
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56685d8c-40ae-464e-aea3-a65888fef63d.roa
File: 56685d8c-40ae-464e-aea3-a65888fef63d.roa (raw, json)
Hash identifier: zCPUTa3paB8/PGIKdeQ2IHHwgEr3Q+47RxIJC4Rqa48=
Subject key identifier: 81:94:68:37:1C:DC:91:5F:01:58:D0:CD:1E:DC:98:60:2F:B3:CB:29
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 36A167C1CC17CBEDB6756CE60C66E15F4C521FB9
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56685d8c-40ae-464e-aea3-a65888fef63d.roa
Signing time: Mon 26 Oct 2026 01:02:53 +0000
ROA not before: Mon 26 Oct 2026 01:02:53 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.94.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a1:67:c1:cc:17:cb:ed:b6:75:6c:e6:0c:66:e1:5f:4c:52:1f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 01:02:53 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=c14a9e5e598116658aed794ffaace8a95465a1b88de77fb50ee7b98be878f2c0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c3:99:26:97:7c:58:dd:cc:e4:0a:02:2c:7f:
25:65:1d:9d:ef:39:4e:f2:2a:b1:b8:0c:b3:ea:2d:
ec:94:e8:54:b1:be:87:79:45:68:6f:2e:17:b0:35:
cc:f2:47:a8:72:06:e9:a5:f1:25:08:a6:9b:b7:5a:
47:74:ea:3d:2d:b9:e1:ab:29:f9:e7:63:60:96:58:
1f:f2:38:72:93:54:df:bc:86:9d:bf:bc:10:86:d8:
24:4d:66:65:79:66:97:50:7d:f1:45:06:96:03:26:
8a:a6:40:d6:aa:40:40:4e:e0:1b:86:8c:40:88:80:
e2:c7:e8:d9:24:d1:31:d3:d0:93:46:81:25:e5:51:
9c:f8:86:80:22:56:c3:e8:5c:2a:87:f5:14:13:44:
80:30:b9:e7:26:d3:fe:02:e6:4e:87:14:69:8c:3c:
25:a1:55:50:7e:ce:6e:94:36:0b:6d:3a:ea:4a:a9:
8a:e1:e9:77:68:3a:ba:e5:d4:e8:23:90:2a:2a:ef:
ee:bf:b3:0c:30:59:f7:7b:81:30:f3:d8:43:b0:56:
c7:91:9d:8a:7d:6a:aa:da:21:fd:db:e6:55:59:7f:
81:1e:c0:37:1d:80:1b:98:4a:93:fb:4f:7c:af:70:
8f:f2:2b:13:df:a3:d6:cf:be:05:20:46:aa:89:6e:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:94:68:37:1C:DC:91:5F:01:58:D0:CD:1E:DC:98:60:2F:B3:CB:29
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/56685d8c-40ae-464e-aea3-a65888fef63d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.94.80.0/20
Signature Algorithm: sha256WithRSAEncryption
84:59:8d:22:b9:d7:61:79:7f:df:bf:84:7e:3f:c5:45:61:4b:
25:f8:56:fc:ca:e1:c7:4e:4f:9d:7a:63:9b:91:fa:70:69:b5:
a5:e0:a3:ed:53:89:ad:99:85:00:e9:ff:d3:8b:50:fc:b7:c3:
14:10:57:eb:52:83:3e:ee:0f:9a:38:47:1e:4e:db:d2:37:3c:
5a:5e:79:a2:83:e1:bf:c9:4b:fc:9d:63:eb:e0:b5:d1:27:ea:
2c:45:7c:a8:74:0a:df:cd:03:98:8e:fc:35:08:8a:63:36:5b:
0a:68:62:86:65:3d:29:e2:ec:f4:7d:d9:16:85:38:81:32:37:
1c:9c:d1:26:06:a2:9c:c8:73:b6:81:77:84:53:6a:a1:a1:6d:
bf:15:d9:50:ab:4f:cd:82:ec:4e:d3:0d:b1:f9:83:a6:61:c8:
65:29:e2:b7:ca:e8:70:2f:f2:5e:bb:a6:fd:9c:10:9a:96:80:
cd:0d:cd:b3:41:41:c9:e8:e1:2b:d9:b0:f8:33:63:90:78:96:
0c:38:5f:1f:ba:2a:ee:57:4d:23:59:aa:92:b7:eb:ca:b5:73:
f0:67:95:cc:71:95:22:d5:e7:c5:69:61:9b:c8:45:67:37:8a:
e7:1d:49:a1:d9:99:f9:cd:37:00:a0:f3:a0:d5:78:84:28:36:
a1:3d:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 01:07:02 2026 by rpki-client