
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c857cc4-21ac-4a34-a632-5ba94b580b89.roa
File: 4c857cc4-21ac-4a34-a632-5ba94b580b89.roa (raw, json)
Hash identifier: vZSCe3wlXh/JM5fEyjOQH9KvyBoajvZ2pPCCJvHBl70=
Subject key identifier: 65:51:FF:79:32:D2:A8:9A:E8:45:3D:A3:B1:D1:BC:C2:6F:00:FA:DD
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 27ED3DEED48C280C79F7D55AE40B1D6C29958DBD
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c857cc4-21ac-4a34-a632-5ba94b580b89.roa
Signing time: Mon 26 Oct 2026 00:50:09 +0000
ROA not before: Mon 26 Oct 2026 00:50:09 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 35.155.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ed:3d:ee:d4:8c:28:0c:79:f7:d5:5a:e4:0b:1d:6c:29:95:8d:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 00:50:09 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=166facae4da0f5ef4eea0f08f5faa48c2e240e3ccf0f98c905dee69c9fb52143, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:5a:7a:fb:f9:45:48:3e:b9:c4:27:bf:a5:
64:27:31:97:87:eb:14:93:15:68:ac:be:d2:60:a2:
3c:63:9d:09:d1:c1:47:3b:97:f0:33:38:71:ff:5d:
d5:1c:13:25:9a:ee:3e:4a:f0:df:52:8e:fd:d6:2f:
5f:31:8a:af:00:aa:17:d2:ab:6d:06:43:98:da:40:
96:88:5e:38:17:07:df:3b:24:0b:13:de:76:c3:6e:
5f:04:7d:0e:d8:a1:df:f1:31:b7:1d:ff:14:36:c0:
0c:58:f4:0d:41:1e:57:ee:f9:f5:26:c2:c6:cf:40:
84:32:2e:16:f2:89:2f:f7:02:19:d2:25:6f:fd:2d:
60:12:61:78:1c:d7:48:b2:c6:6e:d4:1c:19:ae:b5:
e2:01:ce:48:2d:ce:ce:d0:c7:c7:fb:18:76:6a:b6:
84:10:1c:37:c5:e1:9b:4d:36:01:49:46:67:23:f7:
5c:b2:9c:3a:e2:9a:dd:bc:32:3b:f6:fb:ef:89:a3:
f9:ab:49:10:9f:4f:3a:26:8d:a5:00:47:ee:92:56:
97:cd:d2:82:73:51:c1:81:63:96:9a:b2:c1:35:d5:
ab:16:2c:aa:65:88:68:84:47:c1:62:39:e2:ba:24:
cb:d8:c3:a4:57:f0:11:ab:bd:48:f1:85:41:5c:cb:
20:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:51:FF:79:32:D2:A8:9A:E8:45:3D:A3:B1:D1:BC:C2:6F:00:FA:DD
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4c857cc4-21ac-4a34-a632-5ba94b580b89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.155.0.0/17
Signature Algorithm: sha256WithRSAEncryption
52:a7:7b:0c:c7:16:e2:4f:43:c4:3a:85:24:52:e4:8c:fd:7d:
fa:be:8d:42:de:3f:a5:f7:d3:3b:71:38:f9:57:3c:e3:f8:d3:
9e:87:d4:7f:f1:a0:83:06:c9:c2:ff:83:37:d3:06:8d:26:d8:
63:24:7a:fd:24:41:e4:69:59:e8:5a:b2:ac:64:65:05:2b:28:
d4:4d:36:ac:4a:11:b5:db:d6:f1:d2:50:13:fc:57:11:a7:55:
93:62:5d:64:40:b7:19:f1:ce:63:37:b3:91:a8:42:d3:e7:e1:
b3:20:95:da:54:c6:ed:d3:9f:4f:6d:64:ce:ce:ae:a8:8e:b6:
ba:ee:57:98:9e:16:0e:10:47:3b:20:2f:ab:fc:18:61:f0:97:
64:0c:fa:27:1b:fe:57:3c:82:59:ba:14:2b:83:a9:6d:3c:20:
ff:45:1a:3f:70:18:11:50:31:93:96:83:ef:0f:8b:5f:75:34:
c7:52:69:c9:92:bd:ca:42:b9:f7:a3:e3:0e:9d:53:e4:51:d8:
f1:ea:00:7a:77:9c:ca:b9:3b:cc:48:d9:8b:47:a3:5d:d4:47:
a9:32:70:00:45:e3:e6:8b:db:5c:95:25:4c:17:1c:92:9d:fd:
7d:81:94:37:55:05:6e:f2:0e:19:5f:75:d0:4f:b2:80:9a:84:
f2:04:78:29
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJ+097tSMKAx599Va5AsdbCmVjb0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDI2MDA1MDA5WhcNMjcwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0AxNjZmYWNhZTRkYTBmNWVmNGVlYTBmMDhmNWZhYTQ4YzJl
MjQwZTNjY2YwZjk4YzkwNWRlZTY5YzlmYjUyMTQzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxbVp6+/lFSD65xCe/pWQnMZeH6xSTFWisvtJgojxjnQnR
wUc7l/AzOHH/XdUcEyWa7j5K8N9Sjv3WL18xiq8AqhfSq20GQ5jaQJaIXjgXB987
JAsT3nbDbl8EfQ7Yod/xMbcd/xQ2wAxY9A1BHlfu+fUmwsbPQIQyLhbyiS/3AhnS
JW/9LWASYXgc10iyxm7UHBmuteIBzkgtzs7Qx8f7GHZqtoQQHDfF4ZtNNgFJRmcj
91yynDrimt28Mjv2+++Jo/mrSRCfTzomjaUAR+6SVpfN0oJzUcGBY5aassE11asW
LKpliGiER8FiOeK6JMvYw6RX8BGrvUjxhUFcyyDLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZVH/eTLSqJroRT2jsdG8wm8A+t0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzRjODU3Y2M0LTIxYWMtNGEzNC1hNjMyLTViYTk0YjU4MGI4OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAcjmwAwDQYJKoZIhvcNAQELBQADggEBAFKnewzHFuJPQ8Q6hSRS5Iz9ffq+
jULeP6X30ztxOPlXPOP4056H1H/xoIMGycL/gzfTBo0m2GMkev0kQeRpWehasqxk
ZQUrKNRNNqxKEbXb1vHSUBP8VxGnVZNiXWRAtxnxzmM3s5GoQtPn4bMgldpUxu3T
n09tZM7OrqiOtrruV5ieFg4QRzsgL6v8GGHwl2QM+icb/lc8glm6FCuDqW08IP9F
Gj9wGBFQMZOWg+8Pi191NMdSacmSvcpCufej4w6dU+RR2PHqAHp3nMq5O8xI2YtH
o13UR6kycABF4+aL21yVJUwXHJKd/X2BlDdVBW7yDhlfddBPsoCahPIEeCk=
-----END CERTIFICATE-----
Generated at Sun Nov 8 02:58:27 2026 by rpki-client