
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/595c1e08-7b05-454b-9fe5-752047a140eb.roa
File: 595c1e08-7b05-454b-9fe5-752047a140eb.roa (raw, json)
Hash identifier: kYR0lJubd1k6w8QOR9Czzb6J/lSbTrckqoDbUXH4UI0=
Subject key identifier: D0:39:81:F3:AA:F5:45:F9:87:24:BE:73:E0:92:FF:B2:3E:46:BF:94
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 315163DE2BA1EED0E3D283F560B009F23D3DD8BA
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/595c1e08-7b05-454b-9fe5-752047a140eb.roa
Signing time: Wed 21 Oct 2026 00:20:55 +0000
ROA not before: Wed 21 Oct 2026 00:20:55 +0000
ROA not after: Tue 19 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 15.158.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:51:63:de:2b:a1:ee:d0:e3:d2:83:f5:60:b0:09:f2:3d:3d:d8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 21 00:20:55 2026 GMT
Not After : Jan 19 23:59:59 2027 GMT
Subject: serialNumber=95faed3c37794dcc9a29a57bb6badb48e61ccd4c91145b7dd24c3957c9f6637a, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d8:e4:8c:9a:17:25:c7:af:15:76:bc:9e:81:
68:df:33:c5:66:b5:bb:eb:e1:d9:00:16:e3:9c:2d:
db:91:c2:46:78:3d:77:e6:3b:82:d3:b8:79:6e:c9:
8d:1a:34:59:34:38:cc:ff:7f:32:96:a3:cf:57:16:
8b:ba:5f:e9:38:e0:a0:62:4f:38:64:ab:5a:2e:d7:
59:a2:0d:3e:cd:a3:5a:dc:61:b5:86:38:d4:66:90:
b3:be:e3:3a:58:9b:87:d7:71:bc:d7:7d:c6:7e:12:
19:52:ca:74:4c:ab:af:23:79:aa:15:11:f0:55:30:
5a:94:c8:df:34:6a:58:71:c2:68:ca:9a:d8:c6:96:
96:fd:00:ff:31:32:fb:4c:d4:38:8e:e5:64:81:4b:
d3:9a:4e:29:7f:83:b2:a0:d2:c6:79:b0:a3:81:35:
29:93:59:06:0c:44:23:3d:b2:dd:58:36:bb:3b:ec:
e2:d2:3c:8b:99:ab:0a:10:69:9d:4b:d1:e1:3b:05:
2b:56:49:5e:4d:c3:3d:f8:ff:93:c8:85:ab:85:9b:
da:73:ec:0b:f0:ae:58:f6:66:b4:34:72:cd:03:0c:
b6:b8:8c:8b:f2:ed:02:28:54:95:17:a0:f6:2b:35:
28:40:48:a8:5b:3a:b2:b8:ba:e7:69:70:b0:45:e7:
0c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:39:81:F3:AA:F5:45:F9:87:24:BE:73:E0:92:FF:B2:3E:46:BF:94
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/595c1e08-7b05-454b-9fe5-752047a140eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.158.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:97:ea:12:8a:a8:0f:47:b7:3c:92:87:97:1e:f9:28:9c:57:
aa:f8:f0:14:f0:58:88:65:34:f4:1d:0e:3e:01:70:cb:df:19:
df:11:ec:4a:71:8e:b6:9d:75:06:b9:6f:44:0b:3c:f8:bd:9a:
1a:1f:0c:45:2f:8c:19:47:6d:e1:db:12:e2:5e:53:a5:52:17:
75:ec:50:f1:78:32:df:1c:62:5f:74:5d:61:91:13:20:68:74:
da:51:8a:f9:bb:3f:27:52:21:8c:0a:eb:21:e6:6b:cb:2e:ac:
c3:08:c4:e6:ff:07:c0:5e:9c:90:d9:9e:b2:80:6b:6f:25:33:
d4:0b:fa:75:01:24:b2:f3:14:50:d2:80:6c:c9:90:d2:c0:2d:
f4:c1:b0:3a:5d:57:02:bb:05:d5:ff:bc:25:61:81:7e:a6:48:
e3:d6:6f:3c:40:13:bd:fa:20:60:aa:1e:a4:b5:f1:e7:cc:c9:
11:87:e0:36:77:1d:48:4d:a1:f3:69:f2:28:8d:e3:23:96:11:
00:3c:4b:50:2a:af:29:c3:d4:80:4d:f9:44:3b:2b:9d:9f:6d:
06:6c:c8:ec:e9:09:dd:0c:90:b1:3c:aa:6f:93:fb:bc:2f:56:
7e:ed:ad:bc:87:89:9e:54:80:3b:36:39:87:cc:84:7c:4b:9d:
b9:63:54:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 02:56:48 2026 by rpki-client