
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fca7efe2-e708-48e2-a440-01f94927553b.roa
File: fca7efe2-e708-48e2-a440-01f94927553b.roa (raw, json)
Hash identifier: H12NO8l5/2GfvKvi6+c9R669Dn/xv7gbaeou45xR910=
Subject key identifier: 43:E0:E8:CF:BD:B6:44:9E:9F:E7:1C:02:B5:AA:B3:AB:2C:CC:CA:F7
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2A65FA6C41FC8E3EC7A12B37E42AA2FCD72E2039
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fca7efe2-e708-48e2-a440-01f94927553b.roa
Signing time: Fri 07 Aug 2026 03:30:17 +0000
ROA not before: Fri 07 Aug 2026 03:30:17 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.113.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:65:fa:6c:41:fc:8e:3e:c7:a1:2b:37:e4:2a:a2:fc:d7:2e:20:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 03:30:17 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=121d49939933edff24c83ed2dbeec0ded872bc5177fe0e604e2e77740576c6d1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:dd:3b:1c:75:02:30:d5:15:13:7c:36:0e:
74:9d:c8:e3:9b:a6:6c:87:64:9d:49:e5:43:7c:b0:
35:71:38:5b:08:d8:a4:e4:85:6a:1e:fd:d0:e9:98:
e5:48:34:ff:04:a3:d1:5b:86:61:08:8c:df:fe:7c:
68:f3:79:11:13:25:1c:d7:a8:33:fc:0d:ea:a6:8d:
8c:4a:77:a2:39:6a:fd:33:b7:60:dc:ab:08:5a:06:
0f:44:41:50:75:51:c9:fc:e2:e6:78:d2:a3:19:2e:
20:5c:73:93:b4:a2:db:d8:88:2d:8c:3c:75:e5:b4:
b9:16:70:1e:b8:3e:17:dd:e4:b6:5d:a1:73:54:e5:
9f:c7:0e:1a:a1:da:98:f1:52:a3:b5:73:28:f7:7a:
5b:5d:8f:ba:d7:26:d3:1e:44:f7:2c:6a:86:17:e1:
fe:de:b9:7c:38:27:b7:c2:59:eb:f7:ba:d1:b4:9f:
18:88:07:c1:00:df:d0:8c:59:92:0b:03:c9:2a:f8:
82:87:79:d8:90:93:4a:9e:86:60:5b:da:9f:5e:0f:
9e:41:14:f5:c9:8b:3b:20:c2:95:44:32:17:d8:24:
35:2c:f5:69:4a:e0:b8:83:ac:1a:47:05:7a:c4:1f:
d5:f2:8a:43:99:fb:a4:97:ee:ff:1e:ab:a4:6a:8a:
b7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E0:E8:CF:BD:B6:44:9E:9F:E7:1C:02:B5:AA:B3:AB:2C:CC:CA:F7
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fca7efe2-e708-48e2-a440-01f94927553b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.113.64.0/18
Signature Algorithm: sha256WithRSAEncryption
65:db:a8:cb:b7:3f:01:9c:a9:17:56:f4:42:d2:97:28:f4:4c:
eb:08:f4:6e:68:8a:f0:af:ac:f0:be:37:9a:06:e1:75:6d:5f:
58:18:61:f4:fa:d6:55:97:f4:9b:a8:45:12:a0:2e:3d:a5:b4:
61:cb:10:dc:88:97:e8:7d:52:36:8a:a4:10:f5:3a:41:0a:52:
24:3a:91:ae:64:e4:bf:c8:56:26:9b:d4:f8:df:94:73:a9:cf:
9a:32:a3:cf:79:4e:12:7b:2f:c3:0c:a7:95:6f:76:ce:ce:b3:
21:f4:75:02:a7:ae:45:ef:51:b2:47:15:bf:b0:29:d1:d1:b8:
ce:65:e6:d6:c8:f4:05:64:2f:ff:3d:c8:e5:80:d4:84:c9:b7:
7a:93:01:bf:f6:0c:9a:b3:e5:84:a3:63:03:b9:16:11:70:6a:
f1:c7:7b:f5:48:f7:37:7c:78:7f:17:65:7d:a3:89:3c:39:73:
30:1f:54:3e:d4:07:3e:19:b9:dc:5a:a0:0f:a9:3b:ec:d9:1e:
0d:20:1d:c5:89:9d:97:a7:8a:a6:95:43:77:f0:e8:e8:ab:cb:
77:c1:75:34:09:68:ce:28:39:74:be:c6:f1:b1:3b:02:d2:52:
d4:2e:d7:5c:ed:12:e8:1d:b1:7e:09:df:f8:55:31:b3:f2:75:
86:f3:51:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:59:30 2026 by rpki-client