
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74411abd-a5ba-4c0c-afe5-8bfacfdfe92b.roa
File: 74411abd-a5ba-4c0c-afe5-8bfacfdfe92b.roa (raw, json)
Hash identifier: 9Mkc4f0hO1HZ7M5V9jxuMLUzzLKC1TChY+8/iUygXiQ=
Subject key identifier: 58:21:3D:CC:3B:28:43:E1:B5:AC:7A:A4:73:36:A1:5B:2F:03:13:15
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: CA976CB548BBEBE3DEA8D2AC5E1764BC830C74
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74411abd-a5ba-4c0c-afe5-8bfacfdfe92b.roa
Signing time: Sun 17 May 2026 01:30:11 +0000
ROA not before: Sun 17 May 2026 01:30:11 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.95.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 31 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ca:97:6c:b5:48:bb:eb:e3:de:a8:d2:ac:5e:17:64:bc:83:0c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 17 01:30:11 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=2c33d90a6dcab87806d1daec769e53d8809d44cba0dc5bfa217a08fba586b53c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:b2:e3:05:e2:a7:74:15:43:d1:a7:df:82:
c0:b0:86:98:3f:5e:69:08:f5:4d:f1:6a:31:e0:01:
90:06:d1:e0:7b:78:b7:0a:fb:eb:6d:a3:39:c5:28:
6d:ca:21:6a:1f:8d:8d:89:40:ed:dc:25:fc:ee:5c:
27:51:08:47:bc:c7:71:47:f3:88:53:25:3b:03:27:
a2:b5:6f:db:52:a0:f7:9d:fa:b0:8f:e0:5f:c9:75:
d7:3b:8e:9f:7e:5f:66:e7:89:99:d5:35:ab:57:49:
bd:39:bb:7f:dc:92:c8:d2:34:10:78:56:4d:82:12:
9f:75:69:c8:53:d2:25:96:91:27:27:a5:4d:82:7b:
f4:a9:f3:49:d7:92:f5:c2:e6:b6:68:80:b8:02:01:
99:e9:6b:14:c6:1e:81:f1:d8:fb:85:3b:c9:24:e3:
1d:7e:22:24:9b:f4:77:96:ed:27:7d:77:8c:db:a1:
12:81:21:c8:8d:74:23:f6:7f:59:89:f0:10:2f:7c:
d2:80:aa:85:ec:e9:2e:0b:1a:94:73:bf:e7:88:05:
17:6f:ba:b9:23:dc:ca:d1:40:7a:a6:8e:8e:84:98:
91:17:97:ce:53:e3:fd:f7:99:93:c6:0b:22:16:27:
ce:eb:db:70:7c:e4:ba:a0:5f:a6:5b:79:56:15:62:
22:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:21:3D:CC:3B:28:43:E1:B5:AC:7A:A4:73:36:A1:5B:2F:03:13:15
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/74411abd-a5ba-4c0c-afe5-8bfacfdfe92b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.95.192.0/20
Signature Algorithm: sha256WithRSAEncryption
6b:6c:e2:92:31:1a:6b:76:7e:eb:ce:eb:1c:79:8f:f5:0c:51:
d4:78:c5:b1:d2:dd:75:06:46:bc:41:f8:c7:d7:67:09:93:45:
7c:4c:de:bc:1e:e7:6d:3b:2b:ac:99:6f:51:55:ff:23:8b:25:
9d:42:c8:f5:99:25:fc:53:a8:30:af:cc:e5:28:74:af:99:0e:
bd:20:27:ad:2c:44:54:46:42:ca:81:9e:37:b3:f9:0e:6a:5d:
69:16:2b:83:4b:59:a7:d3:97:b3:03:d9:ff:f6:e1:51:5e:d4:
0e:c5:a0:fe:37:93:0c:f9:7d:47:c0:63:23:31:83:60:e5:99:
54:d4:28:40:3e:e8:07:2d:c5:3e:41:84:54:a8:c7:3f:32:da:
4b:69:f3:5f:8f:9f:ed:a9:ba:6b:14:d3:2e:27:dc:41:e2:36:
af:92:98:2a:ec:30:6a:26:5a:d0:d7:c8:5c:84:85:4d:45:20:
53:2c:dc:02:3a:97:64:b4:d1:ea:46:1a:a4:17:77:ac:c3:17:
f0:c8:a2:a5:b4:12:64:d7:30:7c:c7:8f:70:a4:3a:4a:ce:bd:
88:b8:0d:a3:4e:c5:46:be:5f:8e:69:4d:7f:11:4c:e2:27:ab:
59:95:31:dd:06:48:93:65:dd:05:b8:85:ea:50:10:7b:da:fa:
57:22:2d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:58:32 2026 by rpki-client