
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af8bc632-3b7b-4650-865a-d8a662527cbc.roa
File: af8bc632-3b7b-4650-865a-d8a662527cbc.roa (raw, json)
Hash identifier: s6ty8ItyUzcu0hBnPwctGryRvuPqRQyn7Mc4rD5uWQ4=
Subject key identifier: B9:C2:86:1A:EA:A0:7A:CB:2A:0B:EB:65:25:D6:4A:B8:50:F5:5C:F7
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5EF4384A29721C1E17BC889698731ACBA4155E93
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af8bc632-3b7b-4650-865a-d8a662527cbc.roa
Signing time: Tue 19 May 2026 01:40:04 +0000
ROA not before: Tue 19 May 2026 01:40:04 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.82.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f4:38:4a:29:72:1c:1e:17:bc:88:96:98:73:1a:cb:a4:15:5e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 19 01:40:04 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=a9c0e32da8285ce63fb12bc04ad089f146625aa99c85a69e6f24ce811db18658, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:95:f9:72:5f:3d:c2:2d:15:f5:a8:69:e6:
ed:42:90:fc:8a:8b:07:f9:55:37:39:a3:1c:7c:cd:
df:bd:cd:62:36:b8:7a:c4:15:9e:0c:df:46:72:00:
83:a9:d0:ee:63:54:a3:ec:2b:25:ab:30:88:ff:7c:
08:06:30:1d:31:ff:d0:1d:9a:e9:69:04:6c:47:7d:
e4:eb:f2:ae:7c:af:65:90:ba:1b:79:5e:a2:a5:02:
15:ae:89:74:c7:a4:74:44:94:26:91:86:0a:ac:ad:
c3:22:02:5f:0f:bf:a2:c2:5c:ed:bb:09:8b:9a:26:
84:07:a8:aa:ee:20:e9:40:9a:d3:0e:6e:77:bc:7b:
e5:0a:eb:82:d5:17:be:01:c9:29:76:0e:91:18:53:
83:14:6d:67:00:bf:b7:37:df:91:d5:1d:f3:69:86:
96:ec:72:5e:c8:b6:ec:85:9c:2f:16:38:d8:eb:ea:
45:92:8e:46:0b:22:59:e9:2f:a6:3e:f4:30:29:51:
1d:92:e6:27:b6:a1:92:ff:89:17:c7:83:ce:51:9c:
ff:5d:8d:73:69:9b:a3:22:e6:06:5b:6f:ea:34:b2:
32:21:65:ea:e5:7b:a0:41:28:f8:62:49:fd:04:29:
e6:48:8d:7f:e9:3d:0b:d7:27:6f:6d:2b:61:36:c0:
78:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C2:86:1A:EA:A0:7A:CB:2A:0B:EB:65:25:D6:4A:B8:50:F5:5C:F7
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/af8bc632-3b7b-4650-865a-d8a662527cbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.82.160.0/19
Signature Algorithm: sha256WithRSAEncryption
aa:44:2b:42:ad:ab:00:cf:2e:fa:d5:75:12:ca:fb:1a:aa:1a:
5e:36:eb:d4:87:cc:9e:80:b6:5f:d7:60:21:96:60:0f:b7:01:
42:7f:93:cb:56:e0:20:9a:ba:8e:4d:d0:6d:20:34:96:53:af:
ac:38:ff:16:9a:26:ab:ee:19:22:fe:84:6f:11:b1:16:98:be:
26:84:82:96:3c:bf:ab:44:3a:c7:ce:9e:2c:8c:95:ba:ba:aa:
3e:ce:79:71:36:85:1f:af:0b:21:6b:67:43:92:c5:1e:ff:44:
f2:ef:2a:bd:0d:93:1d:2d:e2:29:fe:5a:6e:d9:fe:de:56:e7:
0f:51:90:17:83:3d:d7:db:df:9a:3d:5d:01:12:1c:85:f8:13:
30:23:92:8a:bb:dc:97:56:94:d7:d4:c6:f4:19:9d:38:b2:34:
9e:09:0d:fb:82:d1:09:17:08:15:55:e1:f5:9f:92:d9:c9:2f:
39:ad:f4:c0:35:12:a1:89:7d:db:3b:f6:52:5e:95:46:20:51:
30:c4:d3:44:81:db:11:58:20:34:be:84:1d:cc:c0:64:a6:96:
43:64:eb:6a:d3:93:eb:6c:3b:51:6c:45:89:73:d7:34:35:d3:
51:76:10:a1:7b:32:20:12:21:1c:26:7b:4f:53:e4:ef:de:97:
15:69:70:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 14:19:04 2026 by rpki-client