
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/da512197-d443-4603-b80f-2a87309b0b87.roa
File: da512197-d443-4603-b80f-2a87309b0b87.roa (raw, json)
Hash identifier: xTRG/a0vUBJ7nfmkJMKkCc0s63BxedDG7T21LdT9K00=
Subject key identifier: BC:F5:FF:1B:2B:0F:F0:B9:1D:59:F6:B7:B2:BA:98:82:46:CC:58:B3
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 08C9B55FD468337490AE518A20ECBAF63B80D09A
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/da512197-d443-4603-b80f-2a87309b0b87.roa
Signing time: Tue 19 May 2026 03:50:59 +0000
ROA not before: Tue 19 May 2026 03:50:59 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:b00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c9:b5:5f:d4:68:33:74:90:ae:51:8a:20:ec:ba:f6:3b:80:d0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 19 03:50:59 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=4d72ca794b0a74d6311c9a4fe1ea59a78711c9f556f3f2714a0650d900786445, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:7c:fa:be:92:51:e3:fd:42:5f:4b:0c:dd:
4b:87:a4:00:7e:a8:3d:e4:55:10:0c:0f:33:6b:60:
29:56:16:f5:27:e6:bd:9b:d9:10:a6:74:e3:3f:65:
9d:6a:22:dd:5a:61:a0:ec:0f:57:17:b6:03:16:b8:
2c:a6:ab:ce:5f:53:e0:11:3d:a4:03:9e:bc:4e:16:
36:e8:4a:3d:47:7a:43:f1:b5:51:86:4e:5b:d0:ba:
bf:96:24:bb:3d:ad:c8:10:7b:23:0b:dd:42:ec:4e:
c1:1c:2d:f6:f2:26:fc:ec:34:25:80:2e:4c:cb:70:
22:84:0c:85:6d:ab:5d:c4:72:77:e5:b6:44:18:50:
60:0e:e0:e2:3b:03:fd:29:6a:fb:48:21:ab:81:28:
33:07:48:ad:81:03:94:5b:09:94:6b:b8:2a:0e:10:
80:fe:70:59:c1:28:fa:ef:07:cb:5d:76:23:e2:3b:
2e:de:07:4e:f0:c7:7f:ca:ae:82:01:6c:bf:c0:c1:
c9:90:72:63:c3:05:cf:cf:81:31:46:71:3c:eb:b7:
bd:84:f7:c3:4c:ac:1c:6c:c5:ac:77:e4:3f:4b:03:
e1:d0:63:ac:bf:01:51:fa:d9:10:7f:cd:0a:63:9e:
91:b6:e7:db:18:c6:47:0a:b6:ab:1f:9c:ec:0c:c3:
9c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F5:FF:1B:2B:0F:F0:B9:1D:59:F6:B7:B2:BA:98:82:46:CC:58:B3
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/da512197-d443-4603-b80f-2a87309b0b87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:b00::/40
Signature Algorithm: sha256WithRSAEncryption
92:81:f5:45:26:4c:45:53:e1:0e:85:67:b2:59:7d:44:00:19:
a5:a6:26:91:a2:96:31:4e:1d:9b:a2:05:bc:2d:23:47:b5:43:
1d:a7:03:aa:cb:7a:60:e4:64:5a:da:b1:f7:96:66:50:c2:a7:
83:a3:62:f1:81:51:67:90:0e:7e:dd:14:9c:ef:14:78:b8:aa:
19:01:4e:a3:2c:ae:20:be:78:5d:d5:01:83:af:0a:19:64:2e:
9f:6b:34:b3:b4:a9:34:0d:87:e0:bd:ee:4d:c7:7c:c8:38:91:
1c:04:d6:9b:91:29:af:5e:0a:8b:0b:5f:c4:a1:6b:bb:e6:6f:
38:14:f6:ec:3e:42:4b:c7:12:c0:aa:2c:c2:41:c7:4a:1d:af:
cc:8d:06:82:bb:d6:9d:90:d8:e6:0b:a6:dc:35:3e:e9:5c:2b:
91:6d:d0:b2:1a:72:a0:eb:c8:fd:8f:40:47:fb:98:ab:34:85:
6d:41:64:ad:ca:4a:12:b4:11:f1:37:ce:a2:c3:4f:d9:57:8d:
6a:60:0c:c1:aa:fa:16:20:bf:ca:ff:ee:44:a9:43:f7:6e:d8:
a6:cc:11:48:a2:1a:77:41:a7:7a:70:74:c9:ad:9f:96:80:1f:
13:88:75:52:a5:56:71:65:cc:31:90:4d:f2:a5:ed:e4:03:0e:
43:20:e5:95
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:12:24 2026 by rpki-client