
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0dd6c7e2-b47d-45bc-910f-cd729038d719.roa
File: 0dd6c7e2-b47d-45bc-910f-cd729038d719.roa (raw, json)
Hash identifier: 0cpODAFtRSqfG7/Kpay2fENN1ldURIjY9EMFzZdvqMo=
Subject key identifier: 08:AB:9C:5D:03:6C:CC:10:E3:E5:18:7F:40:70:25:F6:1C:88:94:58
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 469EC03E0A3A37CFFE9F55A31F7E11C530300664
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0dd6c7e2-b47d-45bc-910f-cd729038d719.roa
Signing time: Tue 17 Feb 2026 01:41:01 +0000
ROA not before: Tue 17 Feb 2026 01:41:01 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.53.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:9e:c0:3e:0a:3a:37:cf:fe:9f:55:a3:1f:7e:11:c5:30:30:06:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 17 01:41:01 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=beec25cd63eab9dca274b755fcfa8006ab28c9891387b9d32f732d4825876ec5, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:2f:83:99:20:25:b5:26:95:0b:d3:9c:c1:
57:a7:7f:a6:09:06:21:14:45:a0:5f:69:bf:96:b3:
b1:ab:ea:d9:b0:68:d1:d6:0a:fb:f5:e8:ef:d9:66:
06:8a:79:8d:c6:fa:6f:2a:a0:5e:f5:45:c0:af:91:
22:e5:34:d7:54:de:9f:35:20:9a:15:69:93:f1:15:
e6:1a:83:2a:1e:30:cf:24:d7:f6:18:4d:37:5f:35:
5b:72:d6:93:2a:80:51:99:0e:37:18:b4:d7:86:dc:
23:8e:5c:31:9c:ec:5e:9a:cf:3f:39:e8:2e:83:8e:
1e:9c:c8:21:4a:ca:3d:22:ca:a2:21:f5:33:c9:d4:
47:1c:d1:bb:cc:13:7f:dd:71:9a:69:d9:40:01:b5:
8d:b3:13:9d:ce:11:3e:c3:b4:dd:28:57:65:1f:31:
82:08:dd:10:53:c3:99:8f:be:1b:78:21:93:b1:2b:
9f:81:f5:c4:1a:e4:a7:6d:11:af:c5:1c:05:2d:5e:
b5:c6:d6:13:6f:12:6d:05:0b:7a:27:12:8b:e2:91:
60:fe:21:80:a5:c0:40:e8:9d:71:f5:14:27:85:3e:
93:97:ee:7d:30:c4:cd:2a:1d:48:07:f5:15:bb:3e:
bf:ad:e4:bf:81:ba:e3:f2:7d:b3:58:5a:98:9d:a0:
99:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AB:9C:5D:03:6C:CC:10:E3:E5:18:7F:40:70:25:F6:1C:88:94:58
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/0dd6c7e2-b47d-45bc-910f-cd729038d719.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:5a:ab:07:9b:95:81:d4:dc:bc:ed:00:81:50:6d:ec:3e:a3:
8f:60:5a:b2:df:7b:27:2f:9b:26:35:ba:af:6b:c1:28:cd:a0:
90:f2:9b:fd:7c:34:35:4b:51:0a:d5:c5:be:9c:6c:2c:fd:47:
38:a9:81:77:40:6e:5e:6a:2f:37:16:3c:8b:13:3f:90:ae:33:
93:e3:2b:bd:83:22:64:b7:9f:03:e4:27:cc:05:bc:55:c4:be:
91:11:5e:8f:f7:c4:67:e6:d0:b6:bf:d8:55:73:d3:b1:b2:d8:
0e:99:e1:af:2d:ad:d5:ac:80:14:1b:b6:8d:74:71:34:93:21:
f8:ce:ad:2d:69:32:67:5b:66:e6:b6:28:23:bf:55:13:ea:e9:
fa:18:b8:6c:b3:4b:1b:3a:e2:f0:f4:1d:e9:33:5d:2c:b8:6d:
34:a0:14:9c:81:e0:14:4b:b2:03:5e:03:db:25:9e:57:02:d6:
b3:c8:f7:72:1e:c2:81:19:37:37:18:ca:d1:ba:50:cd:fe:5e:
21:3d:e6:df:e0:33:05:3b:9e:00:98:15:66:99:8e:a8:f1:87:
b0:48:e9:56:02:30:12:ff:4e:bb:a2:67:82:16:3f:71:f6:d7:
e0:f8:a8:55:d8:a8:af:42:b0:83:58:3d:61:52:9d:90:5b:0e:
3b:2e:c4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:01:28 2026 by rpki-client