
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa153fff-71e5-4fd6-b687-b19e92b99d68.roa
File: aa153fff-71e5-4fd6-b687-b19e92b99d68.roa (raw, json)
Hash identifier: 1WybLCjObxxNJWL6ncyRlVaLxeTMg1w5sjsLigovWRc=
Subject key identifier: 72:61:53:DE:45:31:F5:F9:78:48:4A:0D:8A:3F:82:6D:49:1B:EE:BB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7B26983275DE27A8914A6739F0071DC82C1CB752
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa153fff-71e5-4fd6-b687-b19e92b99d68.roa
Signing time: Thu 14 May 2026 00:10:37 +0000
ROA not before: Thu 14 May 2026 00:10:37 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.68.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:26:98:32:75:de:27:a8:91:4a:67:39:f0:07:1d:c8:2c:1c:b7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 14 00:10:37 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=fd68417cac20c1af71a4a505870fae3d1dbf7e73ef9764cd69f0df7fd282b0c2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:f6:be:4c:80:80:c2:b2:18:03:fe:99:11:
21:06:0a:b7:06:1c:7e:ba:9a:aa:ad:f4:7d:52:45:
4e:56:8e:1b:55:06:6b:03:bd:6d:31:ca:0f:fc:fd:
41:16:fe:01:23:07:67:d4:d8:87:ee:a0:16:5a:0a:
10:cd:55:54:cc:7e:2c:a0:6f:c7:3e:d4:37:18:51:
00:bb:71:2e:15:36:33:3d:12:0d:23:f1:ff:f9:9e:
62:a2:53:fc:34:bb:03:52:34:83:e3:26:57:46:ae:
9f:5e:27:ac:8c:39:2c:06:a0:d2:3a:9e:c3:89:69:
3f:4f:3a:86:a9:da:48:df:eb:84:c7:5a:e0:89:a0:
b6:30:5f:29:ee:33:30:9e:be:41:3c:60:4d:59:60:
95:42:bc:1b:17:8c:0d:c5:96:ad:9d:23:f7:26:dd:
41:4a:3b:59:17:cd:b0:a1:7d:41:01:36:db:af:79:
45:0c:58:47:38:b4:76:d1:b9:3a:d6:f5:98:8d:38:
1b:ed:5c:8d:7f:d1:8a:15:d2:10:6e:4f:9a:77:fe:
91:88:20:ee:e1:6b:f5:60:9b:f9:a2:f0:06:e6:e2:
42:59:70:7c:f7:68:c0:53:57:ff:3e:56:12:51:ef:
4f:5c:c5:fd:59:0c:ad:a4:0f:25:e2:65:be:b5:c5:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:61:53:DE:45:31:F5:F9:78:48:4A:0D:8A:3F:82:6D:49:1B:EE:BB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/aa153fff-71e5-4fd6-b687-b19e92b99d68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.68.189.0/24
Signature Algorithm: sha256WithRSAEncryption
02:73:8a:89:bb:21:87:7f:95:5d:e6:b2:d9:c1:28:ba:e1:ae:
ea:43:fb:64:47:5b:7e:9f:10:4b:c1:a4:52:5f:f0:fe:1f:b5:
9c:a7:40:8b:2f:f3:a2:11:8b:84:65:e6:38:6d:58:a8:37:98:
de:f3:90:ee:43:96:0c:5e:a1:9d:28:7c:7c:c0:cb:78:45:ed:
f6:23:62:b7:84:af:37:05:6e:77:e4:ec:57:52:cf:67:94:4e:
2e:3b:1b:ee:7b:b8:f7:6a:a4:77:9a:14:0d:b8:a5:bd:81:92:
b7:07:4f:7e:b2:39:2a:d8:52:3e:16:9e:fd:4d:7a:1a:db:3f:
ba:f8:5a:d8:86:f0:df:dd:ac:7d:54:5a:de:f6:a6:98:07:ff:
2d:48:cc:f6:e8:fc:61:1b:c2:c1:44:34:00:f6:d7:44:fb:2f:
ec:87:d6:4f:2a:3e:58:6b:10:99:61:76:c3:29:da:46:28:89:
ca:28:3e:31:b9:2f:e1:ce:9c:89:71:d1:50:86:71:5b:c2:0e:
3d:69:01:7f:7f:25:cf:b6:b3:4e:8f:b9:df:88:4c:87:40:9e:
0e:bf:f8:a2:bb:b5:a6:75:55:b2:79:1d:22:7c:b8:72:3d:ff:
7d:7a:e0:85:af:2d:c7:85:63:3c:67:ed:38:ed:fa:95:f8:2c:
d4:70:1c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:48:32 2026 by rpki-client