
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d0df1459-9909-45e6-8488-2c73c0a4c82f.roa
File: d0df1459-9909-45e6-8488-2c73c0a4c82f.roa (raw, json)
Hash identifier: jI8GeRc94BUEviNVrh0YaN9AvJTomOL8jkM0mZiu4hw=
Subject key identifier: 77:9D:10:15:7C:6F:C2:2B:FB:75:C9:C0:25:19:FF:33:1F:2D:08:D1
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 78178605141D869E37CF7593F931FC1230EDCF4D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d0df1459-9909-45e6-8488-2c73c0a4c82f.roa
Signing time: Mon 23 Feb 2026 01:00:09 +0000
ROA not before: Mon 23 Feb 2026 01:00:09 +0000
ROA not after: Sun 24 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.182.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:17:86:05:14:1d:86:9e:37:cf:75:93:f9:31:fc:12:30:ed:cf:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 23 01:00:09 2026 GMT
Not After : May 24 23:59:59 2026 GMT
Subject: serialNumber=950bf2cf728b185b936aa22bb1d2826348148923a21a1d60f37ac6ff660a2725, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a2:58:8b:59:a2:47:4e:74:c9:0a:22:3d:de:
5d:d2:6b:ff:c9:58:83:93:8a:df:81:ae:fc:2a:19:
68:30:fb:12:49:38:ce:f2:cd:23:89:cf:54:5d:67:
59:84:dd:c7:2d:5e:41:f3:35:de:e5:c4:05:f7:0a:
9e:e1:7b:4f:6a:39:1e:ac:25:9e:88:3a:9b:d3:6d:
0a:14:d0:1f:1f:44:ef:d0:72:81:72:dd:c5:45:79:
03:f2:95:37:47:66:1b:3b:37:45:aa:e9:34:c1:df:
ec:87:2d:58:e3:12:9c:ee:95:5b:d9:2a:5e:9b:df:
7c:f8:c4:f9:aa:5f:c7:0f:43:48:59:d5:8b:68:0b:
27:1f:a1:39:71:cb:3a:7f:6e:33:c4:5a:26:83:80:
7e:58:60:d8:28:4f:40:08:d8:e4:45:ab:ec:bc:3a:
2b:6b:ec:ee:6e:62:88:33:e8:b0:27:e0:cf:84:6f:
82:6a:c4:0b:d3:2b:bc:fb:87:d5:a3:17:a0:aa:69:
ba:82:14:9c:e0:40:2a:62:1c:03:19:64:79:06:f8:
ed:ae:99:0a:5a:3a:4b:32:3f:71:94:9b:ab:60:4b:
66:cd:d4:dc:92:10:29:a3:15:aa:8c:52:c2:cc:e8:
02:27:7e:6c:a3:e8:22:35:d7:35:16:09:47:dd:29:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9D:10:15:7C:6F:C2:2B:FB:75:C9:C0:25:19:FF:33:1F:2D:08:D1
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d0df1459-9909-45e6-8488-2c73c0a4c82f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.182.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:56:66:45:38:b5:d1:75:7a:1d:86:bf:43:c2:f3:1c:f0:fb:
e5:ba:a8:7a:d5:8a:a5:af:53:0d:0c:cf:95:37:0e:64:ff:cd:
6a:6a:d6:2b:ef:11:6d:0c:8b:06:62:e5:00:a5:bf:05:c8:a9:
46:83:67:93:1c:bb:69:04:30:9b:cd:2c:6b:54:e1:aa:1c:3c:
c2:c4:d5:18:39:71:61:03:9a:12:f4:61:b2:0b:e1:37:8e:0c:
36:e8:ad:aa:75:38:e9:79:04:68:47:d0:d6:d3:6e:99:07:9e:
f5:49:22:68:32:99:ff:c0:cb:9f:77:03:8b:78:0a:de:4f:e8:
07:7c:a5:d5:6a:27:03:32:3b:80:4f:28:e2:6a:85:a4:c5:55:
b1:96:45:94:d9:64:f8:f1:26:3f:cc:da:15:eb:62:2e:23:50:
1e:14:4c:e0:43:8f:82:32:56:96:c2:ed:54:73:eb:0e:e4:c9:
bf:db:13:a1:2f:7f:b6:b8:20:d1:f9:ab:30:48:d4:15:01:3a:
c2:60:80:2d:32:8d:d2:28:95:14:35:76:5c:1f:c0:bb:c4:6f:
ca:c2:57:b7:6b:e6:52:65:39:94:a7:1d:b4:04:bf:f6:87:58:
7f:63:e3:63:74:03:27:f8:41:32:eb:c8:ac:a5:73:04:b4:19:
31:cc:8f:3b
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUeBeGBRQdhp43z3WT+TH8EjDtz00wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjIzMDEwMDA5WhcNMjYwNTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NTBiZjJjZjcyOGIxODViOTM2YWEyMmJiMWQyODI2MzQ4
MTQ4OTIzYTIxYTFkNjBmMzdhYzZmZjY2MGEyNzI1MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXoliLWaJHTnTJCiI93l3Sa//JWIOTit+BrvwqGWgw+xJJ
OM7yzSOJz1RdZ1mE3cctXkHzNd7lxAX3Cp7he09qOR6sJZ6IOpvTbQoU0B8fRO/Q
coFy3cVFeQPylTdHZhs7N0Wq6TTB3+yHLVjjEpzulVvZKl6b33z4xPmqX8cPQ0hZ
1YtoCycfoTlxyzp/bjPEWiaDgH5YYNgoT0AI2ORFq+y8Oitr7O5uYogz6LAn4M+E
b4JqxAvTK7z7h9WjF6CqabqCFJzgQCpiHAMZZHkG+O2umQpaOksyP3GUm6tgS2bN
1NySECmjFaqMUsLM6AInfmyj6CI11zUWCUfdKVmzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUd50QFXxvwiv7dcnAJRn/Mx8tCNEwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2QwZGYxNDU5LTk5MDktNDVlNi04NDg4LTJjNzNjMGE0YzgyZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAI2tmgwDQYJKoZIhvcNAQELBQADggEBAKVWZkU4tdF1eh2Gv0PC8xzw++W6
qHrViqWvUw0Mz5U3DmT/zWpq1ivvEW0MiwZi5QClvwXIqUaDZ5Mcu2kEMJvNLGtU
4aocPMLE1Rg5cWEDmhL0YbIL4TeODDborap1OOl5BGhH0NbTbpkHnvVJImgymf/A
y593A4t4Ct5P6Ad8pdVqJwMyO4BPKOJqhaTFVbGWRZTZZPjxJj/M2hXrYi4jUB4U
TOBDj4IyVpbC7VRz6w7kyb/bE6Evf7a4INH5qzBI1BUBOsJggC0yjdIolRQ1dlwf
wLvEb8rCV7dr5lJlOZSnHbQEv/aHWH9j42N0Ayf4QTLryKylcwS0GTHMjzs=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:24:57 2026 by rpki-client