
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b1f1fd5-6117-426d-8645-5c352dee9ac5.roa
File: 1b1f1fd5-6117-426d-8645-5c352dee9ac5.roa (raw, json)
Hash identifier: mDEhjFP4GKPIP4ginXFF5pKAduzMmRTCBJewXjCRZIE=
Subject key identifier: 43:E6:98:86:CE:98:69:84:3E:36:F5:F5:45:7E:C8:6F:04:C8:82:75
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 03B5833914E8F3C9367851E14D3F196EED93283D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b1f1fd5-6117-426d-8645-5c352dee9ac5.roa
Signing time: Fri 08 May 2026 02:31:17 +0000
ROA not before: Fri 08 May 2026 02:31:17 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.104.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:b5:83:39:14:e8:f3:c9:36:78:51:e1:4d:3f:19:6e:ed:93:28:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 02:31:17 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=fa19c07783b30b6baec0726b6cd59fb2e07442cc05afd1dc3e49bed317eb9b19, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:81:4d:61:e8:6c:25:93:3d:b5:60:37:a2:
ae:5d:3a:f7:95:8e:28:5e:49:ca:86:17:37:30:f2:
1d:1c:db:4f:5d:41:28:85:fd:e1:de:9a:bd:6d:a4:
3a:88:e0:ce:82:4f:36:de:49:41:74:30:6d:ef:59:
df:4a:2a:7e:4b:34:37:63:85:45:89:16:d0:22:e3:
a6:c3:fd:f2:6a:48:94:95:55:9d:8c:f2:78:ff:3b:
41:4b:f3:b3:1d:90:b0:3d:5b:a3:77:08:7c:c1:e3:
a9:5c:7b:f9:36:d5:1c:7d:65:40:95:9c:90:7c:20:
40:01:54:29:7c:97:db:04:86:b5:65:19:85:92:f9:
8a:53:a7:98:a2:ba:7d:88:29:90:12:f1:d2:80:5e:
f6:fd:97:6f:8d:a2:d4:c2:fb:d3:3d:b6:8c:45:87:
bb:9a:a5:50:31:02:9c:d7:8a:66:1b:d1:4b:39:64:
65:c3:cc:41:ff:f4:82:c7:2f:30:48:73:2d:0b:ff:
37:5e:cc:4f:7f:36:21:1c:20:f4:a6:dc:e8:6c:a5:
00:3d:bf:8d:64:24:c7:81:7d:13:a4:df:3a:c2:2f:
61:df:c3:f3:e7:4b:38:2a:d8:11:2d:3d:66:64:6e:
a2:d3:e3:82:b0:30:b4:ca:88:78:bd:c5:b7:2e:fd:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E6:98:86:CE:98:69:84:3E:36:F5:F5:45:7E:C8:6F:04:C8:82:75
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1b1f1fd5-6117-426d-8645-5c352dee9ac5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.104.0.0/14
Signature Algorithm: sha256WithRSAEncryption
3c:73:09:1a:07:29:79:70:51:1a:a8:8d:b5:bd:4d:13:b6:f8:
49:4c:8e:82:33:36:9f:f0:96:7a:d4:fc:7b:5e:4c:01:8d:5c:
a9:7c:1a:1c:f0:5a:e6:a0:8b:7a:dc:48:e6:26:57:db:73:9f:
ad:9e:00:2d:99:ce:32:73:f1:4d:6a:63:df:33:a1:89:b7:d3:
ea:95:63:27:fe:d4:ad:9b:40:d0:1e:8c:5e:ef:33:6b:39:d3:
ee:f4:4c:dd:f0:be:b8:eb:1f:fe:77:20:b2:4a:a8:cb:5f:7d:
c1:1a:8c:33:ff:aa:17:98:f9:9f:56:b3:a1:a5:aa:51:27:86:
26:4e:43:94:5d:b3:40:90:b6:03:35:95:39:81:90:4f:77:51:
32:d2:4a:b6:79:31:62:52:d5:1d:9c:09:c9:42:d3:88:9b:de:
3b:d1:b7:01:a9:bc:52:af:f9:4b:74:38:26:6e:e9:9e:5b:23:
26:a9:bd:d8:10:16:04:63:f6:5c:d2:6c:95:13:07:03:fa:6a:
6b:a3:b6:38:5f:1c:00:cd:6f:62:72:af:a2:b5:08:d2:d1:a0:
73:74:91:f2:81:69:7c:68:09:a0:85:2b:49:a2:5a:70:8b:f1:
70:45:bf:6c:8e:c8:7c:8d:1a:fb:7a:b6:83:c1:9e:9b:39:b6:
82:8f:82:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:37:51 2026 by rpki-client