
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30c10dfe-f332-474d-9619-46ffe721c844.roa
File: 30c10dfe-f332-474d-9619-46ffe721c844.roa (raw, json)
Hash identifier: D2RLQAglMw1MDfzn04aF30JTTSimWACYnmVDc7Id8RA=
Subject key identifier: F2:28:3A:8B:AC:3D:0E:91:77:42:F4:D3:77:9E:D1:45:05:1F:ED:0C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3CE1988D17D876DD30AE4F0EAFFD10C82C4A0A19
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30c10dfe-f332-474d-9619-46ffe721c844.roa
Signing time: Fri 01 May 2026 01:10:49 +0000
ROA not before: Fri 01 May 2026 01:10:49 +0000
ROA not after: Thu 30 Jul 2026 23:59:59 +0000
asID: 14618
IP address blocks: 150.222.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e1:98:8d:17:d8:76:dd:30:ae:4f:0e:af:fd:10:c8:2c:4a:0a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 1 01:10:49 2026 GMT
Not After : Jul 30 23:59:59 2026 GMT
Subject: serialNumber=94f0f4426a21b99e0b1c8c74b409c2a25af1c81ed0a5966bc9bd45205d529804, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:a0:c4:0d:d8:57:fa:85:25:71:b5:d5:99:
b1:60:e4:94:8c:76:30:75:cb:6b:34:1e:4c:2b:09:
d1:dd:5d:08:da:05:bf:8c:ce:c8:b6:49:d2:31:bd:
a0:9a:2f:68:46:6f:09:ee:b4:2e:a2:f0:84:17:91:
86:28:ba:b1:bd:43:17:3d:48:7c:e5:88:5f:60:18:
4d:76:a1:b4:68:92:07:76:3d:e8:da:99:ac:8a:84:
2e:e6:23:f1:99:cf:c9:12:d3:ee:05:68:83:36:ed:
04:23:1e:17:e4:7e:41:78:a0:31:3e:37:4f:4d:4b:
3e:e7:9b:e6:7a:d3:da:47:a6:a0:ca:72:53:97:f5:
93:bb:af:7e:83:d6:6f:3b:72:1d:fb:c2:34:59:02:
ad:ec:ac:36:db:66:04:9c:ed:91:03:3e:1b:76:34:
6b:93:ee:e8:cb:dc:55:f2:fa:fc:80:4a:4a:bb:6d:
aa:25:ef:5d:61:5d:87:20:f0:b4:f2:cd:1b:ea:3e:
8f:f1:22:ef:42:90:08:de:73:ac:62:77:d1:85:f2:
72:a6:eb:4f:69:2d:f4:c5:6c:a8:27:55:32:94:b1:
4c:a4:9f:5a:ac:9f:57:f0:4c:3d:44:86:51:38:92:
5b:c6:1d:4b:87:16:ec:aa:cc:b7:c8:74:e2:3e:e2:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:28:3A:8B:AC:3D:0E:91:77:42:F4:D3:77:9E:D1:45:05:1F:ED:0C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/30c10dfe-f332-474d-9619-46ffe721c844.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.34.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1b:ba:5c:13:64:43:a7:70:69:ec:b4:02:6d:2c:22:53:06:
d4:fa:8a:e4:f9:7b:14:15:23:26:04:17:ee:04:bc:f9:ba:99:
b5:35:5c:cb:52:cc:7d:9a:f1:4c:71:4a:b8:48:a4:58:1f:15:
e7:7b:8f:34:f7:11:b1:aa:51:78:e1:a1:46:48:53:b5:6d:bd:
64:fe:47:2e:75:b3:04:14:73:bf:44:47:20:6d:58:cf:43:42:
ba:c8:ab:8c:f4:4a:ac:90:d5:db:4a:01:5e:d9:a1:5c:dc:73:
79:a0:d7:7a:04:32:c0:d4:2f:69:f5:f4:d5:26:0e:e5:68:c6:
0f:d3:80:65:65:c7:08:b2:36:f8:93:43:fa:9c:fb:61:6b:fb:
e9:5d:3c:c0:ff:17:42:e4:3e:c2:9b:1f:1b:7f:fa:1d:8a:5f:
8d:00:d9:98:8d:88:88:eb:e4:bc:19:fe:ba:5c:b1:8b:31:43:
a6:ed:85:03:1a:df:53:a5:16:da:5c:12:13:49:00:26:50:b2:
ff:95:65:f0:6d:0f:9c:dc:c7:56:5b:06:20:a9:07:c9:3c:6d:
ac:b8:62:d9:8c:ce:57:c1:77:f3:15:3b:5a:de:2f:39:2b:11:
77:8e:2b:50:3f:0f:80:07:7b:36:00:50:ab:39:8b:ea:e4:db:
94:16:3b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:05:32 2026 by rpki-client