
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/474b8370-dc4f-4592-ac12-366b777c2660.roa
File: 474b8370-dc4f-4592-ac12-366b777c2660.roa (raw, json)
Hash identifier: 6kt/xD0zFJYlg9XG0bV4u998FAResv7BoX4P4MFmt+M=
Subject key identifier: 9A:FC:6B:E9:07:5F:79:65:9D:CE:38:B2:31:81:FC:4E:8A:82:6B:20
Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial: 18C6D68E554D57E738D4F080A300BFF37D219134
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/474b8370-dc4f-4592-ac12-366b777c2660.roa
Signing time: Fri 07 Aug 2026 00:50:10 +0000
ROA not before: Fri 07 Aug 2026 00:50:10 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 50.112.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c6:d6:8e:55:4d:57:e7:38:d4:f0:80:a3:00:bf:f3:7d:21:91:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Validity
Not Before: Aug 7 00:50:10 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=a962752fd9155646abe3ddfd5632a4a095b43565979e89d39a782db1c13fb761, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:19:0c:39:97:36:fa:fc:39:dd:aa:4d:f5:4a:
76:b5:06:4b:82:16:e9:97:2c:58:58:96:c1:e4:b7:
8d:a0:b6:b0:6a:f1:38:5c:23:ef:54:b9:cb:8b:38:
4c:15:d6:b7:54:82:87:9d:62:a8:a6:70:3c:be:80:
84:44:79:f0:75:f1:5c:2f:68:5a:da:77:34:65:54:
bc:32:29:ab:a3:9e:6b:09:38:27:4d:a5:d0:4d:80:
6f:99:2b:27:df:0b:ce:ee:ca:29:aa:39:4b:68:25:
57:f8:0e:70:c2:2b:53:4a:ad:29:84:f4:61:28:b4:
dc:9a:f8:94:48:96:e2:8f:81:5c:28:87:23:0e:b8:
02:e0:d9:2f:03:ef:c8:99:27:15:ac:0c:d0:9d:c4:
13:ce:78:b5:d3:5e:18:2c:a9:12:93:d2:8f:f7:dd:
a4:f9:6e:78:90:5f:db:f2:7a:f1:b6:f0:18:04:6e:
2a:69:46:53:b6:7c:60:a9:17:99:c9:22:17:36:c3:
6b:f0:07:cf:b3:3b:6d:34:5b:31:6d:19:92:ef:28:
24:58:31:54:ad:66:6f:8e:ad:2a:b9:53:85:df:75:
fa:7f:8c:43:76:37:e6:6b:f2:de:61:1e:b2:e7:fc:
dd:7a:a0:a8:6f:dd:bd:54:fc:81:27:3e:4f:db:e8:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FC:6B:E9:07:5F:79:65:9D:CE:38:B2:31:81:FC:4E:8A:82:6B:20
X509v3 Authority Key Identifier:
keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/474b8370-dc4f-4592-ac12-366b777c2660.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.112.1.0/24
Signature Algorithm: sha256WithRSAEncryption
09:28:72:5e:6d:50:6e:53:70:15:79:24:47:3c:d7:7e:3d:99:
82:18:2f:0f:f9:73:bd:61:94:2e:45:d3:3f:8f:b7:b0:be:76:
84:b8:55:ef:fb:97:a9:6d:5c:19:7a:00:4c:e3:9b:7a:a1:06:
5f:b8:5b:58:8a:25:45:4e:28:6f:52:cc:44:04:e7:41:10:f9:
78:aa:ea:89:3e:60:6b:ff:1d:a8:73:e4:df:af:8c:21:7b:b3:
