:
64:ba:0d:85:57:40:7b:21:cc:94:ab:68:23:83:53:fa:5e:4e:
9f:90:a4:66:39:4a:7a:a7:d0:16:44:3f:a3:f7:67:8c:36:3b:
93:29:5e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:24:21 2026 by rpki-client