
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4da48ec-e0c8-473f-9009-e253971e8b02.roa
File: d4da48ec-e0c8-473f-9009-e253971e8b02.roa (raw, json)
Hash identifier: f7Q2T8ltlEQYK6crEytKOCLvwruPDEmGXvKQyGeRjTg=
Subject key identifier: 23:50:C5:95:37:D6:22:0E:94:7C:0D:AA:D2:FF:E2:EE:FF:49:51:37
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 78F3EC557A17B269A726B37B8809D5AAA4248C46
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4da48ec-e0c8-473f-9009-e253971e8b02.roa
Signing time: Fri 07 Aug 2026 02:51:43 +0000
ROA not before: Fri 07 Aug 2026 02:51:43 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.72.0.0/13 maxlen: 13
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:f3:ec:55:7a:17:b2:69:a7:26:b3:7b:88:09:d5:aa:a4:24:8c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 02:51:43 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=bfb69b51861a247f6ab5e75020d509d58d27fb8f8c24e56a96a42ee74e3af3ee, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:be:d7:05:9b:42:67:b6:38:45:18:b9:ff:d4:
84:14:76:a1:6d:98:7b:70:ba:6b:0d:fa:e9:30:07:
d9:ef:4c:d7:75:dd:be:99:55:8c:be:ac:c4:1c:98:
63:eb:d7:a8:ad:72:54:95:65:c7:26:57:2f:79:a0:
1f:ae:e5:26:cd:d9:b1:7b:08:25:d2:ca:0f:5a:c4:
a8:d8:68:02:20:d8:89:8e:58:3a:b7:7c:ec:2c:dd:
31:9d:f4:65:19:a4:a5:f3:33:65:e5:3d:50:6d:6d:
6e:93:9d:90:86:52:9b:16:44:29:82:55:82:3f:26:
90:44:2a:c4:bf:21:bf:40:1a:f8:2a:56:c2:5f:28:
90:84:aa:b2:7e:78:eb:7c:be:99:56:cd:52:42:cd:
df:8f:f7:1e:d8:99:9e:e9:a4:17:0c:0e:3d:7b:ef:
a5:85:29:e5:58:21:1f:ca:f9:b7:29:98:c0:8b:d6:
13:a8:17:6d:72:49:0e:fb:fb:9e:64:5e:0e:88:d8:
93:33:b3:a2:3c:e8:16:47:7b:c2:0c:c5:c1:b9:77:
7c:9e:05:31:1b:31:73:d9:36:96:94:ef:bf:80:6d:
8e:97:43:e8:90:97:9d:86:a6:da:58:7c:cf:c4:ad:
44:6d:17:00:e0:06:dd:99:a2:c8:f1:1b:7d:2a:cb:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:50:C5:95:37:D6:22:0E:94:7C:0D:AA:D2:FF:E2:EE:FF:49:51:37
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d4da48ec-e0c8-473f-9009-e253971e8b02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.72.0.0/13
Signature Algorithm: sha256WithRSAEncryption
28:ca:f4:aa:d3:f7:05:79:d9:fc:8d:32:ab:72:00:04:37:ca:
b6:65:8b:f4:03:8f:dc:86:f2:16:35:dc:30:29:9c:3d:df:f2:
e1:c3:f3:6e:54:0c:49:cd:21:96:48:40:5c:ce:60:c0:cc:03:
fe:12:6f:6e:a0:68:3c:f1:0c:e0:bf:d5:4d:99:ed:c9:41:b4:
fa:50:d3:19:bf:14:61:a3:3f:8e:14:16:30:14:8d:9f:32:20:
d9:48:d5:23:e4:dd:8b:c3:53:57:47:b3:a6:9b:df:e6:fd:d0:
97:90:8e:1c:8f:39:4b:58:28:40:5f:88:8d:77:c0:4a:3b:ce:
23:b5:ea:92:44:8b:c1:f0:28:9b:e3:60:fb:b4:3a:cc:35:10:
f0:0e:2d:02:df:fd:f4:ae:9d:85:4b:32:5f:eb:85:06:cd:33:
73:36:f7:40:81:a3:be:63:cc:7c:c7:27:58:6b:cc:cf:df:be:
35:9b:83:a7:08:11:37:cb:31:1f:1e:2e:c4:e3:ed:8a:e8:cf:
ab:36:0a:50:52:b0:38:66:7d:a4:4e:ec:38:01:82:ab:20:5e:
08:51:b2:7f:6b:0b:1a:8e:11:2e:c0:19:e1:dd:0a:2c:28:8b:
01:ea:ec:6d:fa:9b:60:6e:9c:9d:1a:f2:48:44:3e:ac:14:68:
7d:11:8c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:18:05 2026 by rpki-client