
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9945673-b3f0-40fb-b9e1-fd8dc7f55a70.roa
File: d9945673-b3f0-40fb-b9e1-fd8dc7f55a70.roa (raw, json)
Hash identifier: XCsazDVxQ4pqhCKSPiEx5cbvm+Ns92GhK9Gc8kpfnbQ=
Subject key identifier: 75:F3:C7:65:D7:BC:0F:1C:C9:81:3A:DE:E7:B4:23:BE:30:E7:76:B9
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0B8969679D2D5437DC26DA928EA194B07537F99D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9945673-b3f0-40fb-b9e1-fd8dc7f55a70.roa
Signing time: Mon 12 Oct 2026 00:20:09 +0000
ROA not before: Mon 12 Oct 2026 00:20:09 +0000
ROA not after: Sun 10 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 15.181.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:89:69:67:9d:2d:54:37:dc:26:da:92:8e:a1:94:b0:75:37:f9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 12 00:20:09 2026 GMT
Not After : Jan 10 23:59:59 2027 GMT
Subject: serialNumber=061bfc000e7a361c4712df51dcc2a7b42acfef5df7a02f27270af379531968d4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:62:d5:a8:c7:8f:d3:f0:fc:f4:bf:21:7a:f0:
12:aa:9e:80:40:dc:54:ef:81:ec:6e:b1:5d:e1:c0:
c6:99:e3:c7:8b:a6:a8:08:73:b6:d9:55:37:be:b0:
9b:92:43:9a:24:8c:fd:64:2f:32:e8:17:de:42:66:
0f:a1:f4:94:64:33:18:db:1e:2a:ab:82:a4:70:e2:
eb:b0:52:a6:43:70:c8:33:5a:3b:89:21:1e:89:10:
fb:df:f5:ee:8f:57:bb:d2:3a:1c:b9:e6:90:54:d7:
45:d0:35:43:2f:46:f1:9e:01:f6:56:65:45:b9:fe:
d1:25:11:e8:c1:70:23:3e:4c:6f:ff:7f:28:cc:ca:
2f:3b:9c:49:94:64:91:0d:e2:8d:df:43:36:7e:95:
06:d1:84:ea:49:42:21:74:71:ce:71:53:d9:0f:06:
88:33:f0:85:05:dd:8c:70:2c:40:54:d3:06:ff:da:
eb:ab:76:c0:69:54:12:73:f7:eb:ce:b5:0a:dd:c9:
ff:2e:62:0e:32:c4:d0:11:7f:bd:d2:aa:e0:d8:44:
1d:e3:e4:bd:c2:da:b7:56:d4:84:2c:4b:c9:8c:71:
80:d0:5d:1a:94:53:2a:43:f0:9f:98:9d:6c:b9:16:
98:0c:af:42:b4:ea:e7:e0:1f:06:e5:c8:d1:b5:e5:
a5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F3:C7:65:D7:BC:0F:1C:C9:81:3A:DE:E7:B4:23:BE:30:E7:76:B9
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/d9945673-b3f0-40fb-b9e1-fd8dc7f55a70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.181.232.0/21
Signature Algorithm: sha256WithRSAEncryption
6d:72:b9:7c:4b:9c:8b:27:43:0a:b5:28:cc:7d:ef:90:76:98:
9b:1e:f6:1c:41:a6:7d:10:90:70:fe:28:f0:8e:0f:bc:e8:51:
3b:b0:a1:f8:ca:d1:8e:8a:27:87:88:5a:ad:4e:80:70:00:66:
c9:ab:be:10:91:e7:1f:0d:c4:e0:79:da:a5:8a:30:db:10:92:
54:88:e0:35:d4:4f:73:d3:e7:64:92:aa:83:00:f7:e6:f6:43:
e8:cc:0e:75:c8:bd:fc:dc:97:28:b5:da:4a:8d:76:37:c7:16:
32:5b:39:fb:c3:d6:af:7f:53:30:cf:a3:33:c6:48:cc:86:f7:
ce:2c:d5:c4:2a:17:81:36:62:04:2c:e4:32:49:1c:08:33:ff:
20:d5:d2:0b:ef:9a:a0:af:3e:99:ef:6f:17:6e:53:34:2f:b7:
b8:cb:3f:40:2c:48:12:7e:93:f0:34:eb:7a:ac:36:9c:92:9b:
18:89:3e:95:36:a0:2a:fd:93:8a:56:d1:5a:e9:e1:76:fa:c6:
28:2d:78:b4:eb:c6:9e:bd:44:2f:dd:0f:45:fc:40:cc:31:c0:
d8:53:65:f7:1b:69:7d:f8:b4:7c:dc:31:a0:9b:76:9a:3f:76:
30:86:77:7b:c0:b7:58:cd:2d:29:89:8d:d4:92:00:16:c5:07:
03:0a:89:dc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUC4lpZ50tVDfcJtqSjqGUsHU3+Z0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDEyMDAyMDA5WhcNMjcwMTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AwNjFiZmMwMDBlN2EzNjFjNDcxMmRmNTFkY2MyYTdiNDJh
Y2ZlZjVkZjdhMDJmMjcyNzBhZjM3OTUzMTk2OGQ0MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDFYtWox4/T8Pz0vyF68BKqnoBA3FTvgexusV3hwMaZ48eL
pqgIc7bZVTe+sJuSQ5okjP1kLzLoF95CZg+h9JRkMxjbHiqrgqRw4uuwUqZDcMgz
WjuJIR6JEPvf9e6PV7vSOhy55pBU10XQNUMvRvGeAfZWZUW5/tElEejBcCM+TG//
fyjMyi87nEmUZJEN4o3fQzZ+lQbRhOpJQiF0cc5xU9kPBogz8IUF3YxwLEBU0wb/
2uurdsBpVBJz9+vOtQrdyf8uYg4yxNARf73SquDYRB3j5L3C2rdW1IQsS8mMcYDQ
XRqUUypD8J+YnWy5FpgMr0K06ufgHwblyNG15aXNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdfPHZde8DxzJgTre57QjvjDndrkwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2Q5OTQ1NjczLWIzZjAtNDBmYi1iOWUxLWZkOGRjN2Y1NWE3MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMPtegwDQYJKoZIhvcNAQELBQADggEBAG1yuXxLnIsnQwq1KMx975B2mJse
9hxBpn0QkHD+KPCOD7zoUTuwofjK0Y6KJ4eIWq1OgHAAZsmrvhCR5x8NxOB52qWK
MNsQklSI4DXUT3PT52SSqoMA9+b2Q+jMDnXIvfzclyi12kqNdjfHFjJbOfvD1q9/
UzDPozPGSMyG984s1cQqF4E2YgQs5DJJHAgz/yDV0gvvmqCvPpnvbxduUzQvt7jL
P0AsSBJ+k/A063qsNpySmxiJPpU2oCr9k4pW0Vrp4Xb6xigteLTrxp69RC/dD0X8
QMwxwNhTZfcbaX34tHzcMaCbdpo/djCGd3vAt1jNLSmJjdSSABbFBwMKidw=
-----END CERTIFICATE-----
Generated at Sat Nov 7 20:14:11 2026 by rpki-client