
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf8998d8-99d4-4b0b-9648-f902779332fe.roa
File: cf8998d8-99d4-4b0b-9648-f902779332fe.roa (raw, json)
Hash identifier: rgEnV+E1cQaXYjeYWoH7VYw5cL03RStOSwE26JK7wsk=
Subject key identifier: 6E:27:97:06:30:2E:85:43:BF:4B:A5:5D:14:9F:F3:F4:CC:AB:13:DD
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2F4091B3E5DA2A39C328B87F843E5062059661EF
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf8998d8-99d4-4b0b-9648-f902779332fe.roa
Signing time: Fri 07 Aug 2026 02:50:39 +0000
ROA not before: Fri 07 Aug 2026 02:50:39 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.220.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:40:91:b3:e5:da:2a:39:c3:28:b8:7f:84:3e:50:62:05:96:61:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 02:50:39 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=efd493f00ea6e888870fb02ec93dd9687bacff054f0b93caa16e7f0c8ca78f55, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:04:23:10:20:6d:9a:55:6d:0c:c6:dd:bc:
af:84:5c:45:3e:bc:71:ff:8d:ef:d6:f9:3f:e6:d4:
38:7b:0a:4a:ff:ba:3a:80:b1:41:5d:2c:8f:4b:dc:
b8:d7:b3:9e:b0:60:fb:98:5b:c4:7e:00:7f:a0:c2:
6d:90:13:32:f9:c3:38:2e:56:d7:be:6e:cf:0a:c6:
6b:91:a8:40:1c:b4:99:04:29:62:12:d1:ab:c9:db:
14:d5:63:7c:2e:eb:9f:66:c3:de:3f:d6:f9:e4:82:
97:8f:8e:be:bc:1e:24:8f:e2:df:c6:db:d7:9e:5a:
ff:88:d0:11:ce:b4:8d:ab:1b:61:e5:e5:62:68:85:
83:bd:f6:25:a1:d0:44:07:87:c2:b0:8c:16:b0:de:
6b:e0:a7:65:45:fb:0c:59:55:eb:40:39:ca:0d:b3:
4e:4f:60:1c:3a:c4:6c:5d:1c:64:55:0c:04:81:7b:
a0:b1:7d:ff:d8:d6:90:a1:b5:8b:d8:f3:93:ea:d1:
05:6c:98:51:5d:7a:c0:8a:79:32:9c:fb:c1:b0:19:
55:40:25:98:a7:83:95:94:87:c3:8b:1e:7a:a3:67:
34:4e:1c:2a:08:90:d8:05:54:93:21:91:07:b7:83:
48:2e:35:d7:13:91:b5:c3:08:c9:47:ad:3f:c2:32:
4d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:27:97:06:30:2E:85:43:BF:4B:A5:5D:14:9F:F3:F4:CC:AB:13:DD
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/cf8998d8-99d4-4b0b-9648-f902779332fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.220.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:04:3f:ea:7c:87:b7:77:1d:be:db:fc:5e:92:4f:9d:ef:4d:
b0:45:a8:03:c3:a5:f0:64:8d:29:05:0e:8c:18:57:40:6b:9a:
b9:30:68:bb:28:46:22:f8:9b:eb:6d:23:7c:eb:0a:fa:22:b7:
80:c9:96:e5:0a:9e:4a:66:8b:43:2b:ed:e8:d6:e2:9d:3b:53:
4e:8a:fe:ae:91:18:55:2c:2c:9d:b5:84:8c:ef:b5:46:a8:96:
45:59:93:31:e0:99:4a:76:11:41:00:ab:6e:d3:35:d0:ca:64:
e2:81:4a:c4:10:6a:09:0e:c3:6f:f8:a9:23:38:db:39:bc:4c:
72:3d:e2:0a:9f:6c:77:be:62:d7:db:f3:15:eb:cc:7e:60:0e:
73:76:2d:a0:ef:a3:36:14:09:bf:e0:84:e1:ef:75:40:0d:2e:
48:c7:83:e8:04:02:59:bc:a8:61:ef:60:33:51:4d:1a:7d:d6:
b5:d3:4a:d9:1b:3a:63:68:2b:76:e7:54:ff:18:7b:2f:1f:f9:
f8:78:d9:55:f6:fe:97:00:3f:78:93:65:c8:72:b9:4b:fd:48:
6e:a0:42:fa:5d:9a:00:b7:d8:a1:9e:34:ca:6d:f5:83:46:9d:
ff:1a:e8:4a:2c:09:39:7d:f4:16:b1:dd:5b:ea:45:3e:22:85:
05:d5:cd:2c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUL0CRs+XaKjnDKLh/hD5QYgWWYe8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODA3MDI1MDM5WhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BlZmQ0OTNmMDBlYTZlODg4ODcwZmIwMmVjOTNkZDk2ODdi
YWNmZjA1NGYwYjkzY2FhMTZlN2YwYzhjYTc4ZjU1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbUQQjECBtmlVtDMbdvK+EXEU+vHH/je/W+T/m1Dh7Ckr/
ujqAsUFdLI9L3LjXs56wYPuYW8R+AH+gwm2QEzL5wzguVte+bs8KxmuRqEActJkE
KWIS0avJ2xTVY3wu659mw94/1vnkgpePjr68HiSP4t/G29eeWv+I0BHOtI2rG2Hl
5WJohYO99iWh0EQHh8KwjBaw3mvgp2VF+wxZVetAOcoNs05PYBw6xGxdHGRVDASB
e6Cxff/Y1pChtYvY85Pq0QVsmFFdesCKeTKc+8GwGVVAJZing5WUh8OLHnqjZzRO
HCoIkNgFVJMhkQe3g0guNdcTkbXDCMlHrT/CMk2vAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUbieXBjAuhUO/S6VdFJ/z9MyrE90wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2NmODk5OGQ4LTk5ZDQtNGIwYi05NjQ4LWY5MDI3NzkzMzJmZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAP3OgwDQYJKoZIhvcNAQELBQADggEBAKQEP+p8h7d3Hb7b/F6ST53vTbBF
qAPDpfBkjSkFDowYV0BrmrkwaLsoRiL4m+ttI3zrCvoit4DJluUKnkpmi0Mr7ejW
4p07U06K/q6RGFUsLJ21hIzvtUaolkVZkzHgmUp2EUEAq27TNdDKZOKBSsQQagkO
w2/4qSM42zm8THI94gqfbHe+Ytfb8xXrzH5gDnN2LaDvozYUCb/ghOHvdUANLkjH
g+gEAlm8qGHvYDNRTRp91rXTStkbOmNoK3bnVP8Yey8f+fh42VX2/pcAP3iTZchy
uUv9SG6gQvpdmgC32KGeNMpt9YNGnf8a6EosCTl99Bax3VvqRT4ihQXVzSw=
-----END CERTIFICATE-----
Generated at Sat Sep 19 11:22:54 2026 by rpki-client