
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e53319e-d380-4312-a0b9-160103a89dea.roa
File: 9e53319e-d380-4312-a0b9-160103a89dea.roa (raw, json)
Hash identifier: sVpD7OeAOlJwswb5Wy/3Opi+Of8+bRx5HQukhl9fvhQ=
Subject key identifier: 59:6A:1D:55:A4:7F:F9:4E:AF:56:2E:20:BE:69:A0:84:4F:E4:D0:C7
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 79AB15E7A1980101E5D9947CA00D2778054961ED
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e53319e-d380-4312-a0b9-160103a89dea.roa
Signing time: Sat 28 Feb 2026 02:20:08 +0000
ROA not before: Sat 28 Feb 2026 02:20:08 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 150.222.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ab:15:e7:a1:98:01:01:e5:d9:94:7c:a0:0d:27:78:05:49:61:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 02:20:08 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=75352714dd9ae78068c9096859121adeb2edc26297770e1a0c40d410da706a80, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:5d:3a:72:8b:e8:09:41:86:17:e8:28:5a:
72:91:c8:c0:33:00:45:3c:c0:77:f0:3e:11:fb:ba:
06:4d:a0:1c:7d:43:ce:86:13:43:f2:5d:39:d6:7d:
f0:17:58:79:c8:be:b6:df:6c:00:80:9f:1e:ed:bc:
a5:a3:39:2c:d0:d3:87:57:6b:1a:74:ab:40:d4:a5:
ba:0e:4d:64:f3:e4:c1:b0:c9:10:d3:a8:f7:80:a1:
15:9c:1b:0a:69:2f:c9:81:f6:24:b1:8f:f6:cf:af:
1a:e8:40:99:e9:e6:08:fc:29:8f:5d:f7:0d:da:82:
08:46:e3:fc:7d:04:ed:c1:a8:d1:2e:cb:77:1d:c6:
74:68:00:47:8f:c3:0b:b0:13:1b:77:c5:f3:89:89:
ae:91:78:fc:5f:34:d1:ef:29:21:bc:24:4f:38:19:
3f:cc:88:77:9a:fd:db:a8:29:d9:ed:f7:74:f2:8e:
f8:3e:eb:06:f9:e3:51:7d:ff:a0:d3:08:21:90:7c:
e5:9e:c6:d9:66:62:41:a4:e7:37:cc:e7:c7:12:6a:
0e:92:ee:3c:e3:62:93:f3:dd:9e:24:23:64:87:8d:
5a:c3:8c:5f:a6:07:b4:77:16:4e:15:ed:cb:6e:86:
8d:c5:05:f7:60:cf:aa:69:a0:0f:97:9a:e3:59:4c:
05:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6A:1D:55:A4:7F:F9:4E:AF:56:2E:20:BE:69:A0:84:4F:E4:D0:C7
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/9e53319e-d380-4312-a0b9-160103a89dea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.222.211.0/24
Signature Algorithm: sha256WithRSAEncryption
71:2a:06:00:56:20:60:05:1a:f4:8c:b9:e5:90:f9:04:8f:d6:
5f:1b:69:cb:4e:16:8b:19:0a:de:75:96:d3:88:b6:02:4a:b7:
b0:48:d2:31:ed:10:c4:d3:2c:35:3f:44:e9:d6:e4:ef:28:84:
3d:01:32:26:ad:0a:3f:bf:e1:77:21:24:ec:56:fc:9c:ca:6a:
b0:d3:bc:3d:86:b4:9f:fc:86:d0:9f:ed:79:34:ec:50:f1:43:
ca:c1:df:6d:1c:eb:fe:49:8c:7e:15:0e:56:e9:95:57:6c:ba:
31:b8:bc:a2:32:de:53:86:f7:09:7f:be:60:9b:31:17:f8:94:
e9:6c:ae:52:7a:39:6b:01:9e:58:66:2d:61:d6:8f:fe:f9:1d:
b8:fc:ef:34:1d:a6:af:ea:5c:b7:f0:0a:c8:c2:f0:13:92:df:
98:1d:b0:0c:89:91:b4:30:b1:6c:2e:5a:f8:a4:b9:4a:7c:c4:
38:b7:ce:81:62:58:66:7d:6b:16:dc:ca:eb:9d:d9:a9:67:66:
b6:71:5f:5d:ca:28:28:11:2a:2a:43:97:24:4f:84:e5:b2:5a:
ba:1b:8b:df:32:46:ad:30:38:cf:35:31:48:2f:72:f4:9c:99:
0d:3e:7f:3d:6a:8a:a5:d5:42:d9:43:b7:13:e2:6a:ed:ff:b9:
5f:c7:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:48:47 2026 by rpki-client