
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/783224d3-26bc-4332-8b0b-f264d1d51c4d.roa
File: 783224d3-26bc-4332-8b0b-f264d1d51c4d.roa (raw, json)
Hash identifier: 3ECEBSc64lVw5o8y9gy4x3tukQpiiucoCIpPxVfsMkY=
Subject key identifier: 77:CC:59:8B:CB:28:E3:FA:FC:5D:E1:A4:B0:7A:75:FB:C2:51:1D:CA
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4EF0840BD19744CF985798D415150ACFEAD91B94
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/783224d3-26bc-4332-8b0b-f264d1d51c4d.roa
Signing time: Mon 26 Oct 2026 01:40:06 +0000
ROA not before: Mon 26 Oct 2026 01:40:06 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 54.221.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 07 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:f0:84:0b:d1:97:44:cf:98:57:98:d4:15:15:0a:cf:ea:d9:1b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 01:40:06 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=a6398d465941c4105262b63d04c9fe984bf75cef8c368de3af13e3ba7102e3f8, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:80:f5:18:2f:c2:da:ff:6a:8e:9c:bd:db:
4d:44:d7:d5:77:52:1f:d2:d8:ec:61:64:2d:f5:f3:
62:16:87:59:fd:8d:f2:9d:3d:d6:b2:57:7b:92:e3:
a3:71:93:3c:56:d6:71:04:f4:07:b9:da:12:3e:9f:
3c:e4:b5:10:90:6b:71:89:fb:9d:c1:91:b1:12:17:
91:5e:38:f4:17:2f:50:33:53:42:d9:55:95:fc:52:
7a:fc:b3:d0:3b:c7:dc:ec:d4:89:0a:11:38:b9:7d:
38:53:6d:a9:69:0e:12:0d:17:be:97:40:e5:bb:41:
f1:bc:99:a6:94:3f:0c:f8:73:13:28:ae:eb:b1:98:
c3:82:b6:92:40:5d:16:b1:cd:4b:b6:f2:9b:8e:58:
18:8c:26:33:90:3f:b9:24:12:b9:41:80:ea:46:13:
01:a4:38:36:66:d2:5a:48:0c:a4:a1:6a:a9:b6:fe:
23:d2:68:c9:92:71:80:2c:a3:ae:e8:1d:2b:6f:b3:
ee:e1:ca:b2:53:25:81:10:76:95:f4:b9:38:55:5e:
42:e0:8c:82:17:a0:a6:64:dd:5d:83:81:8b:c8:d4:
75:23:da:37:5d:09:ce:49:a4:29:33:5a:29:f1:1c:
08:b8:16:50:20:87:ef:d0:8b:02:90:4c:0d:e0:1c:
c0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CC:59:8B:CB:28:E3:FA:FC:5D:E1:A4:B0:7A:75:FB:C2:51:1D:CA
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/783224d3-26bc-4332-8b0b-f264d1d51c4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.221.192.0/18
Signature Algorithm: sha256WithRSAEncryption
2f:00:64:ee:d6:f5:da:02:e4:44:6f:21:ef:31:32:f8:b3:f6:
b1:69:07:ad:2b:4d:ad:3f:3c:4d:df:ff:f1:0a:0a:11:57:5a:
df:e2:fa:2a:6e:20:be:88:86:1b:58:0e:19:b0:6c:72:e4:a6:
08:bf:40:6b:56:ae:da:2b:3c:51:73:08:36:6d:4a:55:1b:5f:
ac:87:68:5b:76:14:b6:98:2a:d8:3f:08:d4:df:b7:c1:21:d8:
04:2e:ed:93:94:ae:a6:1e:99:92:9b:ac:5d:81:ef:c8:23:52:
83:83:3d:89:50:80:25:fc:bb:49:97:21:d2:81:ae:a0:19:8f:
4c:fa:9b:b3:db:c5:9f:e9:34:77:a1:25:3a:bb:ec:80:09:42:
2c:02:a7:7b:d3:b6:51:2d:8f:3c:0d:f7:5f:bd:b8:24:69:cd:
26:f4:db:2c:33:d7:6b:77:8e:94:74:59:02:7f:ac:5f:9a:a3:
98:66:92:45:c1:05:bf:33:61:43:3b:e1:0f:23:f4:46:e9:73:
8b:ef:75:a6:6d:55:c7:4b:cc:78:72:95:72:de:5c:18:b1:4f:
49:c4:62:4f:c5:01:10:75:8a:b9:4c:33:0d:33:df:34:e9:20:
73:90:5e:6a:a7:7f:b2:18:f3:1d:35:e1:47:bb:96:6a:c4:36:
fa:65:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:21:47 2026 by rpki-client