
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3bb72ac-f5b6-4948-ba48-d899327e2ecc.roa
File: d3bb72ac-f5b6-4948-ba48-d899327e2ecc.roa (raw, json)
Hash identifier: lB4YWd/XWbzJQUTjRuKoT5gNYr+Szf9uaQRqOCbhT50=
Subject key identifier: 86:C6:91:5D:7E:21:FC:C9:3E:0F:B2:76:BE:EE:9C:97:A9:B2:48:C3
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6D881A5C94A0D7E7416AAF4791B1447081B973CE
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3bb72ac-f5b6-4948-ba48-d899327e2ecc.roa
Signing time: Mon 12 Oct 2026 01:07:37 +0000
ROA not before: Mon 12 Oct 2026 01:07:37 +0000
ROA not after: Sun 10 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 15.177.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:88:1a:5c:94:a0:d7:e7:41:6a:af:47:91:b1:44:70:81:b9:73:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 12 01:07:37 2026 GMT
Not After : Jan 10 23:59:59 2027 GMT
Subject: serialNumber=695dadeaa1da9c770ecca9b91f349d3fa7e44e1b917e81dad59834bbe121e56b, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cd:e6:de:f4:84:6a:a6:7d:1b:f6:4b:f9:50:
7e:ac:b9:bd:89:a8:5b:f6:f8:00:71:a9:71:9b:e4:
5c:b8:28:0c:65:d1:4c:06:25:f2:07:57:8d:f7:d3:
59:f6:b6:62:d4:2f:36:69:83:d6:11:07:fd:39:83:
22:99:06:5b:75:78:94:66:43:47:0d:a2:a2:1e:7c:
3f:23:ee:b2:b5:4d:6b:69:81:82:a9:0a:57:65:34:
ae:83:9f:cc:9e:dc:43:3f:51:bb:2c:06:27:e0:59:
71:d7:73:e3:17:6f:da:72:35:4a:cc:a2:4e:7c:e8:
11:91:92:50:3c:49:1f:ce:4f:2c:db:ea:36:0e:5d:
9f:77:cc:5d:b8:7d:bf:f0:9d:04:e1:bc:55:84:3e:
8e:15:81:88:e6:1a:ec:55:af:6f:d3:f7:b8:68:95:
c9:6f:15:7a:cd:69:01:e8:8c:f6:8e:fc:35:22:e3:
6d:99:50:90:ce:f6:0d:a4:b5:51:8d:ef:79:79:b2:
9c:88:fd:a5:15:71:aa:1b:33:db:4c:7c:a1:29:12:
3c:a2:a9:78:8c:1d:75:49:22:04:2d:fd:d2:35:1f:
52:a0:e8:83:6d:3f:28:d1:09:e5:d5:4c:53:69:14:
cb:45:13:14:3f:94:de:69:6a:d6:05:4b:85:e4:7a:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C6:91:5D:7E:21:FC:C9:3E:0F:B2:76:BE:EE:9C:97:A9:B2:48:C3
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d3bb72ac-f5b6-4948-ba48-d899327e2ecc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.177.56.0/21
Signature Algorithm: sha256WithRSAEncryption
07:9d:21:0d:4e:09:c5:15:22:52:84:16:39:34:e8:92:a6:ba:
70:d9:6e:7e:b1:93:95:f8:c4:fc:60:32:8c:5c:36:a6:42:0b:
a8:f6:a7:aa:2a:ca:a3:40:73:a5:a3:59:24:d8:b0:6e:a2:8c:
87:b0:4c:53:91:ea:0e:72:f7:36:b2:c4:40:00:a2:30:c2:4c:
ed:c1:fb:d7:db:c5:fc:d5:63:46:c0:d1:83:c2:b6:f6:05:b4:
9d:44:a9:cd:18:3d:da:02:c5:1a:fa:fa:86:d2:f5:69:df:1a:
42:5e:ac:6e:1f:8b:42:d3:26:5e:34:e2:42:2c:0c:41:3e:3f:
27:15:65:b4:3e:5a:f5:e7:24:d3:39:6b:31:7e:ef:4e:58:31:
1b:11:d5:03:71:e2:8a:34:84:1e:f0:12:3b:7a:f7:e5:ca:af:
5d:33:38:89:fa:b0:16:04:5a:f4:25:c1:10:05:77:af:50:89:
ef:0a:85:f4:b3:7c:e5:a4:73:3a:51:ef:0d:ca:cc:b4:71:81:
e5:3b:58:a6:61:5a:51:1a:92:8d:9d:53:8a:31:f7:a3:e5:69:
77:c3:84:26:5a:01:f8:f4:63:f3:87:69:86:f9:52:0d:62:f1:
d0:23:ab:69:9f:3f:d1:18:0a:1e:63:b2:fe:1c:e9:82:34:eb:
07:47:50:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 04:08:27 2026 by rpki-client