
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9584a98a-7e4f-4b82-966e-8ad0a09a2beb.roa
File: 9584a98a-7e4f-4b82-966e-8ad0a09a2beb.roa (raw, json)
Hash identifier: blx44ExHlbOiQX1mmfsFslDJWRwN4014ztQKCfglYlk=
Subject key identifier: AC:BF:47:97:C9:D1:BE:64:5D:A5:04:24:2E:69:00:FD:23:F4:B7:81
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0FFA7F8B375BF314EAC5C1C1F5F868657D1E6151
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9584a98a-7e4f-4b82-966e-8ad0a09a2beb.roa
Signing time: Thu 22 Oct 2026 03:50:39 +0000
ROA not before: Thu 22 Oct 2026 03:50:39 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.228.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:fa:7f:8b:37:5b:f3:14:ea:c5:c1:c1:f5:f8:68:65:7d:1e:61:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 22 03:50:39 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=733c2943ad50cfe4adc1f1d072421ab5e655759eeb780c90f83ee7d0fe22f32b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:8c:e0:ab:62:57:9b:a8:7d:32:13:e0:b3:5c:
26:84:88:9a:09:60:75:37:b4:d4:c3:9d:f8:4f:45:
68:d9:7d:e8:63:2b:95:2e:cf:12:24:2e:57:75:ec:
2c:a9:93:4f:8e:cc:18:77:f1:95:f4:ee:03:4a:1d:
56:bf:96:85:bb:a6:61:83:ff:22:b4:ae:fb:30:f0:
c6:03:71:83:ef:36:07:a5:75:8c:29:17:38:5c:4f:
65:ab:b8:4a:a9:15:63:4d:39:17:2e:71:b9:12:8c:
c3:8f:1b:2a:12:cd:dc:83:7b:22:e3:94:fb:e5:ef:
b4:d7:4e:7e:d3:3b:03:26:33:bf:33:20:6b:72:3c:
38:17:01:c0:9f:da:fc:7c:73:aa:7f:68:31:62:0b:
f1:91:16:f0:5e:8f:a4:bb:3d:c9:d1:62:f1:75:80:
13:3a:49:06:c5:0a:e5:29:df:a5:d2:38:c2:0c:c4:
74:cd:90:68:97:c7:4f:44:12:00:b6:1b:db:63:ee:
10:51:3f:b2:d6:67:6b:b9:d3:ef:fc:3e:c6:67:3c:
20:c1:d4:0f:fc:e2:f3:9f:2b:de:44:51:09:ab:d3:
38:80:51:da:e7:13:cb:95:ed:c4:6a:f5:e8:9d:eb:
74:d0:d8:56:4a:dc:23:ef:c9:c0:8e:ef:32:5c:3b:
b2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BF:47:97:C9:D1:BE:64:5D:A5:04:24:2E:69:00:FD:23:F4:B7:81
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9584a98a-7e4f-4b82-966e-8ad0a09a2beb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.228.160.0/20
Signature Algorithm: sha256WithRSAEncryption
26:d2:cd:80:ab:1e:f1:56:d8:b0:fc:e6:7a:ec:f9:81:cc:81:
df:5f:b8:ab:ba:37:96:bf:22:c0:f3:cc:96:67:23:6e:25:d7:
a9:18:6a:d9:6f:8c:e0:94:84:da:7a:1e:14:f5:d2:ce:b7:3d:
d9:31:64:31:6c:c5:18:e1:9b:4d:06:17:6c:35:3d:f0:09:ca:
c3:11:82:ee:57:e3:ab:52:d3:e1:d5:e2:ac:32:09:f9:fa:28:
34:c5:a2:b0:7a:4a:f3:e1:4d:25:53:a0:ee:75:dc:6b:ea:14:
8e:56:d1:84:d1:5b:e7:68:d5:13:45:c0:eb:77:79:5d:64:01:
31:ee:5b:56:74:2e:04:29:8a:9e:2b:4f:34:21:4e:2f:cf:90:
18:28:1e:1c:e6:a6:c3:eb:10:a8:5c:4b:10:d5:fd:88:17:c7:
f8:b7:3d:6d:38:fb:2d:0f:bf:0c:d1:aa:5d:5a:ed:91:85:d5:
67:92:a0:c5:06:a4:4b:38:63:2a:21:ab:17:4e:a3:6d:5f:e6:
d3:1f:bb:dc:c1:20:30:1c:18:9d:67:66:c4:60:09:72:e8:51:
94:09:3d:c5:34:2b:b3:0f:ea:83:31:81:e4:c0:ef:3c:7c:f9:
e7:9b:72:8d:1c:3f:0a:f8:fd:31:b2:97:df:a7:c5:f8:d2:d9:
12:07:e8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 23:55:25 2026 by rpki-client