
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/25b4b762-234e-4d63-9f1b-49bdd82029e1.roa
File: 25b4b762-234e-4d63-9f1b-49bdd82029e1.roa (raw, json)
Hash identifier: gawm0bJaOn1LZaazcNW2VPTvYTKWaZDn/bC7FZ1j/Pk=
Subject key identifier: D4:DC:FC:9E:11:22:F4:5A:A9:B6:0B:B7:1C:92:79:A0:00:0F:26:D1
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 342308BA116BDB3F6082889B16792F1CD1E522B3
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/25b4b762-234e-4d63-9f1b-49bdd82029e1.roa
Signing time: Tue 19 May 2026 04:00:35 +0000
ROA not before: Tue 19 May 2026 04:00:35 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:386::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:23:08:ba:11:6b:db:3f:60:82:88:9b:16:79:2f:1c:d1:e5:22:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 19 04:00:35 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=f5d23b5f1b9a9e9be867737bb70a1a3c6a32b4803620de95578793f207ca0b44, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:bc:f1:f7:90:41:bb:cc:6c:84:b6:67:de:
25:92:f7:ac:60:5a:2a:20:6b:9a:1b:5e:08:52:10:
43:0f:35:3b:7c:7c:dc:90:81:a5:f3:02:b0:32:a2:
28:37:5f:f1:bd:c1:8c:67:ae:a0:77:10:3d:f9:bb:
0d:d4:34:55:07:3e:ef:ff:1a:2d:eb:cb:2d:c7:a1:
44:64:ba:d1:34:8a:d9:02:89:55:0f:80:47:75:70:
4c:87:bb:79:68:aa:45:b8:ec:78:e0:16:d9:43:50:
84:03:b4:ce:1b:61:c9:b6:d0:ab:39:91:59:ab:b4:
a2:33:9c:50:2c:50:71:9e:66:25:68:f6:73:bc:8d:
7a:54:80:8a:a4:8d:47:de:b3:0d:5a:7c:e0:c8:7c:
46:32:ab:6c:9f:12:09:40:f9:3b:8a:41:3e:f1:d0:
43:49:45:ab:79:b1:17:7a:fa:07:88:e1:35:fa:03:
20:f7:35:1e:36:c2:ed:6b:3e:63:42:6f:e7:b3:25:
00:99:89:37:17:d9:09:b0:fd:42:85:7c:bf:b1:d0:
01:09:a7:cb:27:bf:ed:aa:38:01:bd:35:88:95:df:
26:42:74:79:03:6d:f7:96:ed:61:2e:e4:24:d3:b9:
a8:db:c5:a4:81:3b:08:a3:47:8d:fb:08:3b:5a:07:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DC:FC:9E:11:22:F4:5A:A9:B6:0B:B7:1C:92:79:A0:00:0F:26:D1
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/25b4b762-234e-4d63-9f1b-49bdd82029e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:386::/48
Signature Algorithm: sha256WithRSAEncryption
9b:96:5b:2f:3e:53:cc:c3:04:d5:38:2e:bf:8f:81:2e:c3:bd:
8c:72:16:4c:96:27:c7:11:2b:e1:9d:5c:50:d3:ab:21:f1:1d:
95:7f:27:22:f7:ba:71:a3:f6:cb:a9:f8:1c:78:87:78:fc:f8:
fa:a8:66:76:45:e1:ec:71:78:e6:ff:73:5a:87:b9:e1:a4:95:
bf:16:21:4f:60:8c:f1:71:0b:55:77:a0:c3:cc:48:b6:ee:5a:
f7:68:7c:fc:8f:ce:60:1d:9b:80:24:bd:12:bf:d3:dc:61:35:
c7:9e:10:b3:f4:17:a3:81:53:d0:b8:f3:92:5e:f0:fc:eb:9e:
40:b3:10:06:39:0c:11:df:32:e1:02:b9:97:a8:b5:8f:47:db:
76:96:66:9e:2b:39:e8:0a:e7:61:03:b6:0e:03:e3:56:e9:01:
cb:ca:7b:4e:b3:cf:57:b1:f1:9a:9c:d3:18:a6:be:bb:b0:c0:
8c:12:9b:f0:76:85:c7:01:da:fa:81:b7:f5:b6:34:d5:ee:23:
c4:b1:43:62:fb:14:10:3f:40:a4:71:eb:85:b5:ae:c4:b5:14:
d7:8e:4e:2a:34:70:4f:0c:81:c0:0f:ed:0a:d2:25:b2:bd:ca:
65:46:db:22:af:89:94:fe:fe:a3:ae:a5:7d:28:1d:4f:a7:7d:
f1:f1:26:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 00:48:39 2026 by rpki-client