
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05e84e9d-925b-4b36-bac6-0a67e67666cd.roa
File: 05e84e9d-925b-4b36-bac6-0a67e67666cd.roa (raw, json)
Hash identifier: IhGLqaG4OvuFc/YU2yjz7ud9MehroPQhyn23xvRgJw0=
Subject key identifier: F1:B8:C5:0E:05:BA:B4:47:87:3B:95:9C:4F:F7:2A:8E:1C:8F:47:BD
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 01F3E85B34B9D8E5270AB1D678A301F182EB81F5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05e84e9d-925b-4b36-bac6-0a67e67666cd.roa
Signing time: Fri 07 Aug 2026 02:40:14 +0000
ROA not before: Fri 07 Aug 2026 02:40:14 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 15.221.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f3:e8:5b:34:b9:d8:e5:27:0a:b1:d6:78:a3:01:f1:82:eb:81:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 02:40:14 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=41b7e25ba801f147f77b77f90ce08f29755a88e92b8258817cf5f26420bc4fba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:d6:e4:81:da:35:87:cd:b2:e4:f4:38:75:
90:59:49:2c:b4:90:8c:75:97:c3:fb:7b:cb:c9:0f:
52:30:b6:74:92:21:57:2b:f4:2f:98:2e:d5:2e:6c:
e6:0a:b9:0e:2a:b5:14:87:a7:6e:87:43:59:44:55:
12:65:27:dc:43:6e:17:ba:2d:86:2c:9f:43:1c:7a:
8a:26:98:83:58:33:43:80:cc:28:79:b9:76:b3:4e:
56:86:97:10:6c:f4:c3:b0:cc:0d:1b:63:c8:95:a4:
64:d7:5b:7e:06:d6:c3:03:94:cc:ca:69:1c:f6:cb:
74:9f:12:d6:d6:e1:7f:b5:8c:0c:d1:1f:3b:9e:15:
b8:9d:52:fa:77:70:94:52:2e:10:44:ab:e3:36:b5:
5c:58:7a:27:b7:11:8e:d5:07:29:53:76:19:ad:33:
19:3e:ca:29:c8:20:4f:6b:e9:02:b6:13:71:25:75:
87:03:7e:18:5d:1c:2d:37:f2:bb:fb:9e:74:1f:0c:
28:06:a3:d0:bb:d3:65:a7:a5:77:4f:05:89:b3:0f:
8e:ce:8a:21:52:c5:93:fc:64:1f:0d:9e:1a:ec:36:
ee:bf:c3:84:47:db:40:f8:12:d2:6a:e9:31:1a:55:
28:91:49:a5:ee:c5:89:49:6b:6d:01:1a:9b:22:56:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B8:C5:0E:05:BA:B4:47:87:3B:95:9C:4F:F7:2A:8E:1C:8F:47:BD
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/05e84e9d-925b-4b36-bac6-0a67e67666cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.221.24.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:d3:53:d6:e4:3e:da:56:22:dd:24:04:93:65:4b:55:43:0b:
f0:72:21:5b:33:38:73:b0:72:7a:1c:49:1c:2e:9f:00:b8:23:
1b:4a:12:13:93:78:f3:c7:68:12:15:41:f4:4f:b3:0c:50:77:
9b:2c:cc:4b:68:7b:83:0b:c0:bf:5f:43:d1:6a:64:a0:ea:81:
52:ad:2a:11:6a:56:42:a9:b5:f6:b1:1f:21:67:ee:b6:23:96:
b4:73:14:62:8d:0f:1f:71:92:50:32:76:b0:99:39:48:51:95:
67:fb:89:e6:31:34:01:f6:77:0b:a4:ee:5a:6f:2d:7f:30:72:
60:0c:f7:71:01:2b:fb:be:6f:9e:2d:5d:7a:84:06:31:fd:5d:
2d:13:b2:b2:c1:b3:53:60:43:00:42:e0:f5:0f:83:e8:40:7c:
97:ad:3b:6d:63:f2:9f:57:0b:e1:2f:b7:7e:30:e1:a0:64:ee:
7b:6f:07:7c:c4:bd:d8:d9:8a:aa:20:15:89:48:09:0f:dc:cb:
e6:a0:2b:69:43:7b:52:92:4b:49:64:a2:2c:45:36:b4:32:7f:
83:47:2e:00:43:2d:90:e8:47:9b:94:24:7f:39:7f:04:ec:9f:
07:30:23:ad:1d:91:fb:53:08:98:54:30:90:a4:54:61:7a:be:
5f:47:f1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:59:51 2026 by rpki-client