
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/270fe039-1a84-4bdc-8806-6c0cb8a4f5a3.roa
File: 270fe039-1a84-4bdc-8806-6c0cb8a4f5a3.roa (raw, json)
Hash identifier: DVG6LxMOtNK0cG7L600qvpPV3A6INUBNTWWc3F412KU=
Subject key identifier: 16:E2:25:00:A1:45:1F:33:00:B7:D5:47:E7:49:DF:11:19:1A:3B:7A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3156C8056C89240750D0F2FB1796A8AA5212F87C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/270fe039-1a84-4bdc-8806-6c0cb8a4f5a3.roa
Signing time: Sat 16 May 2026 02:31:47 +0000
ROA not before: Sat 16 May 2026 02:31:47 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.245.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:56:c8:05:6c:89:24:07:50:d0:f2:fb:17:96:a8:aa:52:12:f8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 16 02:31:47 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=5920c862f979c960647690522234d6963d074bd9ecf721c22ad49e13977cc7ae, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:38:32:10:39:64:d8:33:b8:b3:7c:2c:3b:
88:3f:25:22:72:15:4c:2d:e2:99:57:29:96:fc:62:
68:d1:19:9f:6a:0f:e4:fa:7b:f1:cb:03:9f:4c:61:
20:99:0f:61:32:83:80:1a:64:14:10:cf:41:b9:ca:
69:ad:a1:aa:9c:28:d5:1f:65:c2:49:23:e4:8b:5b:
45:0b:ac:f7:22:9f:fc:2d:a5:29:0c:73:33:c7:91:
f1:b6:98:f3:ce:97:1d:44:ef:50:4b:ee:fe:39:9e:
0d:e7:49:6b:a9:18:ff:49:9b:17:5a:9b:dc:04:9e:
0c:f3:14:23:4e:55:21:df:b8:b9:d2:8c:db:1d:e1:
69:ab:21:fb:cc:58:73:33:cf:79:dc:db:e7:86:74:
c8:5d:a2:24:b0:02:2d:9f:e8:b6:fd:62:ea:f5:48:
61:9d:f8:db:f1:1c:44:64:78:7f:f9:3f:77:ce:e9:
3d:f3:7a:40:a0:1a:1e:05:52:40:06:57:5a:6a:36:
dd:98:3d:19:18:f9:47:5c:66:f4:e5:76:11:cf:5a:
6f:77:5e:71:d6:44:42:e4:89:64:c1:c8:62:d3:2a:
68:71:96:ff:b4:98:35:0c:3b:eb:df:50:b0:db:c1:
28:ba:17:75:c9:ef:64:73:5e:f0:b2:c0:81:77:41:
a0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E2:25:00:A1:45:1F:33:00:B7:D5:47:E7:49:DF:11:19:1A:3B:7A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/270fe039-1a84-4bdc-8806-6c0cb8a4f5a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.245.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:23:9d:8c:19:6d:13:c8:41:02:78:8c:c8:5b:83:c5:0c:9f:
b3:20:ee:49:85:b4:3e:21:9d:69:03:80:f8:f2:87:cf:cc:ef:
d9:4d:6d:f6:c5:30:7c:c9:dd:b1:63:c5:a6:c9:f7:d7:41:19:
a7:11:7d:12:aa:61:5e:bb:3f:63:93:4b:f3:13:3b:7f:f5:79:
34:a8:ed:bc:fc:14:bd:21:d1:ab:02:4c:2b:b4:f9:3b:f9:e4:
22:e0:73:6f:25:91:02:4a:f8:a3:d1:c9:b2:f1:6b:92:b9:d8:
1d:7b:bc:37:6e:95:eb:35:db:cd:78:a4:cb:6a:61:09:89:ad:
ce:53:a4:f6:ee:b5:9e:58:40:e1:3e:02:e7:53:86:e6:38:66:
23:32:19:08:e1:2a:40:7b:40:52:55:54:f3:5b:f8:52:cd:48:
d3:ed:fc:a6:e4:9e:d7:9b:2d:21:a5:6f:30:84:65:7f:32:6e:
df:ba:23:79:04:b2:57:00:7b:73:bd:66:23:ae:e3:f0:f2:ab:
02:69:92:db:42:25:bb:b4:91:f5:d0:5c:a4:4c:56:6e:a6:7e:
65:e5:b6:bd:d4:cf:9e:b6:23:b2:87:a8:c3:c2:57:da:b3:a4:
97:23:85:5f:17:e6:74:3b:46:c1:63:a9:1b:e7:d0:db:cd:df:
2d:fd:6f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:59:25 2026 by rpki-client