
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58c1be24-6dc5-429a-9dec-97ca8a39e33c.roa
File: 58c1be24-6dc5-429a-9dec-97ca8a39e33c.roa (raw, json)
Hash identifier: zqb3MdrGnAQKmA++LfVmebbaS/BnOGzQECH0hiP5K2A=
Subject key identifier: B5:51:B6:C6:C6:07:63:1A:40:86:8C:DF:35:5E:55:72:0F:12:D4:37
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 60646D418814FFC7EB418F8E7BA77AC748CCF86D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58c1be24-6dc5-429a-9dec-97ca8a39e33c.roa
Signing time: Tue 19 May 2026 02:50:53 +0000
ROA not before: Tue 19 May 2026 02:50:53 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 161.206.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:64:6d:41:88:14:ff:c7:eb:41:8f:8e:7b:a7:7a:c7:48:cc:f8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 19 02:50:53 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=f2bc8a3d166908a07e1d4448de30ca63f269563d80337cc14bcc04935c1553ba, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:12:41:9d:a4:7e:c1:4d:e2:36:c6:65:46:d9:
72:fc:fb:37:b7:44:d1:09:c4:42:1f:53:63:22:86:
8c:ac:2c:40:a7:73:c9:e9:90:df:b6:24:19:04:1e:
98:1c:70:d2:a1:5a:c9:70:44:f2:a1:24:eb:7f:86:
02:a3:75:54:90:0a:d2:97:20:85:f8:ec:dd:fe:01:
a6:81:c3:b5:61:e5:db:18:c1:f5:cf:46:02:97:df:
22:d0:00:cf:60:be:e6:21:8e:1f:ce:fd:82:9e:dd:
49:1b:7d:6d:74:e6:18:a2:3b:63:89:71:60:ed:b8:
c2:b2:dc:2e:0c:95:16:8e:b9:1f:6a:37:fe:05:87:
8b:59:5c:fa:09:e1:da:74:9a:a1:1a:8c:dc:f9:3c:
39:2e:5d:c9:50:3f:62:28:da:2f:a1:ae:7e:9a:37:
a3:15:d4:b1:f9:ca:b1:ae:0f:78:51:b2:56:68:4c:
17:f9:81:a1:35:10:f5:0a:a5:cd:30:51:da:7b:38:
6e:a1:70:2b:99:b5:e2:3c:58:c4:76:04:6d:c4:11:
db:da:c4:2e:ca:f1:7f:7b:21:29:dc:83:73:41:50:
a9:e5:9d:54:17:6b:30:89:e8:57:d5:25:1d:6f:51:
1f:f5:a4:61:35:e2:85:dd:a8:3e:ad:3a:5e:07:f1:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:51:B6:C6:C6:07:63:1A:40:86:8C:DF:35:5E:55:72:0F:12:D4:37
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/58c1be24-6dc5-429a-9dec-97ca8a39e33c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.206.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:e3:c2:8d:21:b0:e5:fb:bb:e3:33:f6:e1:17:24:ae:c3:ce:
1f:3a:d6:8d:32:94:f4:9f:9d:14:35:43:b4:2c:ba:b2:da:3a:
0d:a9:72:80:f4:f0:b4:63:ea:a1:e2:36:26:16:db:77:4a:52:
07:ff:da:06:72:98:61:cd:b9:79:ec:db:5f:00:4e:c6:4c:9a:
21:b9:44:67:df:cd:73:73:aa:14:93:74:e0:f4:8d:0a:df:4b:
c6:f0:f6:bb:6e:b4:f7:a7:85:fa:af:1a:b2:9e:32:ea:47:91:
b8:ae:dd:b7:13:26:1b:01:d7:57:20:3f:4b:c0:1b:96:ea:31:
1b:70:15:19:59:9c:84:55:06:a2:5f:98:f0:c2:87:9c:74:90:
86:cb:c1:91:e1:d8:5c:9e:31:a7:ba:ce:09:f9:28:9f:cb:c4:
35:a8:93:72:6b:5d:44:94:10:47:c1:ad:b8:98:4b:74:82:4d:
b8:de:9e:f5:45:0b:70:49:77:0c:fc:32:bc:25:5e:30:c9:c7:
5c:b7:4c:6f:83:00:75:4d:e4:85:e8:4a:a4:6c:fc:d1:0b:d7:
0a:79:24:7d:b2:cd:fa:0e:d6:a8:b5:fc:e0:37:3d:a0:94:e9:
8a:27:f8:9b:1e:c4:b2:e4:74:f3:39:76:c3:72:cd:f2:3d:d6:
13:54:40:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:30:48 2026 by rpki-client