
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b77b7d32-4450-4dd0-8bb4-731dc9a326fe.roa
File: b77b7d32-4450-4dd0-8bb4-731dc9a326fe.roa (raw, json)
Hash identifier: Mb1QmrShCx0gww80qjuxZpPcGix6Ul0FAnslNuSU7ro=
Subject key identifier: 15:96:78:A0:DF:B6:05:C5:11:D5:AC:FC:CC:DE:F2:22:BA:F8:38:7E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2F2707A7C8CDC1C77C4EDCC4436E7674A3F5351E
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b77b7d32-4450-4dd0-8bb4-731dc9a326fe.roa
Signing time: Sat 28 Feb 2026 02:00:07 +0000
ROA not before: Sat 28 Feb 2026 02:00:07 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 3209
IP address blocks: 15.145.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:27:07:a7:c8:cd:c1:c7:7c:4e:dc:c4:43:6e:76:74:a3:f5:35:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 02:00:07 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=f1f9e73382333adf71cc38ee6daba6a551478491cb529dff6505e5cf661f765e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:c2:19:69:56:eb:fa:c6:2b:71:56:64:e5:
7c:12:85:07:ee:26:df:46:b9:64:cf:0b:e9:06:90:
6c:6c:a7:a2:d1:93:d1:4c:22:44:98:ea:4b:93:78:
33:f8:6e:58:66:49:8e:1e:e2:b3:a5:25:fd:3e:4f:
45:ea:89:36:07:6e:1b:46:34:6b:87:7d:93:bd:c5:
b2:b3:b2:1d:b0:3b:29:cc:dc:f9:74:14:01:84:38:
74:13:3e:51:9b:0c:a2:45:d1:c3:0c:cf:8b:a2:7a:
bb:18:61:93:d8:86:9c:4f:a5:12:44:7a:06:5e:b2:
e1:7b:e0:4b:80:ca:37:76:6a:b1:1e:58:80:44:ee:
60:d6:15:0c:ba:e3:bb:be:06:e1:63:d7:f9:70:62:
bc:a1:25:ed:7c:0d:e3:75:b8:13:37:a0:ef:54:67:
71:22:75:70:ab:8c:54:73:f2:af:4c:e4:5a:46:7b:
d5:fb:55:74:1f:7d:63:ee:ec:fa:a8:95:05:6d:29:
8e:59:9e:ba:cb:0e:cd:af:b2:d2:c4:19:93:cb:62:
14:7c:72:2b:eb:0f:5d:f9:09:d6:90:d7:76:6a:69:
c5:6a:dd:10:37:18:98:0d:9c:3a:b7:81:5c:bc:ae:
8f:89:00:fa:11:d1:b7:b8:0a:e2:30:e2:f2:c6:7d:
d2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:96:78:A0:DF:B6:05:C5:11:D5:AC:FC:CC:DE:F2:22:BA:F8:38:7E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/b77b7d32-4450-4dd0-8bb4-731dc9a326fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.145.12.0/22
Signature Algorithm: sha256WithRSAEncryption
77:45:5a:90:09:d9:e0:96:b5:7e:a8:7d:5e:c8:50:a0:b9:44:
39:9d:0b:42:44:53:f0:66:6a:bc:ce:9b:d8:50:c5:93:5a:05:
30:57:b8:16:95:2a:c7:f1:10:73:6b:07:df:1c:87:02:81:37:
7d:36:a4:50:6f:b2:93:4c:dc:d8:f2:b5:d5:8c:85:03:ee:b4:
19:e6:e8:9b:f0:3b:7b:aa:7a:2c:00:26:e4:56:df:d1:ea:02:
4e:e4:5d:cd:8e:7f:11:73:35:b6:e8:f1:1d:0a:fe:f8:1c:d8:
5e:09:ae:30:f0:2a:90:75:91:10:d5:bf:f6:f5:0c:ca:9b:78:
f8:58:33:d4:6f:01:ce:fa:cd:6b:b4:54:71:89:0e:3f:22:23:
47:06:bb:79:c8:2e:3a:6d:ab:1a:91:79:24:1c:2d:7f:a6:ab:
bc:dd:09:dc:3e:62:54:70:e0:65:9d:1d:9d:c8:c7:ef:ab:fe:
ee:a6:08:9d:ce:10:19:d1:ed:48:c6:b8:c8:90:cc:e8:34:26:
d9:9d:43:5a:17:a5:7c:3c:6c:85:a2:cd:1d:4e:cc:62:ee:db:
3b:cf:9a:da:1b:66:55:22:29:e4:45:fc:2d:d9:17:7d:71:b5:
dd:fa:e8:ef:c7:db:1a:5e:03:fe:f5:93:52:ca:17:2a:4f:f8:
34:77:b7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:40:23 2026 by rpki-client