
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/73bd2429-fb51-4530-b2b7-ade2f591bb81.roa
File: 73bd2429-fb51-4530-b2b7-ade2f591bb81.roa (raw, json)
Hash identifier: qe3/EBG8EDXoAbssJfAQq3qPr0lf81H07hZM5wdv6QQ=
Subject key identifier: C9:E8:B6:12:85:35:C1:3A:76:93:74:EF:D2:7F:A6:06:0F:04:2B:72
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 354B21640C3B16D5BF5DAFC43E6A65162ED31424
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/73bd2429-fb51-4530-b2b7-ade2f591bb81.roa
Signing time: Mon 23 Feb 2026 01:41:05 +0000
ROA not before: Mon 23 Feb 2026 01:41:05 +0000
ROA not after: Sun 24 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.204.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4b:21:64:0c:3b:16:d5:bf:5d:af:c4:3e:6a:65:16:2e:d3:14:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 23 01:41:05 2026 GMT
Not After : May 24 23:59:59 2026 GMT
Subject: serialNumber=84a39a1cb070f48a2d7b24fd0a5bbcfe7569774b45560c8819606a9c9b40e3a2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:8b:12:40:45:05:95:47:51:42:8e:3d:bc:
4f:28:38:e3:ce:b4:21:49:b6:10:3e:c2:56:d3:20:
e6:32:e8:4b:a3:33:2a:c4:66:79:dd:e4:8c:07:fd:
d6:29:3c:44:9c:83:02:c8:76:53:36:32:99:7a:ec:
91:d1:f0:b1:d3:7d:23:a6:8a:6f:67:a6:9f:34:f6:
e4:c3:ad:bc:35:5c:66:75:12:b8:27:ef:f4:b1:d3:
d8:ed:ce:f6:44:3a:25:7a:23:d9:79:d1:09:d5:a0:
74:20:04:b1:f1:1e:a1:d9:76:fc:59:31:0e:e4:af:
28:45:27:92:e5:e8:48:eb:08:2b:0e:b5:a8:1c:55:
a5:71:4c:4c:5b:cf:94:9f:3c:7b:4b:63:22:d7:7c:
6e:85:6b:ad:1c:01:1e:89:91:f7:1e:65:7a:98:c0:
39:93:bd:88:5f:9f:61:90:27:ad:e5:21:94:f2:62:
61:59:1b:0c:3c:ce:80:ff:c8:95:6f:f1:94:4c:9b:
c5:48:ad:04:6f:0f:37:7e:2c:48:b0:61:be:b2:ae:
60:fe:61:95:3b:bf:b6:17:9b:67:40:ce:a2:3c:2a:
07:5f:80:bf:84:d3:35:da:a4:a9:4e:b2:06:70:45:
30:91:c6:3b:8c:ad:30:32:15:bf:87:c0:46:b3:6f:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E8:B6:12:85:35:C1:3A:76:93:74:EF:D2:7F:A6:06:0F:04:2B:72
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/73bd2429-fb51-4530-b2b7-ade2f591bb81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.204.0.0/15
Signature Algorithm: sha256WithRSAEncryption
6b:43:58:c7:6c:31:66:de:21:bf:4a:8e:c6:5a:43:d4:a1:bf:
38:c1:80:d4:61:8c:0e:ec:ec:fa:8f:e1:ec:ba:d0:db:54:93:
60:fd:04:78:49:f9:42:5d:f5:b7:87:03:aa:bf:30:47:ff:cb:
68:03:52:4d:33:cf:dc:1c:76:f8:9a:39:03:29:b2:0d:7c:97:
30:78:69:19:a6:9c:45:5c:b5:aa:48:07:5c:a6:d6:9e:c8:6b:
a0:d7:4e:f4:f2:d7:9e:dc:db:05:ea:a8:40:3e:08:3e:ee:0c:
f6:22:15:54:f1:b1:2c:eb:d6:f7:d1:51:8c:08:b7:c0:83:fa:
b5:a5:50:80:9d:19:2a:f2:09:c8:f8:89:05:31:58:32:22:d8:
ec:8b:d4:bd:9c:a5:c8:b0:4f:bf:94:a7:df:73:09:d2:e7:02:
2e:43:d4:b1:3e:7c:4a:98:db:03:38:9f:32:c4:8e:f4:93:af:
f0:be:1d:17:c0:73:56:dd:40:51:2d:ea:c9:2a:7f:fa:ef:ed:
e0:d9:97:2b:ee:66:d8:57:61:e7:34:14:0e:e4:bb:02:0a:6b:
af:21:eb:09:77:72:47:b0:3b:32:aa:67:a7:07:28:c1:d5:30:
fe:00:a3:a1:a5:31:9a:53:d7:bf:95:7a:93:13:92:4d:e1:9f:
3a:11:61:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 02:05:08 2026 by rpki-client