
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96b94a2f-5207-44a5-ae1a-d2d4f1785012.roa
File: 96b94a2f-5207-44a5-ae1a-d2d4f1785012.roa (raw, json)
Hash identifier: 98M0Two/ELQNlQTur5RIVMfPFr6OEvGQbMXHWGsvT14=
Subject key identifier: 0D:7C:BD:22:FA:64:5C:72:40:40:6F:8A:C0:F4:05:71:AA:4A:13:93
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6EAB4893DFB5174F61D70BB598A0F39DB954DB1C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96b94a2f-5207-44a5-ae1a-d2d4f1785012.roa
Signing time: Sun 02 Aug 2026 00:20:46 +0000
ROA not before: Sun 02 Aug 2026 00:20:46 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.124.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ab:48:93:df:b5:17:4f:61:d7:0b:b5:98:a0:f3:9d:b9:54:db:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 2 00:20:46 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=8dc807cf77c28487209ee918eb500afeaaba4c1691885b13d6936726d7378756, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:01:2f:58:df:43:8b:a9:92:30:a5:b9:57:
bc:92:a1:4d:e6:d6:ac:0d:71:1c:db:76:98:c1:5a:
a7:14:20:86:03:02:78:f0:f5:c5:e3:42:86:d8:0f:
1d:16:58:a6:47:0d:15:50:b2:ad:38:a5:a6:6c:43:
fd:6a:2d:60:6b:a1:82:69:47:b4:d6:fe:20:ec:dc:
ab:0a:31:0a:23:20:2e:7b:55:34:fa:5e:3c:7a:25:
fb:a6:e4:b9:95:68:b4:c9:25:6b:ec:85:a2:52:8d:
9e:c5:7e:e8:7d:9b:e2:ab:0d:e5:4d:bb:89:7e:e2:
95:fc:54:7d:fe:ab:5c:43:77:55:b4:45:04:c4:48:
2e:bc:c0:b4:f0:25:da:8e:3c:e9:3d:f7:ef:3b:87:
04:3d:64:b9:a8:67:15:8f:59:1a:fc:6a:bd:07:24:
d2:04:39:33:57:fd:fb:dc:a8:77:ef:5f:d2:54:43:
40:b7:74:b2:c5:74:5b:af:1c:12:9c:12:b6:64:55:
b2:9b:ea:cd:7b:7d:39:b9:2d:7a:bc:c0:d8:f6:14:
16:0e:10:87:66:b4:84:db:8e:b7:3a:1d:c7:b1:24:
60:c1:1c:45:3a:c7:0f:31:61:19:88:8c:68:46:4d:
40:36:8c:be:b8:76:5a:f0:54:78:78:aa:f2:e3:fa:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7C:BD:22:FA:64:5C:72:40:40:6F:8A:C0:F4:05:71:AA:4A:13:93
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/96b94a2f-5207-44a5-ae1a-d2d4f1785012.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.124.221.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c4:8c:3e:50:5b:22:16:a4:12:79:c7:ee:2c:92:15:b3:47:
64:2e:9b:fa:60:81:76:ec:c4:85:79:42:f6:39:35:d4:5c:cb:
6b:21:7c:2a:f9:0d:12:b9:1c:7c:ae:b9:6e:41:df:b4:d7:e2:
e3:0c:9f:4b:37:04:98:f3:25:d5:69:e6:bd:bc:60:1a:b3:85:
fd:5e:b6:95:8f:5c:11:d8:d6:50:ed:b4:79:fe:1b:e3:70:d2:
bd:91:0b:19:97:ad:47:bc:28:7b:7c:b3:6e:df:c2:6e:80:2f:
08:a0:20:b0:2d:4d:cc:ce:51:e3:49:cd:9c:8b:69:d8:b2:af:
ed:c4:87:07:42:cd:7f:ab:73:5f:f1:1b:27:07:9a:ef:c9:05:
8e:f0:1b:66:0b:88:d8:a1:55:6c:fb:d3:c0:76:1f:86:7d:97:
c2:fd:da:59:3c:e3:18:d3:a1:82:ae:5e:d0:a9:8b:17:7b:25:
47:09:60:8e:6b:24:68:ed:52:0b:21:42:db:b5:f4:9c:76:71:
b5:37:67:f2:72:c4:ad:b9:b3:b2:e8:62:3f:2a:81:b8:d3:09:
83:4b:73:6a:81:20:98:d7:fe:4d:dd:a7:c5:60:f5:b1:6e:f9:
fd:75:c3:8b:84:9c:5c:90:44:f9:f8:a3:33:92:97:9f:ba:d7:
2f:9e:55:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:01:14 2026 by rpki-client