
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8953b1a-9748-4075-bb51-dfeb6f48ca4f.roa
File: c8953b1a-9748-4075-bb51-dfeb6f48ca4f.roa (raw, json)
Hash identifier: IBb6v0h2fTMQ0OBv8AaLmsxbhsTKnuLr1PsxeB77rxI=
Subject key identifier: 92:AB:C3:57:67:11:EE:E5:54:34:FC:22:A9:D9:65:33:89:EA:A1:3E
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 020942E5774E09F7F06B7AA69912D6B1E7C2AA19
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8953b1a-9748-4075-bb51-dfeb6f48ca4f.roa
Signing time: Mon 26 Oct 2026 03:20:59 +0000
ROA not before: Mon 26 Oct 2026 03:20:59 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 52.46.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:09:42:e5:77:4e:09:f7:f0:6b:7a:a6:99:12:d6:b1:e7:c2:aa:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 26 03:20:59 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=305589c1cd2e3e1818fddf65962f9d460e2fa246ccc69aea3290911b7b273062, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:7b:7a:00:ea:c9:44:4e:4b:6d:a9:87:22:
3c:51:2a:76:fd:b4:88:e8:1e:67:9a:47:a6:1a:70:
33:12:44:69:d7:66:ca:c8:4e:40:31:f7:66:c0:12:
20:e0:fb:4a:c5:73:14:35:05:8d:48:14:31:e9:37:
0e:11:4b:e2:db:a4:d5:38:0e:e6:5e:75:52:8f:9e:
2e:f2:36:b0:0d:6a:41:b6:d5:7f:7b:62:cf:d4:b9:
5c:3b:60:30:75:0e:17:e8:93:fe:32:79:a3:a8:0a:
45:09:2c:37:6e:88:0a:fc:b1:17:e4:b5:75:e2:78:
f8:0f:f9:9b:fc:3d:7d:cd:a8:1d:da:d5:53:8f:d5:
de:6d:b7:24:34:d5:14:2a:84:19:af:ea:e4:6b:15:
5c:75:b5:ac:b6:98:37:66:d5:87:3e:ef:34:8e:f8:
ac:a6:10:ae:b9:4a:12:67:24:2d:c9:e5:68:dc:57:
b5:f2:e7:be:2c:c3:09:7d:6b:d7:0e:64:c6:0c:c7:
90:bd:cd:6c:10:45:b2:c7:d2:1c:82:cf:7a:c8:0c:
46:ab:4c:cf:d6:0b:64:8f:43:3b:6b:67:30:1a:49:
40:8a:08:59:03:b4:48:9b:5a:dd:40:1c:67:6a:4f:
ee:64:b7:26:33:26:94:0a:fb:42:5d:bc:65:d2:9c:
c7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AB:C3:57:67:11:EE:E5:54:34:FC:22:A9:D9:65:33:89:EA:A1:3E
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/c8953b1a-9748-4075-bb51-dfeb6f48ca4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.46.240.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:c8:cc:f7:4e:e8:0b:85:a2:90:6c:7c:50:61:43:b3:aa:fd:
0c:e6:01:47:91:0f:de:ab:dc:ac:a5:7f:89:09:18:76:c1:3e:
75:d8:4f:b4:f5:2d:fe:74:86:95:32:d4:ad:e3:31:e3:0d:21:
3b:87:7b:7a:6f:2e:63:25:6f:87:62:44:cf:99:08:d2:e4:4b:
4e:98:73:49:da:75:29:e7:54:48:cd:9b:65:11:5a:7a:29:c2:
04:5d:59:48:00:17:35:89:dc:b8:8b:1b:ca:85:02:2f:33:27:
de:b9:b2:62:dc:c2:aa:88:1a:35:17:88:49:0a:73:07:26:69:
c8:85:9c:cc:d6:64:a8:b2:87:56:1c:74:df:29:03:b9:7a:67:
c7:11:07:97:57:8f:09:96:89:d2:dc:06:a0:86:c7:6a:dd:85:
32:4a:c1:7b:88:bf:ad:a7:65:fd:5c:c9:0d:fe:6b:2f:f0:4e:
e6:8b:98:26:c6:8c:04:e0:d4:ce:04:1a:9c:15:9a:9f:58:12:
98:f5:6a:3f:27:d6:5d:86:11:28:3c:df:5e:18:9d:eb:ea:f2:
21:3f:5a:30:66:e6:cf:b3:fa:3a:9f:f0:0d:3c:24:65:8a:29:
4d:06:2c:89:86:fd:c5:32:d1:6c:7e:f7:1a:e6:bd:cb:89:e9:
d1:81:51:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 17:06:36 2026 by rpki-client