
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03efc2c4-f35c-4ff9-aefe-135c62760950.roa
File: 03efc2c4-f35c-4ff9-aefe-135c62760950.roa (raw, json)
Hash identifier: 3e1FTjtkRD3uKwxiPaoqZDZPbru2SEkn6evRnoEVyq4=
Subject key identifier: B2:E3:EF:80:BA:72:92:30:A9:90:A7:2A:CE:C3:CF:9A:62:D5:76:DF
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 472A9E4F91D1E60347AEAA3665D307CD329D0BAD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03efc2c4-f35c-4ff9-aefe-135c62760950.roa
Signing time: Tue 19 May 2026 02:31:50 +0000
ROA not before: Tue 19 May 2026 02:31:50 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.220.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:2a:9e:4f:91:d1:e6:03:47:ae:aa:36:65:d3:07:cd:32:9d:0b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 19 02:31:50 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=5fb2da1ee9568be88d707381061dba05129fcb67dba6fa12aa7fbfb0f7c769d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:15:1f:02:81:72:11:ca:ab:71:89:16:78:2d:
51:06:7f:e0:b7:6d:92:67:84:a0:88:e8:ab:6b:b7:
f6:25:e4:f7:b6:df:c0:ef:6d:cf:6b:59:9c:c4:f2:
3d:99:59:87:62:ad:98:07:70:1b:87:75:f1:4f:0b:
99:a3:54:ca:b3:f6:1e:a5:ef:7f:40:df:48:ec:b1:
f1:ed:76:d8:6c:b1:99:ff:b9:b4:f3:99:8d:a9:42:
b3:0b:69:a9:73:ff:14:3a:48:ab:9e:41:09:a1:ef:
4f:1e:b4:02:a5:30:b1:0f:76:58:f5:2d:46:77:86:
f7:57:99:84:5d:26:51:b0:9c:79:d5:aa:03:b2:ac:
f4:1a:18:94:3b:d4:0a:32:b9:8f:9c:83:45:74:5d:
1e:40:da:a6:b7:1b:50:bc:0e:d9:91:2a:df:d6:73:
32:4c:23:46:db:1e:0e:f5:7c:2b:ae:3d:37:2c:c1:
fd:cf:05:35:5c:de:88:e8:4c:79:73:5a:6d:e8:94:
71:bb:86:5e:a2:b6:34:59:69:f8:83:34:ab:61:31:
1c:0c:a5:a4:d6:ea:16:60:05:d6:b6:84:f3:4a:d7:
41:72:ba:70:fc:b7:93:62:ec:86:28:48:27:24:49:
7e:1c:de:0a:a8:27:e3:4a:d1:c2:8d:6d:ae:c4:00:
17:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E3:EF:80:BA:72:92:30:A9:90:A7:2A:CE:C3:CF:9A:62:D5:76:DF
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/03efc2c4-f35c-4ff9-aefe-135c62760950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.220.205.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c6:21:82:38:8f:d7:1a:e9:da:78:32:79:23:2a:66:30:2c:
b4:8c:a4:b3:f3:c1:7b:db:a7:91:7f:47:c6:b2:fc:81:fe:4c:
9b:48:3d:2b:98:18:06:b7:e1:f8:4b:30:f6:ea:41:1d:8b:73:
7a:d5:b1:9d:ba:35:da:51:e1:53:f1:17:a7:56:a6:f2:39:44:
2d:33:18:a1:3a:fa:1c:82:5c:23:ce:de:68:07:1b:1f:a6:a0:
be:d0:a1:79:d8:b0:3e:96:05:e4:88:c8:a3:dd:89:3a:b8:21:
5d:da:6d:20:8d:5c:0a:64:14:57:1a:38:21:06:3d:37:5f:f7:
b3:cd:a3:b4:4a:6e:80:1f:24:7a:ef:41:52:67:27:c2:b5:08:
dd:91:0e:b4:e9:85:39:68:9d:3e:ae:8c:11:10:9d:3c:8c:65:
fd:3a:ba:2a:65:e3:7f:45:be:ce:14:90:e0:41:4d:2f:87:65:
ed:fb:a5:a5:bc:cd:c1:bf:4b:a3:63:f6:91:f6:04:68:c7:6f:
ef:2f:75:e3:c0:a6:6e:da:4d:41:dc:98:b1:7e:c2:fe:ad:08:
eb:7b:bf:4b:bb:50:91:d6:4f:ca:75:f4:ac:1a:eb:8a:84:21:
c4:43:dd:fc:df:00:b7:ba:70:8f:57:27:af:03:9f:8f:73:46:
7d:d9:f0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:41:47 2026 by rpki-client