
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5177b928-5de6-4c30-97fe-987774456daf.roa
File: 5177b928-5de6-4c30-97fe-987774456daf.roa (raw, json)
Hash identifier: n0se2tWzi8PyT9P4qF1o09A/HtiQbqwQDI71DEVLR38=
Subject key identifier: 7E:99:60:4F:15:0C:67:08:32:3A:70:95:9A:F4:03:BB:45:D7:0D:38
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6B9EC10E9FDCE85801B415EAB79E7BBB94F124B0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5177b928-5de6-4c30-97fe-987774456daf.roa
Signing time: Thu 14 May 2026 01:30:47 +0000
ROA not before: Thu 14 May 2026 01:30:47 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 144.220.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:9e:c1:0e:9f:dc:e8:58:01:b4:15:ea:b7:9e:7b:bb:94:f1:24:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 14 01:30:47 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=ffbf862fc047aeceb54f5166bfff695a4c9e3184a2569601b4265d09d4ade341, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:47:14:89:bf:6f:4a:b8:f3:8c:38:1c:20:ea:
1e:db:af:4d:ba:28:08:92:c5:54:d8:65:15:85:45:
14:13:86:47:6f:e2:43:47:e9:55:fb:b6:99:1b:4e:
e1:7b:17:b8:59:ff:0f:83:b6:b6:1b:61:90:f6:d5:
b4:47:d9:05:d7:ab:ce:bf:ed:48:9d:3f:fb:74:58:
1e:bd:12:4a:cc:cb:c0:3b:30:b0:ed:07:ae:e7:17:
a2:7d:8d:f5:73:b3:59:f2:73:a7:eb:33:d9:77:2a:
71:fb:5a:b6:a1:57:0d:c1:57:e5:f4:93:50:2f:0c:
67:b1:60:8e:01:10:34:63:39:d0:9f:33:33:76:e7:
6e:c0:8b:93:a9:35:57:2a:f6:33:48:73:ce:8a:64:
4a:a0:f4:92:ed:52:00:c8:96:dd:c9:86:64:eb:07:
a8:a1:ff:d5:a0:69:c8:ca:20:e2:c7:2e:93:4e:3c:
a4:c7:bf:b1:0b:b0:c4:12:38:7b:7e:b8:7e:2b:95:
d1:eb:d0:fd:98:c8:64:c8:06:05:8b:e2:0d:98:9d:
50:7c:cf:64:8f:a0:65:c3:03:35:33:96:e5:e0:92:
3e:5c:0d:97:e0:76:fd:8a:d0:03:ef:9a:45:db:53:
6d:35:99:9d:70:b7:51:15:69:ab:ff:f6:2e:28:f2:
48:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:99:60:4F:15:0C:67:08:32:3A:70:95:9A:F4:03:BB:45:D7:0D:38
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5177b928-5de6-4c30-97fe-987774456daf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.220.25.0/24
Signature Algorithm: sha256WithRSAEncryption
64:4a:92:47:ed:38:e9:31:03:98:4a:e7:5b:0a:88:9e:25:d6:
4f:0a:94:29:e4:5d:e1:53:02:3b:7a:ba:57:12:fb:7c:f4:92:
3e:cf:a6:e0:d2:15:19:ce:d0:19:53:34:09:54:a0:b2:07:eb:
98:5e:d6:b6:34:73:a6:ef:35:80:c6:a0:00:3d:0a:9e:19:ba:
31:48:57:20:48:f4:3a:95:17:dd:f9:11:74:f9:94:94:74:02:
78:ea:7c:38:82:65:bf:9f:8b:11:4b:50:08:8b:e0:16:6d:5e:
ac:d8:97:62:4f:c6:9e:3d:23:e2:82:67:fc:54:2e:a1:6e:52:
10:d5:55:71:02:2e:a7:87:40:4c:35:33:f4:3f:cf:92:4f:1d:
e3:24:97:0d:60:33:c0:13:a8:c8:2f:d7:6d:a4:99:32:13:09:
26:68:9d:7e:bf:61:d3:23:1d:0b:9b:c2:ae:7b:6e:cf:fc:ed:
1a:c8:c2:af:2d:1f:47:a0:33:db:fd:32:b2:8a:8e:03:ea:6b:
ec:1d:9c:47:11:48:af:c9:29:63:99:1a:76:d1:b7:4b:57:af:
57:38:a2:2c:5d:cc:a6:9a:23:1a:5e:61:f7:f5:a6:a9:23:04:
af:8b:47:4b:c2:af:a7:44:9d:44:96:c8:7c:9e:76:ec:54:71:
0a:8b:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:36:07 2026 by rpki-client