
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/233b1798-57d0-46ce-8e1c-dfb869c36dec.roa
File: 233b1798-57d0-46ce-8e1c-dfb869c36dec.roa (raw, json)
Hash identifier: i+PkZKS3YL8FFcixZEHoPETVos65rQ6Dub40HB3233Q=
Subject key identifier: B5:8C:A5:9A:5C:28:A9:91:A4:6D:58:21:BD:4A:69:FA:D3:5F:1F:ED
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 1483505686E6F9E05D97C6AE0DBD6200B4E6DB52
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/233b1798-57d0-46ce-8e1c-dfb869c36dec.roa
Signing time: Wed 21 Oct 2026 01:30:16 +0000
ROA not before: Wed 21 Oct 2026 01:30:16 +0000
ROA not after: Tue 19 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 52.124.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:83:50:56:86:e6:f9:e0:5d:97:c6:ae:0d:bd:62:00:b4:e6:db:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 21 01:30:16 2026 GMT
Not After : Jan 19 23:59:59 2027 GMT
Subject: serialNumber=106f8d6b97e2af22a2def3542da18a6373f2c8ad644546850c6fff6cbdacbe9c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:54:ad:8d:10:ed:c1:1e:31:27:e5:e6:1e:
e8:f1:9f:b0:f4:a4:fc:70:a5:0b:d3:00:3f:69:47:
88:4a:ca:7f:6b:49:c1:ec:72:64:44:ca:7e:6c:dd:
bf:1c:c1:94:14:00:b0:27:31:fb:cf:e3:3c:6d:de:
15:6c:d1:94:a0:d3:45:08:0b:c2:7c:a2:26:29:2d:
40:e3:28:a9:4e:43:bc:f5:72:4a:5e:38:18:5d:0e:
13:ab:06:11:18:57:2a:1c:46:e1:d8:a2:99:b0:b1:
5a:ae:29:7f:f0:10:75:9c:53:13:73:a6:9e:f2:48:
e9:4f:b9:57:30:f7:8a:81:5d:85:13:42:82:05:ca:
ff:ae:5c:71:08:ba:26:a1:dc:93:55:23:6b:de:42:
71:c8:41:a6:49:05:1f:b3:01:13:7a:df:59:5a:f0:
68:41:4a:53:c3:12:26:b4:cd:dc:7c:1c:48:0e:74:
b2:54:91:38:e1:c8:57:b4:b9:bd:67:55:e3:cf:7e:
cf:de:27:f7:bb:c5:fd:79:af:65:db:b9:2e:a6:fc:
36:e9:29:2c:ab:05:32:e7:a2:df:ef:a6:ca:8f:71:
6a:37:ef:c7:31:a5:7c:22:95:94:fe:f8:5d:48:1a:
26:34:41:80:d3:3c:ed:fe:5d:79:e7:a0:be:01:9c:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8C:A5:9A:5C:28:A9:91:A4:6D:58:21:BD:4A:69:FA:D3:5F:1F:ED
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/233b1798-57d0-46ce-8e1c-dfb869c36dec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.124.194.0/24
Signature Algorithm: sha256WithRSAEncryption
92:dd:6a:1f:dd:93:41:6e:32:91:c0:cb:b5:b8:fc:ae:00:e3:
24:7f:3d:16:60:af:c4:df:b9:c1:0e:58:07:47:58:96:72:b8:
e9:1e:34:c0:ad:86:05:7e:51:47:1d:67:0e:e8:00:57:25:b8:
d7:4d:b8:98:f0:be:55:0b:fd:28:78:db:37:68:d7:bc:c9:28:
55:11:18:59:f0:42:9c:b9:5a:c9:1a:26:b5:25:41:c1:18:f1:
39:14:5a:c2:f7:91:a4:ab:f8:6d:f7:6b:ea:9e:0b:91:3f:60:
f4:0d:19:32:ad:d5:9a:e0:5e:33:c4:cb:57:8b:69:4f:23:e3:
63:ea:0f:68:f0:c8:38:fd:e3:aa:f2:0a:a6:60:2f:8d:56:fe:
df:05:2c:a0:3b:e8:92:2d:d9:48:a4:39:4e:23:85:54:41:bb:
fc:73:4f:c6:a8:20:7b:83:ae:47:c0:2b:c4:32:8e:b3:e7:5e:
5c:15:91:ac:98:6e:f6:42:1a:cf:c3:8c:7c:b2:30:da:0b:a4:
fe:d8:7d:9b:2a:b6:60:39:29:00:5e:f0:14:80:59:8f:ce:94:
1f:11:5c:df:98:0d:b2:32:6f:77:67:99:48:90:2e:6e:2a:2c:
19:56:39:ce:a8:1f:aa:6a:4f:dd:a6:3f:78:a8:3e:d8:d3:53:
56:3b:a5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 23:00:00 2026 by rpki-client