
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48af0c06-1032-42bf-a5eb-431cf69c221d.roa
File: 48af0c06-1032-42bf-a5eb-431cf69c221d.roa (raw, json)
Hash identifier: KiUXr7O+AcXDYvvjlgWUO23DRYTZxVsv7E2bU6jnYYE=
Subject key identifier: 32:C8:74:F6:49:98:8E:8B:27:DD:2F:9F:B5:6E:AB:DF:CF:3E:5D:86
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 21F8188EC9D34FF76CFA185D75394364B5B0F144
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48af0c06-1032-42bf-a5eb-431cf69c221d.roa
Signing time: Mon 26 Oct 2026 02:40:35 +0000
ROA not before: Mon 26 Oct 2026 02:40:35 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.64.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:f8:18:8e:c9:d3:4f:f7:6c:fa:18:5d:75:39:43:64:b5:b0:f1:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 02:40:35 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=bebb4ed90a3e56b4ab648012eeff30020e81c60ae5a3f7384e8a098f7dbcb353, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:ed:82:ac:68:5b:10:f8:5c:f7:2d:63:ab:
67:5b:3b:f9:5c:3b:99:c2:e4:74:f9:0d:40:87:24:
ae:97:e2:bb:23:04:7b:b3:6f:39:d7:dd:fc:7f:12:
bc:54:df:22:b8:c4:ae:fa:e9:5b:96:47:e6:96:45:
e8:74:6b:02:f7:13:e3:d7:ec:87:19:4d:02:05:9b:
07:f9:d2:77:49:ca:6d:13:d8:cf:01:35:45:95:f2:
23:b1:28:41:51:92:5c:2d:fe:ba:e9:08:5b:86:ec:
a5:c0:24:f5:d1:b6:84:ed:0c:97:da:f7:f0:f3:42:
bd:5b:5c:01:ee:ca:53:b7:d1:2f:6c:e6:11:fa:41:
fa:c1:ef:0b:1b:fe:db:37:17:22:28:86:e8:c8:f7:
2e:0f:bb:dd:cb:9a:0d:8e:5d:40:0f:ad:87:30:5a:
e4:88:fd:23:f6:d9:12:ba:41:a8:e4:8e:b8:da:30:
44:b3:63:18:1c:28:4f:17:0f:7f:3b:ce:cb:b7:57:
8c:cc:cd:a8:e8:4e:56:f8:60:ef:f4:64:fd:bc:92:
05:33:27:28:61:ee:3b:47:18:33:f6:6d:d0:20:ff:
86:6e:85:c8:d4:24:6d:bb:a4:e3:37:d0:2f:20:33:
51:04:92:32:96:ed:30:0d:ee:ac:17:f9:b9:63:74:
b6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C8:74:F6:49:98:8E:8B:27:DD:2F:9F:B5:6E:AB:DF:CF:3E:5D:86
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/48af0c06-1032-42bf-a5eb-431cf69c221d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.64.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a9:33:c2:41:fb:e4:fd:82:82:f5:80:45:1b:f2:39:3e:f1:36:
fb:d3:a0:d6:8e:1f:c9:eb:98:fe:55:51:1c:3b:6d:19:24:cc:
a9:67:62:17:31:d1:36:4c:d3:26:4e:ce:7f:13:6c:91:29:1f:
1e:49:33:e4:92:cd:92:5d:2f:6b:b5:5a:7c:58:de:09:85:c8:
ec:2f:bc:92:6a:b2:37:17:9f:d4:af:ab:b0:f0:e4:84:55:73:
c7:1c:c5:2c:16:d9:70:c4:4c:6c:42:fa:ef:bd:94:da:d1:61:
4e:04:74:d8:82:3e:e2:12:ef:a5:3c:09:b1:93:ed:c9:6d:1f:
53:6e:d5:d0:7e:40:ab:f3:65:5c:8b:91:71:f2:44:07:df:1f:
e8:19:20:fa:d0:24:67:6c:72:b4:21:1e:47:40:c6:84:90:31:
ba:23:74:9b:e0:de:fa:75:f0:0d:81:ba:1f:df:82:03:de:21:
28:99:19:21:c5:9e:83:bd:a3:98:73:50:24:57:13:98:d0:8f:
c7:a0:7d:53:c5:50:b9:df:d3:16:a7:3d:ef:47:53:7d:2d:61:
a3:67:61:04:9e:7d:b4:16:4d:12:67:3a:1f:f8:39:eb:d6:a1:
49:27:0c:63:03:3a:d4:10:0d:09:88:3f:78:fc:aa:06:a3:75:
1a:f2:6d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 00:05:45 2026 by rpki-client