
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52ecf9e8-37dc-4da9-a4de-5a02ec3e81a3.roa
File: 52ecf9e8-37dc-4da9-a4de-5a02ec3e81a3.roa (raw, json)
Hash identifier: cEhMqp0Yf5LaCvIp4uLaId01pgz8qQSLr/5HBIw097I=
Subject key identifier: 72:27:BD:BA:3A:1F:CC:37:BA:5F:94:F6:DC:99:0C:C2:2B:1F:EB:DF
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 5937E8FDA3174544F9C4B865074B4BDB81DCCE46
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52ecf9e8-37dc-4da9-a4de-5a02ec3e81a3.roa
Signing time: Sat 28 Feb 2026 01:30:56 +0000
ROA not before: Sat 28 Feb 2026 01:30:56 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 3.172.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:37:e8:fd:a3:17:45:44:f9:c4:b8:65:07:4b:4b:db:81:dc:ce:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 01:30:56 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=212369fe663eb7a9175f82283abcda2fe04a4b7983f4b91c5ed5fb6e97879355, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:06:64:f4:d7:f9:42:1c:c3:81:77:56:e9:4b:
15:a2:35:fd:a2:f9:76:d1:03:f4:8c:08:8a:11:31:
7b:b1:2f:b8:78:09:2f:b8:e8:0b:52:6a:d1:4f:fa:
23:f5:8a:6c:bb:5b:58:ba:42:2a:72:37:cd:e2:0d:
2d:32:da:81:85:0f:1c:b0:3b:8a:c7:cb:23:c9:29:
bf:7e:84:5a:62:94:73:83:b3:e2:0f:94:13:c8:4a:
ee:7f:58:28:9a:6e:09:ce:b0:84:f9:d4:2a:5d:8f:
fc:5c:7d:57:26:27:a2:6b:9a:69:ba:ce:ae:d0:2d:
2f:ac:d3:3a:3d:d0:f8:b4:b6:68:cc:71:fc:8f:2e:
02:25:1f:90:ea:10:6a:80:98:df:b2:68:4f:a9:44:
c5:69:bc:08:b7:e7:c2:3d:95:bf:8f:29:e8:0b:52:
ae:19:3e:c7:36:23:ba:84:76:c2:2e:5c:94:d3:3c:
97:70:a7:6e:41:18:e4:bb:9c:36:56:ff:a8:83:ae:
18:5e:7c:6c:a5:65:5b:24:54:90:18:73:ee:d8:d0:
6f:36:7d:45:65:7f:f7:a2:e3:5c:6b:c8:7f:32:64:
2c:f1:2e:ed:b9:5c:bd:8e:5b:22:8d:69:af:3e:0e:
2b:e1:e9:45:63:19:d7:e8:5d:25:a5:1a:95:82:74:
94:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:27:BD:BA:3A:1F:CC:37:BA:5F:94:F6:DC:99:0C:C2:2B:1F:EB:DF
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/52ecf9e8-37dc-4da9-a4de-5a02ec3e81a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.172.64.0/19
Signature Algorithm: sha256WithRSAEncryption
7e:4c:06:58:00:3e:04:c8:a6:8f:99:dc:4f:86:89:57:b9:d3:
22:5a:13:b1:f7:57:2c:30:4f:b7:81:76:ed:b9:e0:4b:ab:b5:
61:a8:b5:de:86:54:6b:67:33:3b:3f:a8:2f:1f:d3:8e:c4:0e:
3a:51:5f:e4:a0:28:2a:80:43:b8:2d:c6:f7:87:f4:7a:ea:0e:
ee:b7:c2:65:48:c8:fe:cb:07:30:7a:63:67:cf:96:2d:95:ea:
88:79:ef:d3:3c:8e:8f:82:0a:81:82:2e:a5:30:4c:97:40:a8:
e6:ce:83:27:f6:95:05:a8:57:93:05:d1:3e:f6:50:8a:23:6d:
ee:1b:a0:ca:54:77:fb:0b:3d:c8:ba:0f:a4:7f:77:80:37:a9:
a8:78:4d:26:1d:ab:cc:40:bf:0c:b3:ea:fa:e8:ff:e2:c9:97:
76:ba:f9:b3:a2:c6:31:11:f5:26:03:60:55:0a:76:5d:a9:f4:
b5:df:8d:a6:a2:ea:84:db:ac:2c:f1:f5:a0:01:96:bd:da:28:
d5:98:cd:da:64:0b:28:58:53:49:21:64:48:96:b3:1e:41:ee:
42:66:51:68:08:fc:30:6d:a4:19:27:e1:0c:b4:7e:71:ec:ea:
00:a4:5b:e9:5d:5e:58:32:f2:33:af:1d:44:25:56:cb:6d:36:
82:6e:99:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:20:28 2026 by rpki-client