
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c66ad12a-8a4e-4e13-aad1-a2dcb1cd5bd4.roa
File: c66ad12a-8a4e-4e13-aad1-a2dcb1cd5bd4.roa (raw, json)
Hash identifier: oYiKxny9G7iayjHLDIkikJuqW1+XfvLaFTq5TBR04xY=
Subject key identifier: AA:DD:51:75:C8:55:DE:F5:C7:1F:62:29:EB:2E:95:89:4C:E2:46:6C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4AA31D09E8D079942E72CF34EB1B56BC9F87F3F5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c66ad12a-8a4e-4e13-aad1-a2dcb1cd5bd4.roa
Signing time: Sun 17 May 2026 01:10:06 +0000
ROA not before: Sun 17 May 2026 01:10:06 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.73.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:a3:1d:09:e8:d0:79:94:2e:72:cf:34:eb:1b:56:bc:9f:87:f3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 17 01:10:06 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=db84bc0682e17e06116c55ad861105da2ec933b687250613eee3b7d4e37811fa, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:28:82:61:cd:2e:27:bd:b1:dc:69:1e:b7:f3:
69:88:6d:53:e8:e7:70:5a:b2:3e:ac:dd:91:ab:c5:
ef:d1:60:82:5b:1d:6b:da:d4:fa:cf:7c:5e:fe:a7:
d9:30:10:eb:d0:79:7f:7c:62:95:26:49:d2:26:5c:
01:94:11:96:b5:f8:13:6b:2d:2c:58:51:42:ea:d5:
ad:50:39:82:50:03:28:cc:be:cd:8e:aa:d0:e7:f2:
9f:c9:1a:cf:0b:c7:f6:e0:c5:34:40:90:9a:8f:cc:
a8:f7:d1:1b:c9:0d:cb:f7:54:46:4d:71:5b:fc:1f:
53:9c:71:51:06:d7:4f:6a:21:20:ff:aa:6c:91:8b:
2a:da:23:54:38:d7:c1:69:d8:01:99:25:a2:7c:85:
a8:e7:93:1d:c5:7f:03:73:5f:37:1f:c8:d3:4c:dc:
9e:19:60:67:59:4c:e5:00:41:7b:d1:79:ee:ed:35:
a5:58:f4:54:1a:49:02:ed:70:c1:24:14:72:dc:94:
b2:d3:fe:f0:42:f1:d6:51:b7:ab:3e:bd:63:1c:16:
a3:cd:1b:06:71:22:ea:52:20:4f:79:f6:b6:54:93:
dc:8f:a7:06:4b:1a:82:bd:68:19:23:13:a6:87:96:
a0:0f:ba:ba:7a:70:6c:27:d6:d9:8e:92:69:32:63:
2b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DD:51:75:C8:55:DE:F5:C7:1F:62:29:EB:2E:95:89:4C:E2:46:6C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c66ad12a-8a4e-4e13-aad1-a2dcb1cd5bd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:a7:ce:21:a7:c9:43:43:bc:16:e8:86:6b:a9:e4:7e:1b:3b:
86:c5:2f:65:bf:34:3b:b0:eb:e9:58:d0:ed:f8:d3:3b:3d:c4:
7f:ce:98:e6:f3:c8:a5:ca:f7:63:78:8c:58:eb:61:d7:e1:2d:
dd:eb:bc:12:da:a3:22:be:b5:19:ef:46:3a:c4:3a:44:96:cb:
df:4c:e1:3c:0f:69:a0:9f:17:30:2b:14:c9:8a:b3:c7:b9:2d:
72:1d:59:8a:e2:90:71:30:b3:45:ea:a6:49:c1:c7:8e:6f:5a:
00:86:9d:42:49:01:fd:a6:39:4e:48:86:41:9c:51:ff:32:ce:
83:4a:3b:8e:c9:75:c4:b0:75:43:5f:44:48:de:9c:aa:1e:fa:
57:4d:ef:72:90:19:b1:b2:11:fc:b9:a6:c1:25:62:f3:98:7e:
62:c3:ba:b1:d9:d7:52:c7:85:9f:30:5f:8b:23:dc:ad:1d:7a:
bc:a0:79:fa:94:dc:f7:fe:23:f0:ba:05:c4:e4:c5:b0:2f:1b:
78:ba:a9:ae:51:80:f6:04:74:aa:2b:36:15:1e:a3:8f:04:67:
7a:cd:f7:90:03:fc:ca:d2:ff:be:27:9e:a2:c2:e7:5a:6f:9a:
0f:22:02:6b:de:ae:26:c3:71:25:6c:62:ce:51:b0:cc:66:f6:
f7:c2:36:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:45:52 2026 by rpki-client