
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6efbc84-7962-432f-a60c-cdeb46db405e.roa
File: d6efbc84-7962-432f-a60c-cdeb46db405e.roa (raw, json)
Hash identifier: Mxlu+NBu06yfl1wOoap4X3qHXle4qyNWvdikSSljvOM=
Subject key identifier: 2F:EE:CE:CF:FF:B6:94:27:EB:3F:EF:3C:B0:75:D2:D3:C0:59:AB:30
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 58683B10038BA47174CE3E2733B3E695044A0A83
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6efbc84-7962-432f-a60c-cdeb46db405e.roa
Signing time: Thu 09 Jul 2026 10:08:24 +0000
ROA not before: Thu 09 Jul 2026 10:08:24 +0000
ROA not after: Wed 07 Oct 2026 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 10 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:68:3b:10:03:8b:a4:71:74:ce:3e:27:33:b3:e6:95:04:4a:0a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 9 10:08:24 2026 GMT
Not After : Oct 7 23:59:59 2026 GMT
Subject: serialNumber=32fa2db9f4159eaf200842f2eb9b9a048117c229d2be7d931354f4b820d3414e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:b2:d2:d6:ae:e8:af:15:80:38:62:11:4d:
8a:70:d6:ad:5b:02:a6:5e:fd:84:bc:58:43:ed:b0:
a0:a4:d8:85:2d:5f:0b:d2:c9:cb:a5:81:d4:35:4a:
64:fb:0d:d5:2f:1d:96:11:5e:7c:f0:f1:e8:47:9b:
e9:cf:03:e6:0b:42:72:28:61:e0:bb:11:f7:6c:ac:
90:39:1a:65:a3:e0:eb:7f:7c:3a:70:51:79:60:6d:
0e:c0:43:f9:c1:d8:1b:1e:dc:6c:31:0a:b6:5a:61:
29:4f:eb:07:44:81:0d:d4:2f:2a:d3:2f:bd:f7:e9:
3e:11:8c:4d:28:e1:22:38:bb:65:80:64:6c:a0:4b:
86:5f:1b:fb:15:12:02:83:df:d1:2a:45:ad:17:68:
96:81:3c:ae:f7:61:82:8c:22:9a:06:61:70:58:3f:
d1:30:a8:6b:9c:3d:f6:a0:18:0c:10:15:ce:db:47:
25:38:12:8e:80:d6:d5:1c:5d:cb:44:5f:f7:64:d4:
73:82:f2:87:51:6d:51:ef:32:29:a1:e3:27:d2:e3:
1d:b3:f6:24:1a:fb:04:76:a7:82:55:1b:e5:92:92:
25:bb:23:e5:e0:7e:0c:7d:17:90:75:04:38:59:63:
b5:b9:ca:af:90:5d:03:1d:a2:9f:10:f9:fd:49:f3:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EE:CE:CF:FF:B6:94:27:EB:3F:EF:3C:B0:75:D2:D3:C0:59:AB:30
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/d6efbc84-7962-432f-a60c-cdeb46db405e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:15:fe:4e:92:51:a2:f4:10:eb:9f:7a:0d:e8:48:e6:f5:ec:
8e:25:d6:36:ae:47:d6:7c:53:63:45:e5:f0:af:55:17:81:aa:
0e:b7:81:27:e0:c1:23:4b:a9:51:48:9f:e1:c2:5d:f0:43:c0:
22:c4:60:c6:5d:bc:1a:64:c8:81:01:04:50:3f:73:7e:a7:92:
fb:ca:55:fd:b3:58:41:35:22:b5:5f:c1:ce:aa:c9:91:43:68:
6b:4a:eb:dd:37:a1:54:a1:3e:80:f4:4c:3b:da:0a:fa:f5:de:
25:22:83:29:47:10:69:86:48:68:d0:60:7a:2e:54:42:41:53:
17:94:18:e4:ae:fc:cd:9f:26:8e:27:1a:d6:9e:64:ac:83:28:
6c:30:3a:3d:5a:0f:b4:9e:01:ce:03:da:f0:20:59:7e:75:11:
25:3b:be:2b:55:12:e4:12:63:c5:e3:90:d5:9b:e0:a9:c1:ed:
91:af:45:90:f9:2e:36:17:e7:50:53:02:02:53:59:83:b7:40:
cb:cd:eb:95:56:f3:87:82:a5:7a:ef:11:f9:bf:4b:27:43:a6:
cb:2e:66:9e:f6:80:f4:86:25:74:69:03:20:f8:41:90:d3:bd:
7c:cd:2f:1c:5c:f0:53:2a:4c:d2:7a:e1:70:9b:69:c8:88:72:
6d:d8:c0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 11:51:50 2026 by rpki-client