
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63da27a0-b569-4a3e-8f4f-bf2b12445e0a.roa
File: 63da27a0-b569-4a3e-8f4f-bf2b12445e0a.roa (raw, json)
Hash identifier: MaWAxN4XGBoVrhk8sqZLXipdZ0KDF2oYSQTD2mdqdwQ=
Subject key identifier: 2F:93:AF:A1:A0:95:D2:EE:2F:E7:38:30:56:B9:F6:49:4D:F6:24:A0
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 31950B1F04B752B1A43520B9BFBB5A56A5735408
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63da27a0-b569-4a3e-8f4f-bf2b12445e0a.roa
Signing time: Fri 08 May 2026 01:11:20 +0000
ROA not before: Fri 08 May 2026 01:11:20 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 8987
IP address blocks: 3.32.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:95:0b:1f:04:b7:52:b1:a4:35:20:b9:bf:bb:5a:56:a5:73:54:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 01:11:20 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=ea092aa6548c0ef0ebbbf84d055b68a14b435deb7dafbfb7f88da75ff7c03037, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b2:72:a7:29:60:25:db:31:43:31:56:72:f6:
c3:f8:66:b0:7e:b0:cf:aa:8e:e6:92:c1:aa:e0:13:
03:2e:68:2c:43:6a:47:b4:98:b0:d1:ad:e1:9c:20:
c1:b3:bf:3f:c0:aa:12:a3:27:ac:5a:2b:54:36:a3:
05:0f:5e:d2:18:6f:0f:dc:a8:51:37:69:97:5a:f4:
6a:e8:09:4f:a3:7e:98:0a:86:ca:f6:a9:6d:85:1b:
7e:94:ac:25:6f:f3:1a:d3:16:4d:5c:fc:69:9b:19:
5f:c4:ca:16:3b:ee:a2:33:8e:03:63:08:e2:24:43:
c5:b5:8b:80:18:2c:6e:fb:a2:36:66:a7:ed:5d:be:
ec:38:f5:5d:75:1a:84:ea:80:fd:80:8d:1e:7b:69:
50:84:07:0d:06:d9:1e:61:62:7a:14:3d:22:d9:d3:
4d:77:76:25:e1:b9:f8:f9:26:f7:47:c3:9f:b7:e0:
54:c4:d2:61:7d:57:cd:b6:b5:53:09:70:dc:65:4b:
a6:7d:04:2b:9e:b0:24:e7:c2:02:55:2c:b8:6c:10:
12:79:8c:2b:64:e5:2d:2e:51:dc:51:79:ed:e1:fc:
34:2c:e7:15:7b:4b:6f:5a:60:e6:dc:67:1b:27:92:
e5:6e:34:91:99:ab:30:2a:29:00:e6:29:d5:18:2e:
6e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:93:AF:A1:A0:95:D2:EE:2F:E7:38:30:56:B9:F6:49:4D:F6:24:A0
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/63da27a0-b569-4a3e-8f4f-bf2b12445e0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
37:2d:66:46:5a:58:a4:35:b7:69:7c:e3:5f:3f:b3:78:7a:2c:
98:2f:2e:d3:d1:ce:85:54:35:a5:4e:82:29:a7:5f:2d:6b:9a:
34:f6:f9:2e:d6:11:0c:0c:6a:93:30:77:7f:f8:9b:b9:ce:c9:
7f:48:e8:24:13:2c:e2:37:c6:fc:b0:3f:5d:59:18:ed:0f:e4:
3f:61:65:55:0f:0f:59:cb:dc:d3:41:3b:ec:c0:54:a6:ac:60:
74:57:05:62:6a:2a:31:0c:0c:68:88:c1:15:9f:b2:f5:07:27:
f2:ce:37:7a:3d:4d:7d:63:71:b5:78:e9:bb:b3:4e:1b:5b:cf:
22:5f:5b:24:0a:7e:a2:28:63:7b:05:b6:07:e3:5c:ff:e8:db:
cb:74:dc:5a:30:80:6e:5a:ee:45:ab:c9:b0:a0:b8:a2:c7:38:
17:81:51:28:55:07:9b:59:60:4d:c2:1b:94:96:04:73:60:9e:
55:5d:10:71:4a:18:be:46:3b:43:0b:59:63:55:5f:15:43:86:
cd:b8:11:a6:ac:fa:54:77:cf:61:fc:94:df:34:a8:99:dc:76:
21:fb:a9:d7:23:6b:f1:51:01:b5:92:77:3b:95:17:d4:53:02:
7b:70:3c:a2:1d:95:44:01:d2:3a:11:ca:fa:57:13:57:c7:42:
65:92:1d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:26:55 2026 by rpki-client