
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3aaf61b0-f2ef-4e6d-9210-b88e903979a8.roa
File: 3aaf61b0-f2ef-4e6d-9210-b88e903979a8.roa (raw, json)
Hash identifier: VXBYIDF3anx5822G5DGOwTTXrbosSDXsTCXZpgCVTqw=
Subject key identifier: 5B:A9:E9:F1:C8:F0:0E:71:6F:A5:64:DE:AF:EF:78:B4:31:68:7C:CA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 698C7007A1548924F58CD12634DB8779A6BC754C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3aaf61b0-f2ef-4e6d-9210-b88e903979a8.roa
Signing time: Mon 27 Jul 2026 02:30:10 +0000
ROA not before: Mon 27 Jul 2026 02:30:10 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.196.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:8c:70:07:a1:54:89:24:f5:8c:d1:26:34:db:87:79:a6:bc:75:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 02:30:10 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=944874ae4ae844dfe440e82379f9426b55d73abcb0d556a556746a208a6e9e85, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:89:c4:0a:58:7b:40:84:bb:41:fc:42:a7:
18:15:4a:20:ad:dc:6b:c8:82:d6:eb:fd:69:15:86:
38:4d:28:a9:fc:86:25:e9:ee:50:cd:4a:2a:f7:e4:
1b:44:46:ca:72:ee:0b:fa:9b:93:7c:66:fd:78:ba:
9d:ad:e7:50:58:a9:9e:04:ce:12:87:d9:23:9d:35:
29:34:ce:ee:c9:47:be:38:b5:08:2c:9b:a9:07:9a:
17:66:89:71:94:b2:65:f6:ac:7f:ff:62:04:9a:b8:
4b:ba:d6:1a:c5:a7:93:54:f7:a3:2a:21:e3:2f:07:
b7:21:60:d6:7a:9a:b5:2a:68:e9:c6:9f:ae:3e:f1:
14:f2:4a:eb:31:b4:fd:fd:a0:69:27:4f:bc:33:fc:
77:ca:3c:87:8b:41:46:7d:3c:ab:74:08:5c:f5:23:
37:c8:29:75:b2:b1:81:f4:b1:52:e1:35:b3:39:39:
8c:e2:08:c8:7a:bf:c5:ca:c8:3e:7c:cc:2c:40:78:
f6:c8:f9:c3:87:65:8f:9e:30:f4:35:d7:c4:24:55:
d4:44:ea:8e:25:11:d0:e2:eb:f4:17:5a:af:46:68:
be:35:72:0a:0b:84:e5:2a:0c:03:8f:14:d9:0b:c9:
e8:a0:c9:e4:01:10:73:2f:ba:46:01:75:2b:d2:fd:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A9:E9:F1:C8:F0:0E:71:6F:A5:64:DE:AF:EF:78:B4:31:68:7C:CA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3aaf61b0-f2ef-4e6d-9210-b88e903979a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.196.0.0/14
Signature Algorithm: sha256WithRSAEncryption
77:5e:0b:d1:00:8f:c5:98:63:5c:37:29:fc:56:90:2d:db:9a:
c3:54:67:8f:c2:97:cb:4a:cd:a6:a7:0b:42:c6:bb:a3:f9:75:
61:cb:8f:f9:bb:98:83:4d:4a:85:71:fe:ea:fb:a9:f7:1d:f6:
10:e3:15:03:eb:41:49:44:ee:0a:5e:e2:0e:c0:f9:47:cc:45:
21:05:78:bd:f2:0c:8d:62:2a:da:a5:b4:b3:cd:d6:b9:17:df:
9f:db:3e:c6:14:18:f5:2c:8e:37:65:dc:03:23:8c:b2:53:8c:
fd:7b:ed:5f:90:5e:ad:9c:b0:ad:a8:25:83:f6:93:00:df:ae:
1b:ef:05:d6:20:6d:71:73:cb:c9:07:57:58:d6:18:61:a3:38:
d3:c4:a5:1e:c8:88:9c:00:ed:d3:fd:fa:74:ab:0b:2a:ab:02:
c2:ea:cd:b3:e5:b0:8d:2f:a4:d5:1a:90:db:33:af:81:d3:d1:
14:dc:1a:1f:4c:7e:20:3f:34:66:1a:a4:02:36:14:05:0d:90:
98:99:09:58:a1:bb:7b:38:24:8f:5c:15:58:22:fb:09:13:af:
ea:7a:28:d5:68:3d:b3:03:72:48:cd:a9:b7:90:7a:24:82:2f:
25:ea:32:7e:17:9d:a0:92:9e:3a:f9:e5:51:1c:ed:38:37:d7:
b7:26:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 09:37:49 2026 by rpki-client