
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/3af7659c-c364-4492-bd08-bb9e6b8fdf43.roa
File: 3af7659c-c364-4492-bd08-bb9e6b8fdf43.roa (raw, json)
Hash identifier: UeukxTAbe8bIDtE8UHPgTOCXYQLPoUQoFJ3bINdIAbQ=
Subject key identifier: CD:FF:3D:DC:D1:87:0A:6A:F9:7A:3B:D4:97:6B:C8:6A:52:48:BC:D9
Certificate issuer: /CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Certificate serial: 444C1655BCB6F594ABD62D00843E1CEEFEDF203F
Authority key identifier: 91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/3af7659c-c364-4492-bd08-bb9e6b8fdf43.roa
Signing time: Sat 28 Feb 2026 00:30:13 +0000
ROA not before: Sat 28 Feb 2026 00:30:13 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 50.112.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/7188ac24-09cc-4f20-9dbd-cd9005d2797e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:4c:16:55:bc:b6:f5:94:ab:d6:2d:00:84:3e:1c:ee:fe:df:20:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3
Validity
Not Before: Feb 28 00:30:13 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=ffea801a0910c84856c2405899d8b2caccfe42be34cc7fa7c055ddf69cc44487, CN=ddfbc97c-7bed-40df-95ca-e664b29d7b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:f1:69:cf:9c:8b:e5:94:fd:65:6c:38:b3:
3e:b0:9c:75:27:66:e6:1f:eb:22:f5:d1:7f:58:1a:
13:9c:94:1b:e7:b2:3e:06:57:80:3a:4f:1f:ee:6b:
a5:c4:78:e2:eb:fe:80:99:c7:89:7c:c2:b6:8f:bd:
1a:d3:f7:30:4c:95:85:66:09:08:be:5e:70:a1:76:
2c:b9:8e:1e:b7:4a:91:18:64:97:61:5a:37:98:c0:
f0:c8:15:67:cf:e7:50:5d:6e:d3:5b:6b:d7:a8:83:
46:97:ed:bf:68:80:0c:69:01:04:6e:4c:48:31:f6:
5a:81:a2:3e:c0:a0:dd:4e:16:5f:dc:b2:00:0e:16:
2c:81:a2:3f:9e:bf:cb:c1:df:c7:69:a7:b7:86:21:
73:2a:05:fe:f4:11:b5:2b:92:1e:dd:64:4e:24:82:
d5:6c:a9:f9:a5:32:eb:f3:b6:96:a3:10:a5:c5:68:
51:9c:fe:a6:b6:33:d2:4c:dc:6e:70:af:8d:d9:71:
0c:f3:18:3d:23:ab:c1:e2:33:04:5e:46:e1:ea:c8:
4a:27:63:60:cf:34:9f:23:a0:63:d6:b4:65:9f:19:
55:64:38:7f:bc:df:ec:bb:91:6d:67:d1:32:37:4d:
95:b2:1e:aa:1d:0e:98:26:9c:b8:c4:be:df:f3:97:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FF:3D:DC:D1:87:0A:6A:F9:7A:3B:D4:97:6B:C8:6A:52:48:BC:D9
X509v3 Authority Key Identifier:
keyid:91:2D:C6:0D:D7:64:29:82:BC:AE:7F:81:FE:3C:4C:12:72:80:22:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7188ac24-09cc-4f20-9dbd-cd9005d2797e/a15d8aa10d62dbdd348326876ba56753cb99b464cc455324b3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/3af7659c-c364-4492-bd08-bb9e6b8fdf43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/602a26e5-4a9e-4e5e-89f0-ef891490d9c9/YtvdNIMmh2ulZ1PLmbRkzEVTJLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.112.88.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:5a:ce:b5:44:16:0e:b4:83:13:15:de:7d:f7:2d:bc:e4:6b:
47:fd:07:a7:5f:94:d4:97:d3:3d:60:3e:97:d3:d6:cd:d0:63:
f6:f1:bc:b5:37:17:ad:21:50:e4:7c:82:9a:79:53:34:c5:12:
15:59:f8:de:f2:a4:af:16:5b:3f:fb:e4:d8:59:40:27:7a:35:
e2:50:5d:20:6c:15:d0:be:f9:5b:8b:0b:49:a9:12:49:23:31:
7e:30:ef:8e:ec:6e:56:45:8b:e7:23:bf:3a:fc:07:42:b3:a6:
ec:0b:b4:56:2c:f0:6c:2d:af:51:e8:45:6c:8d:0a:a3:21:06:
bc:2d:20:84:3b:8f:7e:7a:a1:ee:6f:8d:98:cb:83:8f:e5:34:
de:28:ec:d4:b5:a7:12:36:6f:63:4b:cd:e1:65:73:61:c7:5e:
f1:df:b0:01:48:0a:10:1b:4d:83:be:cc:6a:28:7f:6a:b9:22:
fe:ef:b5:6b:5d:b1:5b:03:57:36:b3:b3:8c:ac:98:79:ab:9c:
ba:d1:b6:99:f3:74:7b:bc:ee:e2:7b:d7:83:6d:87:73:14:32:
8d:75:15:b2:44:ca:90:35:7e:e5:3f:2b:2b:db:64:38:80:8d:
50:b0:78:36:33:9a:96:5f:3b:85:c0:92:04:7e:4c:aa:38:b6:
5f:bb:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:37:22 2026 by rpki-client