
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4598d2eb-7f57-4e1b-a8b0-1b8a086e722f.roa
File: 4598d2eb-7f57-4e1b-a8b0-1b8a086e722f.roa (raw, json)
Hash identifier: /T7fftxGTDZgdBSd44L5h10J6on2h1yKNbBbDU2h7R8=
Subject key identifier: ED:17:8C:99:94:9A:0A:F6:92:3F:D8:17:77:05:2D:25:46:37:F1:69
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 71802719E4B1DE31C37D736C1FDD206EFC4714DF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4598d2eb-7f57-4e1b-a8b0-1b8a086e722f.roa
Signing time: Sat 01 Aug 2026 01:00:11 +0000
ROA not before: Sat 01 Aug 2026 01:00:11 +0000
ROA not after: Fri 30 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 144.220.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:80:27:19:e4:b1:de:31:c3:7d:73:6c:1f:dd:20:6e:fc:47:14:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 1 01:00:11 2026 GMT
Not After : Oct 30 23:59:59 2026 GMT
Subject: serialNumber=a7150661af82db4fb7c3c6c7e5e547c5f55effe35960b507c6145f39000fb1ae, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b1:66:0e:6d:f3:37:f7:4b:65:61:85:c8:bb:
57:fe:fd:a6:ad:04:f8:8b:2e:f4:0f:70:7a:10:82:
08:7c:88:f0:26:6d:ff:09:99:1e:e5:b2:8b:b6:06:
b7:49:bc:b8:73:7b:26:38:83:d9:a2:78:d4:77:83:
7c:8e:83:04:3a:03:a9:e9:d5:d6:06:32:67:65:ba:
cb:42:02:9d:71:78:91:b6:af:5d:fd:92:14:9e:64:
a6:9a:92:95:13:31:de:a9:6f:58:37:2c:f3:f9:d0:
bc:95:64:fb:fa:9f:d2:57:52:de:b4:be:3f:a2:c7:
36:5b:f8:fb:f2:70:c5:75:36:a1:06:70:c5:25:48:
81:a6:8c:24:b8:0f:71:cd:df:c1:f2:87:b2:01:68:
f9:b3:47:6e:37:eb:62:86:d6:b1:de:90:02:81:10:
d6:45:f2:58:41:9f:38:6d:65:8c:d9:da:a2:0c:18:
b4:f2:81:37:9b:9c:9d:a2:a3:3e:e3:d4:00:a5:00:
87:a2:f1:f2:43:c2:e9:90:64:72:86:eb:e1:ac:4e:
78:34:14:1d:71:ad:11:ff:da:f4:9a:13:ee:22:af:
15:9f:77:75:55:93:03:aa:28:76:9d:fb:f9:23:48:
e4:02:44:5e:8c:71:7e:89:91:bb:3c:78:19:d4:25:
33:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:17:8C:99:94:9A:0A:F6:92:3F:D8:17:77:05:2D:25:46:37:F1:69
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4598d2eb-7f57-4e1b-a8b0-1b8a086e722f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.220.46.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:7b:77:d0:f7:a0:ed:03:d3:ad:95:f8:1e:9d:8b:a9:c5:08:
4f:83:91:3d:a0:85:19:a5:4d:cb:96:6f:d3:69:91:03:4a:5a:
e1:f0:98:7b:eb:89:ad:80:1c:bf:b6:a9:9d:fd:78:b1:27:88:
ff:66:4f:1b:0b:f6:9a:be:0c:23:8c:7a:01:27:e9:8a:5c:f8:
f7:dc:ae:c2:30:7c:6f:18:52:f1:fd:23:fb:32:08:dd:8c:c6:
6c:bb:cc:16:4c:55:ba:82:ba:b0:ea:38:fe:17:4f:9b:a9:f1:
f4:c7:51:a0:5e:5d:83:43:cb:6b:be:0c:38:d3:6b:8b:15:71:
2e:10:42:23:c0:ff:91:56:81:4c:15:06:68:86:e0:62:3d:eb:
96:22:aa:04:15:14:fa:d4:c5:8e:c5:27:a0:20:b4:f6:5b:32:
45:45:e8:30:f0:99:99:4e:3a:54:64:96:23:51:25:14:e6:23:
86:49:32:a5:a5:a6:b8:24:18:93:b2:ff:35:d3:6b:6c:27:df:
0f:80:1a:2f:20:6c:4c:3e:67:e1:bc:58:f7:58:ef:8c:5d:31:
a9:f6:45:c1:f3:cb:2d:78:be:f7:27:ef:47:73:57:cf:f7:2c:
14:7d:17:06:3b:62:ec:21:2d:93:cf:77:79:8f:b2:cc:70:67:
bf:e4:b8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:40:20 2026 by rpki-client