
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f6a78f3-4950-48b2-b237-acf6e74d5986.roa
File: 4f6a78f3-4950-48b2-b237-acf6e74d5986.roa (raw, json)
Hash identifier: cFAF1POv4JVpxggJ3YH9zjy49mH9zx92fiQgvm3CisM=
Subject key identifier: 00:8D:ED:EE:C0:52:78:63:65:09:07:D2:8C:22:55:A8:8F:C3:FD:C7
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 074F539DC7B377D8BA38D0AC2AB90F0772830448
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f6a78f3-4950-48b2-b237-acf6e74d5986.roa
Signing time: Fri 15 May 2026 03:41:17 +0000
ROA not before: Fri 15 May 2026 03:41:17 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.192.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:4f:53:9d:c7:b3:77:d8:ba:38:d0:ac:2a:b9:0f:07:72:83:04:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 15 03:41:17 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=8fc210dc2097fb74a07cdb37d742a89d498d73412bbdd6b0c5c9bf285b8e7cc2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:db:3c:05:54:2e:75:bc:a1:af:29:74:2b:
9c:fd:6c:ea:20:3d:7c:e3:64:cd:f4:70:33:e4:23:
1c:bf:1b:8d:e5:19:00:82:87:8e:ac:94:af:cf:61:
99:a8:7f:fa:7e:55:0c:c7:2d:70:72:9f:d3:05:ec:
7e:00:fa:9f:32:70:28:f3:46:26:c2:24:88:e2:6a:
7a:3d:ad:b4:ab:58:38:91:6a:af:39:98:5d:8c:f9:
5d:65:7c:5e:74:47:67:b2:f8:b2:23:95:cf:1f:46:
ab:83:1c:1c:3a:c2:ae:4f:a2:7a:76:cc:c3:48:61:
67:f4:1a:c4:fb:10:a9:79:8e:98:91:e6:7b:24:9c:
3d:1b:dc:ea:3d:44:12:2a:2e:2a:5c:5d:2d:02:8b:
b1:5d:58:bc:11:83:29:b5:1b:14:2a:39:7b:c8:5f:
9b:ae:b7:71:6b:f9:f6:87:ba:57:7c:70:56:06:02:
91:9e:6f:32:91:b5:a6:87:a7:6d:50:77:0c:f8:44:
48:82:c4:fe:32:06:9f:66:6b:fe:10:bb:a1:30:f8:
7a:25:e9:c8:a4:19:e5:02:bb:b7:98:96:6c:cb:3a:
eb:87:9a:f8:97:28:62:64:6b:29:54:ee:32:27:0d:
8f:21:e1:b5:dc:e8:6b:90:d6:3d:aa:03:19:5d:e5:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8D:ED:EE:C0:52:78:63:65:09:07:D2:8C:22:55:A8:8F:C3:FD:C7
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/4f6a78f3-4950-48b2-b237-acf6e74d5986.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.192.242.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:63:9e:3c:28:e7:43:d8:7a:8d:36:90:e8:bb:02:3c:81:7e:
1d:72:06:2b:ce:5b:61:19:bc:69:44:6f:e1:27:49:26:25:93:
21:57:5f:ec:65:64:f1:d6:c6:3a:dc:5c:16:82:b1:4b:6e:3e:
83:53:ab:5e:93:15:f5:7a:5a:70:50:5f:48:b5:7f:59:56:7e:
27:6b:7e:83:24:9e:df:e9:2a:8f:c6:a1:25:88:e0:51:9a:bd:
bd:f7:4b:18:c5:8a:50:ec:3e:b5:ad:09:ab:72:1a:92:ab:81:
aa:23:9b:22:08:fa:40:86:b5:dd:01:46:38:17:c9:5d:90:83:
6f:3c:b0:16:74:76:22:51:e2:a0:a7:d5:8a:02:71:3f:43:91:
59:41:98:6a:b5:91:39:e1:fd:d3:d8:0b:07:38:a7:48:66:0a:
4e:e1:d5:32:21:3d:29:fc:cc:cf:13:5d:cb:87:e0:30:fd:38:
ad:9c:a4:af:e4:ab:d1:55:74:e8:3f:b3:56:1c:16:39:33:fa:
c3:be:8b:3e:ad:33:32:5c:3b:bd:9f:39:de:ec:f8:38:cb:20:
f0:ca:14:67:30:29:29:6b:fb:fb:06:d2:90:52:65:ac:bd:2a:
34:be:05:75:d3:65:a6:e7:41:24:34:17:0d:0f:33:2c:61:7f:
ba:6f:54:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:34:38 2026 by rpki-client