
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d1e311e-3e04-4624-a0ff-a5567f3e3c9e.roa
File: 6d1e311e-3e04-4624-a0ff-a5567f3e3c9e.roa (raw, json)
Hash identifier: OnAgFHflujb+CnY02tz4gh3a25tyk2tuXaDBE03AOUg=
Subject key identifier: 3E:5A:AC:D4:6D:AC:87:55:3E:9B:51:C2:E2:0C:B6:25:DC:5C:A5:53
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1415132AAAA42177344C145DB6A825A2CDFD797A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d1e311e-3e04-4624-a0ff-a5567f3e3c9e.roa
Signing time: Thu 14 May 2026 01:30:47 +0000
ROA not before: Thu 14 May 2026 01:30:47 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.124.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:15:13:2a:aa:a4:21:77:34:4c:14:5d:b6:a8:25:a2:cd:fd:79:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 14 01:30:47 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=d262c4d821134a36fc50d97c1afe598b255f41d60aeed9e1845f3c4416377d79, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:81:21:70:74:49:f7:70:ee:e1:ee:32:88:
e1:5f:29:c0:62:86:0a:58:bc:03:19:82:4c:4d:8a:
22:d2:8d:b2:93:db:bb:ed:40:13:b1:30:9f:25:f4:
c7:c2:1d:f7:b5:88:40:dd:0a:f2:42:dd:18:df:ff:
56:89:c2:1d:f2:05:58:a8:2e:71:df:a0:0a:10:11:
41:9d:3e:a3:87:e3:af:71:67:86:e2:43:65:44:78:
6e:21:3a:e7:96:24:62:1e:b3:6e:da:bf:81:c5:74:
67:79:1b:f1:ff:a6:e6:10:c5:7d:32:76:3c:58:65:
e2:eb:cc:65:f6:60:52:5f:95:6c:e3:fe:87:a0:26:
ad:12:d6:46:ae:92:d9:ec:2f:fb:b1:a0:63:46:6a:
3c:c0:31:98:27:7d:75:c1:7d:53:ef:b8:5c:70:12:
07:e8:14:a1:87:65:30:de:ff:bf:55:70:91:96:42:
0c:c8:e2:8f:f4:91:8c:e2:cc:53:bd:62:22:59:9a:
e5:80:dd:de:47:97:ca:88:50:99:90:26:aa:69:a0:
51:71:df:e8:fc:05:e1:c9:8d:b5:2e:94:ed:9d:23:
3d:32:89:20:7c:1b:82:58:39:21:e6:df:92:7c:fc:
db:95:ca:e3:f5:a4:6a:a2:c5:77:6b:bc:2a:36:73:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5A:AC:D4:6D:AC:87:55:3E:9B:51:C2:E2:0C:B6:25:DC:5C:A5:53
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6d1e311e-3e04-4624-a0ff-a5567f3e3c9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.124.208.0/24
Signature Algorithm: sha256WithRSAEncryption
75:4b:61:2e:fd:a1:b5:04:ee:a4:d4:db:67:de:eb:90:8b:66:
98:fc:b7:2e:5c:fc:2d:90:9c:d6:fc:7f:43:d0:1b:8e:e9:3d:
77:2d:9a:eb:d2:0d:54:04:1e:a9:eb:7f:79:ce:5d:45:75:66:
c6:01:41:a4:b2:f5:ce:dd:0c:76:9a:8b:6f:39:8a:be:53:9b:
aa:d3:57:1c:09:80:32:c5:65:dd:2b:15:fd:55:c3:7a:d3:65:
a8:b1:03:2f:84:f5:70:59:41:b3:a5:b4:05:57:33:d1:d2:4d:
74:a7:b1:23:b3:cd:8e:38:24:ab:e6:36:4c:d5:2f:e1:d4:12:
54:54:21:ec:40:2e:20:35:d5:c7:36:27:81:07:41:29:41:c2:
be:6c:c1:94:37:89:5a:0c:38:43:59:48:b2:31:29:82:b0:95:
27:f5:a9:41:54:6d:4f:db:9f:fe:bc:b4:17:54:e1:27:34:be:
6e:aa:26:2b:21:ab:d7:8a:f9:8d:60:3a:8a:f3:b2:7f:15:c1:
39:55:3b:a7:84:6c:85:84:4a:1e:58:5d:10:c2:bf:47:1a:bd:
ca:d1:be:cd:2b:02:ac:d2:bd:fa:8a:d8:4e:3f:a5:fb:3d:4a:
52:dc:99:79:16:45:2b:fb:1a:ae:4c:7d:60:d6:42:a3:dc:27:
78:e2:10:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:49:19 2026 by rpki-client