
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/835deca1-dfe8-47db-ae46-cd26fc5f2349.roa
File: 835deca1-dfe8-47db-ae46-cd26fc5f2349.roa (raw, json)
Hash identifier: 23dFqtMRz7MUJeJy9AZsTHQD/V5xC3kdFbtUfP3rKMQ=
Subject key identifier: 65:F1:DF:DB:5F:BB:07:81:5E:E7:E5:0D:4E:72:17:3A:69:5E:D5:3C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 136C5C77CBAD587A27977FF6481CD77FD841C6B7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/835deca1-dfe8-47db-ae46-cd26fc5f2349.roa
Signing time: Mon 23 Feb 2026 00:30:16 +0000
ROA not before: Mon 23 Feb 2026 00:30:16 +0000
ROA not after: Sun 24 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.182.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6c:5c:77:cb:ad:58:7a:27:97:7f:f6:48:1c:d7:7f:d8:41:c6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 23 00:30:16 2026 GMT
Not After : May 24 23:59:59 2026 GMT
Subject: serialNumber=b1e42517e00bbd55ec43c951b56607bfb26106bea27902a5dbfc0ad73839dd7f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:94:04:47:d4:b9:e9:ad:21:75:fb:ea:b4:07:
46:2a:ac:5c:78:27:f4:14:73:22:3d:40:15:f4:1a:
5e:5b:da:77:fa:72:bc:5e:a8:39:d1:d1:b0:08:1d:
d5:69:2c:41:da:89:e9:17:42:40:55:6c:8d:f2:0e:
29:ce:41:16:9a:32:6f:87:ac:92:5b:63:4a:ef:e7:
07:3a:78:9f:c6:ad:75:8a:7e:62:dd:47:fb:3a:7a:
ff:ba:8b:b3:8b:21:eb:cb:0f:ba:a6:89:07:79:4f:
9a:1e:44:ec:1c:e7:b5:e1:8d:39:dc:26:99:1a:d7:
2a:ac:3b:88:f2:fc:eb:3a:97:23:e4:78:26:d5:a0:
44:b0:fc:41:09:14:d5:c3:f1:90:7e:8c:ec:ce:4c:
82:4e:4d:b6:9f:c8:f0:47:9f:c6:17:91:f5:b4:ac:
79:a8:d2:35:86:5a:17:22:fe:86:83:1b:52:fa:b4:
74:af:94:83:31:94:1d:90:58:e4:fb:45:2b:22:fd:
da:29:6a:f5:02:6f:32:25:54:a6:83:b5:38:af:e7:
d4:fd:43:11:d1:a0:93:c9:17:2d:bb:5e:a7:5a:2d:
f6:86:d6:2d:bf:4e:3d:05:a9:36:72:a9:65:93:4a:
a0:6a:ae:ff:4d:41:48:3f:8e:ea:3a:34:56:2e:bd:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F1:DF:DB:5F:BB:07:81:5E:E7:E5:0D:4E:72:17:3A:69:5E:D5:3C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/835deca1-dfe8-47db-ae46-cd26fc5f2349.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.182.24.0/21
Signature Algorithm: sha256WithRSAEncryption
15:9f:50:ea:07:1e:c6:c8:f0:08:70:55:b2:c3:1c:8d:45:2d:
6e:b6:ac:3a:ea:55:d1:e9:75:b2:ea:aa:13:8f:c7:52:9e:0f:
37:01:3b:07:10:70:79:d5:af:f9:5e:a3:cc:1a:fb:a9:d4:2f:
60:a3:06:e8:34:9b:49:48:df:55:7e:62:f0:83:55:b9:35:22:
b6:ca:bd:48:a1:24:b0:14:5a:9c:73:09:a2:88:0b:80:24:4d:
c2:72:69:e4:30:63:63:63:88:eb:21:de:80:42:cb:69:93:a4:
4a:96:f3:7a:69:14:7b:44:41:45:80:e2:1f:c3:a1:48:45:ee:
83:89:88:29:de:a0:28:f5:27:75:07:62:9f:24:d5:4e:e3:ad:
1c:13:72:82:a4:b5:9d:db:12:42:e4:54:bf:35:20:59:86:a0:
0e:df:08:b8:d9:37:3a:0c:00:45:48:aa:a5:c3:8d:d7:37:6e:
03:ff:28:8b:53:3b:ed:af:c0:73:c5:de:7c:71:42:67:72:f0:
e9:77:9a:0b:97:97:f6:5a:08:c4:3d:4e:b5:d1:d0:d4:7d:6b:
77:d9:42:4d:ae:15:df:ed:40:fc:f6:36:16:cb:15:26:0d:24:
6d:b7:c8:57:ea:56:3f:5c:09:b5:32:9e:c2:78:0d:5e:b9:d1:
d2:e6:e2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:42:45 2026 by rpki-client