
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b91128b-61d7-4601-94cb-2c3ae44885ca.roa
File: 5b91128b-61d7-4601-94cb-2c3ae44885ca.roa (raw, json)
Hash identifier: +IF7inqDbKIU5aI3taLn2fWzJ6kr/p3hpUg+g2O5GOg=
Subject key identifier: 82:84:22:D7:B8:AD:C2:9E:0E:45:49:AD:24:92:1F:AC:E6:98:BF:50
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 208AA7CFC33166C3752E4071B4986FE13E11B9A2
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b91128b-61d7-4601-94cb-2c3ae44885ca.roa
Signing time: Mon 23 Feb 2026 02:00:28 +0000
ROA not before: Mon 23 Feb 2026 02:00:28 +0000
ROA not after: Sun 24 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.68.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8a:a7:cf:c3:31:66:c3:75:2e:40:71:b4:98:6f:e1:3e:11:b9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 23 02:00:28 2026 GMT
Not After : May 24 23:59:59 2026 GMT
Subject: serialNumber=262b0beaa6f13c4cdd2d2c28384669cce20645543e4127db1fa05f1c1f5e8b08, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:02:c8:3c:33:e0:55:28:63:19:aa:4b:2d:6d:
e4:79:8c:ca:f4:22:ff:c2:21:a2:8e:8d:52:b6:55:
5e:50:5b:55:cb:97:22:06:5e:c0:55:99:8f:92:7b:
3d:a8:87:e2:dd:7c:df:28:76:54:1d:e6:66:fb:81:
74:36:de:dd:c5:60:95:00:94:e1:96:9b:be:23:6c:
70:37:25:35:71:1c:f0:e2:b4:7b:0f:d3:ab:eb:37:
3e:1b:e5:60:64:88:11:49:15:f2:e5:4f:bb:3b:f6:
90:0d:3e:9a:4d:ed:b7:f2:31:ed:86:60:af:86:34:
fd:62:17:c8:15:74:80:bc:11:36:9a:3f:53:5d:06:
96:59:92:ab:d2:69:5d:5c:2a:9d:d2:1d:88:f9:cf:
49:60:3f:0c:91:66:1a:f5:d2:e3:69:cb:00:53:c6:
5e:4b:78:d5:ae:71:2b:c0:ff:56:12:dc:20:8f:3f:
a0:7e:72:48:a6:5e:51:7a:be:3c:32:9e:3e:7f:45:
c5:a5:34:e6:30:6b:20:7e:24:45:dd:d3:25:10:53:
d8:20:86:be:8f:33:ff:b0:99:b0:12:f9:b5:50:b1:
c3:91:61:95:c7:bc:0f:0c:1d:06:20:14:af:90:70:
c8:f2:71:93:21:5c:08:d0:b6:7c:09:9f:15:6f:9b:
ae:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:84:22:D7:B8:AD:C2:9E:0E:45:49:AD:24:92:1F:AC:E6:98:BF:50
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/5b91128b-61d7-4601-94cb-2c3ae44885ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.68.121.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:43:63:e3:99:4b:43:e1:f6:bb:ac:6f:80:fe:fa:48:ef:b5:
6b:a2:83:b0:08:0b:b3:e6:cc:d6:d1:63:63:c4:92:00:77:dd:
cf:72:f5:b6:48:00:f5:fc:cb:3a:80:23:a4:6e:f4:5f:36:48:
8c:d8:2b:04:28:7f:a3:3d:af:38:cd:3b:36:c4:d1:74:f9:7b:
52:ee:f0:37:5c:6e:e2:ac:e6:80:01:2e:1b:c8:46:bd:e7:1e:
80:16:13:91:d2:c8:77:3c:cb:a3:47:24:f2:ed:58:cd:40:f8:
3e:78:eb:1b:72:28:21:21:ad:ab:73:14:62:b3:b2:3b:0d:31:
10:35:b4:d2:c8:55:35:9c:31:e9:8a:59:2d:24:a8:cd:e4:00:
af:e8:aa:ad:be:17:42:15:f5:7c:b6:c4:13:bd:40:39:f9:4e:
ee:5d:7f:fc:c5:ac:ff:ec:90:6d:c5:6c:d0:6d:c9:7e:83:34:
1f:87:98:10:da:90:1d:f0:8a:e7:7b:7c:13:a6:6a:23:75:6b:
1c:c7:63:13:bd:a5:b2:ca:ef:bb:02:7c:f0:d7:06:fb:69:0b:
ff:5a:c9:0a:b5:a8:f3:d1:32:41:35:24:60:71:ad:0f:75:ca:
d7:5a:77:f8:a3:60:a6:04:2a:90:0a:40:b6:1f:20:36:72:7f:
de:28:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:34:41 2026 by rpki-client