
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7075b284-d0d8-4bff-87f8-41ba3b788b3d.roa
File: 7075b284-d0d8-4bff-87f8-41ba3b788b3d.roa (raw, json)
Hash identifier: Dv/ORT8fg0bS/TVlQRwwU+dbW+WJrq0oNJKLOIP0/vM=
Subject key identifier: A0:4B:5E:9C:8F:C8:6A:73:EF:55:49:C5:4C:EB:15:EE:DD:78:87:B8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 240311D1FA867CDDB63634315FDF822074B2F8AB
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7075b284-d0d8-4bff-87f8-41ba3b788b3d.roa
Signing time: Thu 15 Oct 2026 02:50:10 +0000
ROA not before: Thu 15 Oct 2026 02:50:10 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 13.228.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:03:11:d1:fa:86:7c:dd:b6:36:34:31:5f:df:82:20:74:b2:f8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 15 02:50:10 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=58670485e7a190f895a6dc9eecc041b3381728a73700086661ba0aeb6add2ba2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8d:49:86:97:cb:f5:de:fa:33:33:a5:ce:ff:
5a:a2:12:ac:06:54:26:b4:4e:cf:5c:85:5a:c2:71:
2b:ad:f3:d3:0f:21:e7:82:2c:9a:ac:45:42:89:2c:
ff:f8:0a:d9:46:4e:ae:f9:9d:ed:04:1a:cb:78:cc:
00:46:8d:c5:35:10:f0:62:6a:1f:d9:38:c8:f8:55:
a0:78:fc:db:cb:04:e6:7f:56:ad:47:70:38:75:ae:
a2:7b:ff:e6:a9:63:9d:a6:d7:36:5a:30:28:12:8b:
9f:6d:c5:70:ac:9f:e6:0d:d5:73:d0:4c:a5:8f:5a:
2f:fd:8e:ad:eb:ee:08:3b:65:b0:e0:fe:64:55:dc:
d0:3c:6d:73:98:62:47:9c:0d:51:05:3c:64:32:84:
4a:b0:55:21:06:7a:a4:05:11:01:12:6c:b8:c8:ab:
72:04:ee:a8:aa:fb:02:12:b9:e2:a9:df:4a:02:66:
33:41:a7:bb:76:64:71:b1:9f:b7:22:88:e8:db:81:
73:61:6e:4e:27:cc:ce:c1:12:80:ef:77:ca:d9:d4:
bf:57:73:54:90:af:a0:09:c3:d6:0b:32:42:84:19:
74:e3:5f:da:9e:91:a9:26:36:74:36:a5:f0:56:96:
45:ec:c7:d5:02:e9:af:79:4a:f7:f0:97:42:01:cd:
14:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4B:5E:9C:8F:C8:6A:73:EF:55:49:C5:4C:EB:15:EE:DD:78:87:B8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7075b284-d0d8-4bff-87f8-41ba3b788b3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.228.0.0/14
Signature Algorithm: sha256WithRSAEncryption
7d:d8:77:13:8a:bf:3d:b1:63:26:f1:ee:e8:a1:51:f7:db:34:
9c:d5:a2:6a:16:6e:04:ab:7e:c2:9a:fc:d5:a3:55:ab:63:81:
f4:3e:66:08:19:eb:46:c7:8c:0a:18:32:45:9e:f4:7e:75:a6:
cd:35:13:4e:65:95:f0:d9:c2:3a:22:52:06:d9:47:74:19:69:
8d:ec:ff:26:67:80:d4:cb:d7:4c:76:a4:a8:f4:19:33:02:76:
6a:f9:7a:b5:c1:80:51:b3:e0:a1:37:b4:83:d0:d3:31:85:8f:
cb:2e:12:35:0f:a4:67:3f:1d:d2:a3:3e:47:2e:5f:b0:fa:68:
91:0a:bd:ae:9c:12:9d:a8:6c:c4:0c:d9:a6:37:c4:dc:30:da:
46:5b:55:e8:e1:18:d9:19:89:69:dc:74:a0:e9:e6:3c:da:45:
48:d7:65:50:53:dd:dd:0e:2f:44:45:51:90:a0:45:83:e3:f7:
b7:6c:0a:91:de:ca:d6:bf:1b:59:ef:a8:ae:84:f4:64:d4:63:
c7:6a:8d:be:31:5d:26:90:98:8d:ef:5b:64:dc:48:84:e8:3d:
65:21:41:2d:0d:1c:da:c1:54:74:22:d5:d4:ab:5f:80:b8:99:
99:d1:b1:41:b0:7c:2f:1f:6d:06:86:ff:72:47:38:dd:11:c8:
f8:4d:fb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:30:16 2026 by rpki-client