
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ac81844-ca23-4121-ae8a-e939d12172d6.roa
File: 4ac81844-ca23-4121-ae8a-e939d12172d6.roa (raw, json)
Hash identifier: VDvfq2/jOvYJ3a6Zl5b7jBoB73SVo5+My51V0zqVi7M=
Subject key identifier: 97:1E:DD:8C:B3:6D:09:F7:AA:D6:6F:9C:7D:8E:0F:DC:79:A7:9B:4B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 052DCD99262180C4E40A4B18E1E83D0FBD695580
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ac81844-ca23-4121-ae8a-e939d12172d6.roa
Signing time: Sun 17 May 2026 01:21:01 +0000
ROA not before: Sun 17 May 2026 01:21:01 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.248.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:2d:cd:99:26:21:80:c4:e4:0a:4b:18:e1:e8:3d:0f:bd:69:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 17 01:21:01 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=7859a9156a38565207a0e4cc949aa17e48a861b690af10d7966770148193505c, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:fb:af:64:5c:6b:49:f5:4e:a9:84:b5:9b:
1b:59:45:ff:bd:bb:a0:08:1d:8f:65:4f:ef:9a:5d:
b2:39:93:98:63:ed:17:1d:ee:16:20:1d:24:c2:e3:
d7:98:e6:3e:72:f9:b6:f5:b4:8d:04:d3:44:cc:30:
f0:b0:52:6a:2d:45:df:b2:aa:53:91:30:32:93:94:
9c:48:7b:79:1b:db:77:94:bd:1f:21:fd:87:2a:ab:
23:9c:e6:78:87:7f:34:fa:c1:1c:ef:df:26:68:68:
70:9c:35:4b:4d:16:0e:04:4f:a6:54:77:9d:82:44:
a8:7a:a6:b3:ab:91:b6:b2:40:54:88:41:4c:96:24:
d8:8a:df:29:21:1e:9b:82:59:c2:a3:54:5f:6e:09:
3a:f9:df:43:b0:3e:b9:46:d8:25:93:9f:0a:53:f1:
8b:73:52:ef:46:d1:86:8b:08:a6:f9:b3:22:a8:9f:
cd:a9:34:61:30:50:35:76:c1:ff:9c:f7:b5:a7:a4:
23:b0:5e:b5:f1:96:35:9b:3b:fc:68:40:1e:10:48:
fa:a8:98:c2:32:ad:12:e2:9a:14:fb:f1:0a:5d:98:
d5:1d:62:fb:d9:66:9c:85:bc:c3:88:84:e8:bf:0a:
44:84:f3:9e:46:e0:f9:f9:bc:11:81:3e:6b:ec:14:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1E:DD:8C:B3:6D:09:F7:AA:D6:6F:9C:7D:8E:0F:DC:79:A7:9B:4B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4ac81844-ca23-4121-ae8a-e939d12172d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.248.59.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:65:ad:40:00:6f:6b:db:89:58:b8:4c:8a:0b:d0:06:2b:5f:
c2:b6:17:ad:f0:93:9e:be:4b:a9:8c:20:31:18:b0:3e:e5:98:
69:50:3f:79:3b:9b:84:ee:b9:a4:ea:39:e5:1a:b9:94:a8:a3:
e5:00:60:68:d8:a0:45:da:8a:56:94:09:d7:8d:16:89:71:8e:
ab:64:bc:6f:e6:30:5f:d1:ac:d1:aa:59:34:95:fe:3c:3e:66:
a7:37:cc:50:09:51:4d:79:9d:d1:8e:a1:73:94:c9:43:f8:6f:
79:e3:3e:cc:87:ea:1f:4d:d2:ef:21:70:f6:a8:ef:d6:d6:3f:
5a:ab:80:bf:8e:49:17:6b:47:fb:55:89:de:ff:bd:0a:cb:1b:
34:a5:d7:9d:36:56:a4:e4:d3:07:15:0a:f0:b8:95:8a:f5:55:
d6:12:73:4d:7a:6f:68:5f:1c:59:98:47:74:94:ab:c1:64:fc:
a8:ed:6d:33:eb:09:ad:40:26:1c:5c:9b:76:b6:e3:3a:37:a1:
5e:56:39:22:f2:97:89:5e:e8:13:e4:e8:3a:d7:e2:66:05:10:
b0:1b:9f:59:2c:e4:84:a1:22:af:45:27:a4:90:38:8c:a5:c8:
3f:48:60:5f:73:ca:0a:35:2f:7e:bf:34:87:18:23:dd:9c:dc:
5f:97:46:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:49:34 2026 by rpki-client