
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ffba4e3-baf5-43db-922a-70348fc672bb.roa
File: 1ffba4e3-baf5-43db-922a-70348fc672bb.roa (raw, json)
Hash identifier: 78yYoSQ6dpVbxCxFetO3LqAiMSD5sLs+OQy98KUu7As=
Subject key identifier: 73:C5:D6:86:64:81:03:38:49:7A:33:33:73:DF:24:93:18:04:E6:F7
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 073D7534B713A5D0464035A0FC53D75E0C50DBE4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ffba4e3-baf5-43db-922a-70348fc672bb.roa
Signing time: Fri 15 May 2026 02:50:06 +0000
ROA not before: Fri 15 May 2026 02:50:06 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.237.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:3d:75:34:b7:13:a5:d0:46:40:35:a0:fc:53:d7:5e:0c:50:db:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 15 02:50:06 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=430a6bf1d4fc28d6ebfdd3ff14f9015b8792cdb8abb363426cdedc420d8e9177, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d1:ee:78:7a:8b:b7:cf:06:75:4c:07:2c:23:
e1:ee:c8:75:47:9c:a5:02:7f:81:db:10:c1:02:4d:
e4:39:ef:be:6c:a2:68:89:3e:34:12:2c:60:29:2c:
43:13:c6:60:c1:3a:39:ce:fb:c2:a3:88:42:cf:ba:
91:38:a0:42:6e:0e:45:3e:4a:bb:c3:49:05:08:98:
ed:f0:94:e0:6c:1e:99:af:f9:c4:0c:0a:0d:b6:39:
6e:20:a6:e4:4f:93:93:3f:d1:ca:9e:7a:87:7e:12:
a7:b2:4b:88:5c:af:9c:2c:a7:b8:1c:55:3a:25:8e:
4f:be:9d:79:df:59:fe:f2:fc:29:c2:c6:19:ce:3a:
17:6c:40:47:db:76:ef:30:12:61:c9:41:60:4d:a0:
53:0a:76:05:63:52:b8:02:0e:19:82:0d:2c:8e:5e:
c4:84:93:f4:7b:dd:0e:e7:e5:0e:9e:2a:15:ed:a9:
52:e7:06:9a:93:aa:74:87:9e:d4:cc:e2:33:78:79:
21:3e:97:33:08:e9:4b:91:88:5d:2a:48:07:ce:a0:
0c:53:88:74:14:24:29:07:97:aa:7a:c6:14:8f:fb:
70:e0:15:35:ae:55:7d:08:f7:77:d8:8c:a0:49:94:
57:3d:ff:b1:60:92:d4:70:93:1c:0c:0e:4e:48:4c:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C5:D6:86:64:81:03:38:49:7A:33:33:73:DF:24:93:18:04:E6:F7
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/1ffba4e3-baf5-43db-922a-70348fc672bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.237.0.0/17
Signature Algorithm: sha256WithRSAEncryption
ad:43:32:84:b8:f8:6b:86:e8:5b:ca:89:d9:08:55:97:7a:08:
3a:c7:19:c0:ad:4f:62:00:f3:81:17:c8:b0:0e:a4:cb:89:00:
4f:8d:64:10:99:81:b9:3f:59:20:88:94:f6:11:8b:4d:5c:83:
66:0b:72:2d:b0:11:9a:e5:be:b7:d2:b7:25:97:87:12:f6:06:
79:77:bf:3b:37:e8:6b:3d:04:21:c5:4f:c6:3d:5e:c0:df:d2:
6f:bd:19:b0:89:5c:f6:d3:d3:61:03:13:dd:18:fc:cd:82:30:
52:76:1d:67:41:a9:2b:a2:12:70:37:d7:4b:2d:ae:9c:f2:ee:
75:88:fe:e8:83:e2:74:17:39:9b:39:a3:c0:59:ee:b6:53:d4:
47:4f:b2:ee:c7:38:3f:a9:ee:b9:c2:37:b4:73:9d:6f:81:a2:
40:d2:45:34:16:1d:18:65:45:0a:3b:bd:2a:0f:70:70:de:13:
ce:c1:d0:85:55:04:61:ec:b6:00:97:05:25:fc:2d:ef:ac:3e:
ab:0d:49:96:19:fe:5f:fe:b5:97:c5:be:03:b3:28:87:6d:20:
3c:9f:f6:33:5e:5e:78:df:bd:50:7a:fd:5b:7b:2a:f6:cc:a1:
fd:9b:ed:19:44:c2:66:6b:94:68:0d:42:7e:8b:7f:1a:17:3b:
1b:18:c0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:39:31 2026 by rpki-client