
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/f6082068-1502-4d02-a99e-190e44dee2aa.roa
File: f6082068-1502-4d02-a99e-190e44dee2aa.roa (raw, json)
Hash identifier: 5KSHF8gG0HrJ/4BvwXZK13mnpsIUuzXWcRLPoXDx7fs=
Subject key identifier: C0:46:2B:59:FB:71:1E:B7:44:AB:06:C4:90:1C:D9:29:59:14:11:FF
Certificate issuer: /CN=278aab878f64e5149eadc9097465ba138f12461b78c7dd020a
Certificate serial: 576F224CEADBB40A8D5BA937DC7FBC06D0520708
Authority key identifier: DD:2D:8B:48:9E:ED:64:E3:A8:77:02:5B:3D:1A:DB:71:83:43:A6:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f64e5149eadc9097465ba138f12461b78c7dd020a.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/f6082068-1502-4d02-a99e-190e44dee2aa.roa
Signing time: Mon 03 Aug 2026 19:51:19 +0000
ROA not before: Mon 03 Aug 2026 19:51:19 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f64e5149eadc9097465ba138f12461b78c7dd020a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6f:22:4c:ea:db:b4:0a:8d:5b:a9:37:dc:7f:bc:06:d0:52:07:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f64e5149eadc9097465ba138f12461b78c7dd020a
Validity
Not Before: Aug 3 19:51:19 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=926b902852bba9ab1aab022ebf852c50be06bcddca63dd912c730ee2841c4b83, CN=66e6bf6f-c96c-4747-9680-4d23221702e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:1a:cf:05:69:1a:ff:2f:dd:7f:b1:31:2c:
23:1a:42:c7:52:a3:ce:87:54:b2:85:8c:cd:b2:8d:
1e:32:cf:73:0c:97:b2:46:60:6f:39:89:e8:55:7c:
15:45:30:5c:4c:68:fb:8b:ae:fa:c6:22:fa:a3:84:
9a:09:72:44:9b:83:32:d9:58:d8:17:be:89:66:e4:
d2:84:02:48:44:9e:9d:c9:cf:e0:47:aa:63:7b:e1:
60:c3:0e:83:f8:22:54:c7:1a:b1:9c:95:47:75:5f:
0a:b7:7f:a1:d8:1a:d6:b5:fd:70:b2:88:51:3d:84:
ba:9c:5f:9c:f0:cc:79:4a:db:ff:c3:c5:70:ce:d3:
87:8c:da:b3:05:e8:6d:bf:b3:bb:f9:3d:ca:b8:ad:
bd:e2:ac:cf:19:66:ff:28:fc:85:a5:14:b1:d8:c5:
f0:77:43:bc:10:c3:83:0f:e0:4b:b6:48:cd:8f:5e:
b5:ab:21:a6:ab:65:45:25:b1:9d:b7:10:77:cc:45:
5e:3d:02:cc:d8:88:b6:ad:80:14:af:9a:31:c4:7a:
0e:dc:77:b7:02:82:4a:39:a4:48:8a:01:f6:08:ea:
2e:07:ab:07:76:6d:67:b9:e3:4a:fb:fc:f0:a1:03:
7b:11:f2:60:9f:7a:66:ab:dc:d0:4d:7b:2e:1c:f5:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:46:2B:59:FB:71:1E:B7:44:AB:06:C4:90:1C:D9:29:59:14:11:FF
X509v3 Authority Key Identifier:
keyid:DD:2D:8B:48:9E:ED:64:E3:A8:77:02:5B:3D:1A:DB:71:83:43:A6:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f64e5149eadc9097465ba138f12461b78c7dd020a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/f6082068-1502-4d02-a99e-190e44dee2aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/98c1c974-4608-4b75-8781-dc145101a9bd/ZOUUnq3JCXRluhOPEkYbeMfdAgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
48:2a:c8:11:11:91:d2:87:f4:7b:c7:c7:85:38:1f:fd:11:fc:
1d:e3:4e:18:a9:db:fa:81:94:e0:de:85:ca:f0:3f:95:89:f7:
22:00:11:6d:32:59:3d:90:e1:af:c8:75:43:2f:b2:68:fd:c3:
11:6f:43:23:10:65:c1:da:47:1c:ca:6a:04:d8:14:ac:f5:be:
85:9a:6e:7a:2f:37:a0:d6:21:a2:4d:55:c3:41:2d:a0:64:4f:
f6:e1:3b:05:51:76:d7:c5:ef:f9:67:34:3a:2d:eb:61:9f:2e:
6e:22:de:50:1b:ed:95:27:cc:4c:b4:17:93:8f:c4:2a:6c:61:
43:b4:72:bf:21:27:45:bf:e0:e1:4f:2f:87:b7:bd:88:f8:5d:
44:61:57:90:ae:ba:42:34:20:23:26:93:e0:67:84:2b:29:3c:
f5:db:0e:51:b5:58:96:b6:4e:e8:c1:b5:e2:29:c0:d3:ca:63:
6d:19:70:79:1b:1a:70:eb:f6:ad:ed:0d:75:95:1d:5f:e2:04:
83:3a:06:0b:55:5a:9a:fc:43:06:ba:4a:a7:d9:fd:fc:b9:6e:
0b:b6:97:57:86:2e:bb:b4:a9:3f:58:19:97:c9:b6:7b:bd:10:
07:90:f0:0a:01:b9:cb:99:26:a9:5f:1c:0d:f8:0f:f4:cc:69:
4b:ae:b5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:10 2026 by rpki-client