
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fbc01462-842d-4ccf-b248-23807d92d9fd.roa
File: fbc01462-842d-4ccf-b248-23807d92d9fd.roa (raw, json)
Hash identifier: IXDR+wztIJvzJQERG1u62ECe1yo6Ib22aouaZaq4vts=
Subject key identifier: 1C:53:BE:5F:C6:D5:25:3C:D6:C9:97:4B:18:23:DF:AB:82:9A:ED:4B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 26E1B08F1BE2F574D926D5E89D68E2BA01F9F05D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fbc01462-842d-4ccf-b248-23807d92d9fd.roa
Signing time: Mon 27 Jul 2026 02:01:42 +0000
ROA not before: Mon 27 Jul 2026 02:01:42 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.219.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e1:b0:8f:1b:e2:f5:74:d9:26:d5:e8:9d:68:e2:ba:01:f9:f0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 02:01:42 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=30bd328d3c444655b2aaa895bd1382afc7ec3cd1f43ab54b90bc52a2af0d71af, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:7b:03:45:d4:79:9c:b4:7d:e7:3f:65:00:
46:f0:bf:fb:dd:44:10:cb:47:c4:76:b6:fc:2a:c4:
bc:57:4b:67:88:dc:af:b7:af:8a:6f:c9:32:08:29:
25:7c:59:a4:9e:ef:8a:33:ed:2b:39:7f:38:3b:ee:
dc:c0:d3:ab:cf:99:61:d2:a2:d0:d1:ce:44:f5:02:
01:05:cc:71:84:b1:42:02:4d:cd:d5:b9:8a:06:fc:
88:58:32:9c:93:a9:9d:2a:ed:0c:aa:03:a9:7a:b7:
53:6f:a9:d8:f5:74:27:08:1a:e0:18:96:c9:67:d7:
16:b0:79:a3:93:a3:c4:83:0c:f5:01:ff:53:0a:37:
17:19:b6:93:ee:89:cd:eb:21:d9:75:d7:aa:1a:e2:
21:cc:d1:95:0f:1d:9e:0d:1f:57:a0:11:96:60:e2:
43:7e:7a:7e:4e:c0:ba:46:1d:33:ce:e8:5a:c3:27:
81:fc:3b:b0:47:3d:3c:69:6a:8b:85:56:ee:d5:db:
52:ab:bc:41:bd:7f:03:32:ee:1a:db:d4:13:f4:d2:
9b:c0:68:ee:7a:7f:6a:14:ce:cc:56:97:8e:b8:10:
8d:57:d7:95:84:fc:cb:fc:2b:25:f3:bd:4d:8e:93:
aa:3f:39:59:2e:44:af:50:df:1e:b3:23:fc:91:ce:
bf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:53:BE:5F:C6:D5:25:3C:D6:C9:97:4B:18:23:DF:AB:82:9A:ED:4B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fbc01462-842d-4ccf-b248-23807d92d9fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.219.254.0/24
Signature Algorithm: sha256WithRSAEncryption
28:27:32:27:08:c4:e0:a8:55:ac:e1:92:98:a6:8b:ff:85:1d:
d6:64:d6:56:64:67:4f:df:d8:7f:0f:b6:3e:53:ca:8f:df:00:
b1:05:97:88:c5:ce:cc:dc:36:01:05:67:19:56:6d:34:42:fd:
20:72:77:ad:e5:1c:ca:64:fb:38:18:32:df:d8:3e:5b:20:bc:
3e:e6:04:a0:de:56:48:f4:bb:d9:f5:c5:33:b6:19:c0:78:22:
f3:3b:57:7d:ef:d5:49:51:f7:dc:f8:5a:2d:58:ec:85:b4:6a:
3e:e8:10:be:78:d2:f1:e5:34:44:e0:7d:56:15:67:16:9a:e3:
4d:fe:9d:ec:85:f5:d6:8f:15:b5:bd:ff:27:7d:02:7e:32:25:
92:5f:fa:77:12:d7:b4:54:30:01:3d:6b:da:af:8e:8f:f3:1c:
fc:9b:ec:aa:46:b3:01:63:01:70:3d:5f:c7:bc:f7:50:82:05:
53:89:ee:4c:dd:28:6e:34:e6:df:a5:d8:54:ee:72:57:b2:5e:
0a:43:84:0a:0f:93:8d:42:69:04:3c:9b:68:9f:d3:3c:a3:8f:
4c:85:71:8c:ed:84:b4:fc:e8:f4:ad:7e:90:94:e7:08:ca:25:
78:49:99:5b:c0:91:0a:7d:7e:51:3e:36:c7:3e:d8:e6:fe:cf:
be:54:7e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 12:13:49 2026 by rpki-client