64:42:54:b2:06:7c:4d:d1:8f:b3:0c:e6:87:d2:da:b8:82:6b:
5f:91:7a:bf:00:7a:62:63:df:25:b2:78:33:e6:8b:9f:74:aa:
08:31:9e:5c:9c:77:4a:3b:0c:03:06:e2:bf:2c:17:23:6c:98:
88:f9:ce:48:00:28:d4:58:56:96:a0:e5:87:f1:fa:3f:c7:bd:
cc:b6:74:ab:74:90:66:ea:00:1c:42:f8:09:4b:75:ca:79:c9:
18:98:e3:52:8a:c1:a6:13:8c:94:3c:78:1e:4e:71:99:52:55:
39:b2:54:ce:80:42:74:ac:4d:5a:1c:1f:0b:6c:05:78:40:14:
e3:1a:09:77:5d:47:77:bd:59:bc:fc:ec:40:9c:c3:10:5b:06:
ed:28:50:27:40:1d:3e:94:de:09:17:39:d0:01:7d:96:94:61:
de:ba:83:2c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGMbWjlVNV+c41PCAowC/830hkTQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTE1ZDhhYTEwZDYyZGJkZDM0ODMyNjg3NmJhNTY3NTNj
Yjk5YjQ2NGNjNDU1MzI0YjMwHhcNMjYwODA3MDA1MDEwWhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BhOTYyNzUyZmQ5MTU1NjQ2YWJlM2RkZmQ1NjMyYTRhMDk1
YjQzNTY1OTc5ZTg5ZDM5YTc4MmRiMWMxM2ZiNzYxMS0wKwYDVQQDEyRkZGZiYzk3
Yy03YmVkLTQwZGYtOTVjYS1lNjY0YjI5ZDdiMjcwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCfGQw5lzb6/Dndqk31Sna1BkuCFumXLFhYlsHkt42gtrBq
8ThcI+9UucuLOEwV1rdUgoedYqimcDy+gIREefB18VwvaFradzRlVLwyKaujnmsJ
OCdNpdBNgG+ZKyffC87uyimqOUtoJVf4DnDCK1NKrSmE9GEotNya+JRIluKPgVwo
hyMOuALg2S8D78iZJxWsDNCdxBPOeLXTXhgsqRKT0o/33aT5bniQX9vyevG28BgE
bippRlO2fGCpF5nJIhc2w2vwB8+zO200WzFtGZLvKCRYMVStZm+OrSq5U4Xfdfp/
jEN2N+Zr8t5hHrLn/N16oKhv3b1U/IEnPk/b6NUJAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUmvxr6QdfeWWdzjiyMYH8ToqCayAwHwYDVR0jBBgwFoAUkS3GDddkKYK8
rn+B/jxMEnKAIh8wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MTg4YWMyNC0w
OWNjLTRmMjAtOWRiZC1jZDkwMDVkMjc5N2UvYTE1ZDhhYTEwZDYyZGJkZDM0ODMy
Njg3NmJhNTY3NTNjYjk5YjQ2NGNjNDU1MzI0YjMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNjAyYTI2ZTUtNGE5ZS00ZTVlLTg5ZjAtZWY4
OTE0OTBkOWM5LzQ3NGI4MzcwLWRjNGYtNDU5Mi1hYzEyLTM2NmI3NzdjMjY2MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzYwMmEyNmU1LTRhOWUtNGU1ZS04OWYw
LWVmODkxNDkwZDljOS9ZdHZkTklNbWgydWxaMVBMbWJSa3pFVlRKTE0uY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAycAEwDQYJKoZIhvcNAQELBQADggEBAAkocl5tUG5TcBV5JEc81349mYIY
Lw/5c71hlC5F0z+Pt7C+doS4Ve/7l6ltXBl6AEzjm3qhBl+4W1iKJUVOKG9SzEQE
50EQ+Xiq6ok+YGv/Hahz5N+vjCF7s2RCVLIGfE3Rj7MM5ofS2riCa1+Rer8AemJj
3yWyeDPmi590qggxnlycd0o7DAMG4r8sFyNsmIj5zkgAKNRYVpag5Yfx+j/Hvcy2
dKt0kGbqABxC+AlLdcp5yRiY41KKwaYTjJQ8eB5OcZlSVTmyVM6AQnSsTVocHwts
BXhAFOMaCXddR3e9Wbz87ECcwxBbBu0oUCdAHT6U3gkXOdABfZaUYd66gyw=
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:25:40 2026 by rpki-client