
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa
File: e7874585-f99e-4906-afcf-7069fe104b33.roa (raw, json)
Hash identifier: ETM6aNHPQChliwNFvuXJkwSMigiHlWsf0y3Gid10hSA=
Subject key identifier: C1:78:01:5F:A8:ED:15:96:1C:45:82:AB:62:7C:3A:DF:FD:D3:B2:94
Certificate issuer: /CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Certificate serial: 3564EBD4C35FE43E3F8596F73DAF936AE8420696
Authority key identifier: FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa
Signing time: Mon 04 May 2026 00:00:22 +0000
ROA not before: Mon 04 May 2026 00:00:22 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2620:107:300f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 08 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:64:eb:d4:c3:5f:e4:3e:3f:85:96:f7:3d:af:93:6a:e8:42:06:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64
Validity
Not Before: May 4 00:00:22 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=0b051ac190f615e1bcbe69c8249c18f6b000230f74040c4b63ffc5acba9263d7, CN=71c3876e-b944-4600-92c7-cec33d89523f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:df:22:f8:c2:10:d5:3b:df:a3:71:57:38:11:
34:80:c5:e5:e2:f2:f5:15:f8:81:d7:0a:5a:6d:7d:
41:37:ae:95:b3:aa:d8:1f:d8:3b:37:15:dd:5b:43:
f3:36:83:33:09:04:81:d4:32:3b:ab:a6:26:6b:23:
93:f3:31:72:ac:e7:b8:8d:a0:08:14:0e:cd:83:71:
0e:a8:fd:95:30:ba:44:7e:29:73:93:84:04:f6:74:
ec:f4:77:bd:d5:fa:c4:b6:88:55:e9:df:16:c9:21:
50:63:8b:7e:55:79:89:06:20:8f:57:6f:9f:ec:a4:
67:36:9e:6e:47:32:6c:2a:3a:e8:8e:01:76:cb:9d:
53:38:34:1b:4d:e5:aa:b8:be:a1:09:c1:6e:8c:54:
55:f4:a4:a2:8b:9c:7e:d3:82:8a:9b:de:17:bb:b3:
0e:80:51:ec:b0:de:55:5a:d8:91:51:fc:32:2b:9f:
16:d4:de:2e:68:df:e9:fc:b4:99:e4:1b:1e:11:b6:
96:db:0a:0b:6b:78:79:bf:31:a3:c7:89:60:09:49:
2f:9b:7d:0b:15:6a:91:77:d4:0b:45:e2:b6:b4:84:
97:03:93:c3:53:0d:32:15:3e:d5:e5:1c:fd:0d:16:
4c:0c:ea:53:f7:0d:d6:d9:da:57:83:18:82:ab:2f:
31:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:78:01:5F:A8:ED:15:96:1C:45:82:AB:62:7C:3A:DF:FD:D3:B2:94
X509v3 Authority Key Identifier:
keyid:FE:22:E0:F7:22:CC:4F:06:0C:58:5A:12:6F:E6:A2:65:00:36:5E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/e7874585-f99e-4906-afcf-7069fe104b33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/a841823c-a10d-477c-bfdf-4086f0b1594c/GCPJMZh-nJw38EAgqrq_m03_m2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2620:107:300f::/48
Signature Algorithm: sha256WithRSAEncryption
39:de:d2:10:c4:db:67:93:4c:16:82:c6:27:30:ce:6b:8a:06:
cd:2c:59:d9:b5:1f:f0:82:0d:c8:6a:09:84:bb:be:9e:c8:7e:
89:ba:c0:9d:ed:e3:ae:ec:0b:4c:8b:a3:2a:34:f6:5c:42:77:
4f:86:21:59:0c:a7:d8:d5:26:a9:bd:82:9b:59:ca:71:12:3e:
a5:7b:ba:56:ca:37:f6:4f:45:fc:ef:39:73:8b:cd:5b:6a:f5:
de:ce:8b:0c:68:43:55:5a:48:91:9a:6b:ef:f0:48:21:ae:04:
36:52:67:6c:30:7a:23:84:93:db:a1:ce:c1:30:be:8a:65:3b:
4b:2a:37:cf:03:45:cb:ea:12:64:b3:b5:a0:83:3e:8d:e8:0b:
1b:c2:f5:2c:35:6c:8c:18:a1:f6:d3:c9:5d:1d:de:89:a9:ff:
25:59:2f:93:18:f2:41:d0:08:59:a9:34:9b:ef:3d:9e:ae:d9:
54:85:c4:96:f6:38:96:5a:bc:9b:7f:c2:f5:c0:fd:d5:65:60:
79:cf:74:fc:07:30:a7:80:d8:2f:26:c1:a7:da:b6:f0:7b:21:
36:5c:c7:74:95:d2:4d:d7:10:d8:dc:2a:21:4e:37:96:4a:7a:
32:7c:c6:16:e2:c2:97:c7:23:06:e2:65:d7:84:ad:d5:23:22:
cf:43:c2:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 7 08:05:12 2026 by rpki-client