
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bc0fce6-76b6-4406-8004-57a59bfe28ca.roa
File: 5bc0fce6-76b6-4406-8004-57a59bfe28ca.roa (raw, json)
Hash identifier: oTxCXknVhqaF0cr5OMTuvF1LGo7O9liyKJcQuU7N/Kw=
Subject key identifier: AA:E9:19:A6:5D:78:49:EB:8A:9B:2C:25:84:C9:E4:1C:82:C7:B5:44
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 39D7AA4F324879A31DE1B40183EEC282355AFC17
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bc0fce6-76b6-4406-8004-57a59bfe28ca.roa
Signing time: Sun 02 Aug 2026 00:10:53 +0000
ROA not before: Sun 02 Aug 2026 00:10:53 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.207.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:d7:aa:4f:32:48:79:a3:1d:e1:b4:01:83:ee:c2:82:35:5a:fc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 2 00:10:53 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=f1abe9fdc3655646cda822caea2b31b83cf9e04ea10bc58b66bb3688495e47c8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:49:d0:1d:3c:53:ff:5e:31:35:ec:55:b7:
de:57:2e:af:71:09:ba:71:35:52:60:80:94:3c:0a:
a7:e0:05:12:ec:62:46:28:69:10:21:63:51:ac:dd:
e0:d7:fe:8b:4f:11:64:dd:91:5b:f0:58:f4:12:ab:
5c:15:72:eb:72:54:01:8c:36:26:15:43:6f:fc:2b:
79:99:44:75:94:e8:f8:76:3d:42:10:b2:7d:76:56:
c4:73:e3:50:4c:6c:a2:5f:00:8d:7c:35:ef:35:12:
80:e2:cd:93:20:ed:83:ad:ed:23:87:e4:5f:4c:dc:
ea:64:c7:c9:3b:7d:f5:fc:8b:1e:bb:42:b9:52:4a:
bf:8e:14:f4:f6:d5:dc:3f:9d:d0:ef:45:49:37:71:
72:02:b1:94:dc:ff:c0:b8:43:f8:36:07:16:ff:26:
c1:4f:f9:26:98:a5:25:75:e2:4d:ef:e1:30:0d:5c:
69:cb:15:f2:bd:ea:8e:97:d2:57:b7:bb:a7:ed:08:
57:7c:2d:91:1a:75:61:4e:e2:f4:de:2d:fb:9d:a2:
e3:89:0f:0b:df:4a:21:5e:46:9e:8c:fb:8b:e3:b6:
b2:71:a6:8c:c0:e0:9e:b7:5c:ab:6f:a2:ec:91:3e:
98:2d:12:53:d0:16:bc:22:82:26:99:4b:ef:34:2c:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E9:19:A6:5D:78:49:EB:8A:9B:2C:25:84:C9:E4:1C:82:C7:B5:44
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5bc0fce6-76b6-4406-8004-57a59bfe28ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.207.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1d:1d:77:ad:d0:b7:ff:23:22:be:8e:74:f1:c5:23:4c:2d:bb:
ba:98:b4:de:b5:02:57:6d:48:94:e7:24:28:70:60:a9:d0:22:
a2:e1:55:c5:5e:c0:e1:41:f7:2f:60:fa:21:3d:47:60:60:06:
b1:1c:95:b8:5a:c6:8f:47:11:76:91:56:0c:6d:bf:e7:72:fa:
58:e8:53:a1:85:8a:5d:3d:9b:cd:67:93:6a:43:98:2a:a3:57:
bc:94:79:0d:0f:e5:bf:ff:41:eb:89:52:9c:bd:43:07:e8:83:
fa:df:7a:f4:b2:40:c2:19:f2:52:b6:7f:dd:e7:15:81:c5:84:
89:fb:ab:ec:67:88:6e:10:ad:98:18:f5:b5:8c:b4:4a:5b:be:
f1:ac:68:c3:43:68:3a:50:3e:ad:ef:f7:e4:a1:7b:ad:97:d4:
e0:35:47:13:31:af:62:66:50:72:a2:96:ce:f2:80:d6:ca:c5:
45:8b:1d:af:41:e5:b2:32:de:6f:32:2e:9f:10:43:1e:0c:0f:
f8:ee:4d:47:5b:4a:c9:8b:03:b9:ec:06:9c:83:bd:92:12:5e:
0a:74:dd:b3:c8:46:c2:de:86:ad:6f:72:0e:0a:3c:57:17:62:
e6:86:4f:7d:54:91:b0:1e:9c:36:24:e6:96:88:e1:5a:3e:7c:
8a:2d:cd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 10:27:27 2026 by rpki-client