
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db73a1fc-b266-4edb-be49-1fb1b633c7b9.roa
File: db73a1fc-b266-4edb-be49-1fb1b633c7b9.roa (raw, json)
Hash identifier: DPKhlI9SgEssCaalf5mcCuyeZ9pZqyXpKEIrf3/qoL4=
Subject key identifier: 93:A3:38:55:43:A9:1C:30:F2:2C:60:46:C6:1C:0D:5F:4A:94:D1:A7
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7B15B1C52E374FFE940C2D6AE6D3F0DBDF76F792
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db73a1fc-b266-4edb-be49-1fb1b633c7b9.roa
Signing time: Sat 28 Feb 2026 03:10:12 +0000
ROA not before: Sat 28 Feb 2026 03:10:12 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.193.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:15:b1:c5:2e:37:4f:fe:94:0c:2d:6a:e6:d3:f0:db:df:76:f7:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 28 03:10:12 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=a80cfaca26a4ffbf94a8d12254b2b94b635ddd056c58df08e2c79bfc8a847a12, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:dc:9a:c9:b5:cb:9a:0b:b5:7e:5f:8a:73:
d9:f8:dc:fc:f5:a3:a2:6f:0c:bc:bb:a7:f0:ed:da:
23:c2:18:a8:dd:44:e1:9b:03:9e:a0:ba:8a:8c:8a:
ee:c6:81:ec:d2:4f:56:14:9a:8b:f4:d5:c8:c3:64:
97:ff:bf:f2:ba:a4:46:42:47:a3:6d:eb:42:f0:81:
56:dc:f8:6b:8e:b7:2d:f4:1c:82:e8:44:41:07:cb:
ab:5e:4c:16:60:58:c2:be:e1:af:7f:04:60:75:f3:
64:4a:19:d7:23:ca:1a:bd:e3:72:44:89:d7:51:fb:
2e:ae:38:30:ee:70:43:ba:c0:67:98:73:b2:ed:c1:
d0:82:e3:9b:41:e9:9c:44:06:fc:08:d0:94:e8:29:
15:db:8f:45:b9:96:e9:43:62:63:16:56:cc:34:f8:
bd:7a:3f:da:09:11:0b:d9:f6:38:16:28:92:42:0a:
c2:d2:68:01:6b:ab:f3:4c:db:06:f5:13:52:18:c0:
4e:e1:d1:fc:4e:d5:6a:11:dc:8f:29:dd:27:9f:bd:
bd:15:84:76:4a:a0:27:d9:ea:ad:f0:20:e1:65:36:
ca:90:c5:95:07:48:89:33:af:45:7e:92:2e:0f:8d:
bf:46:98:f9:5a:57:81:ee:61:40:55:6d:ab:69:a1:
73:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A3:38:55:43:A9:1C:30:F2:2C:60:46:C6:1C:0D:5F:4A:94:D1:A7
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/db73a1fc-b266-4edb-be49-1fb1b633c7b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.193.128.0/18
Signature Algorithm: sha256WithRSAEncryption
2a:8d:c3:38:e2:98:c5:45:a9:32:91:16:05:5f:d6:c7:c2:da:
ad:06:3b:84:89:c8:8b:23:69:73:6f:3a:17:60:d0:c0:19:7a:
eb:67:2a:d7:78:16:56:af:31:9b:33:d2:8b:55:77:3c:c6:09:
38:a7:c0:39:89:d8:a9:61:de:a2:93:a1:94:9a:ad:9b:ed:d2:
5d:b1:f5:18:1a:d0:07:f2:56:9d:89:32:26:8c:49:0f:20:cd:
bc:d3:b9:19:b8:1c:14:74:02:8c:31:7b:00:6d:72:ec:9e:5f:
0d:1c:97:a0:45:1e:c9:30:04:b0:97:c4:fa:48:e2:36:07:a4:
73:42:7c:9e:5c:40:25:4c:73:43:ca:1c:d5:5c:21:57:f5:a5:
80:74:c1:3c:0c:45:44:8f:d3:e8:f1:36:6c:97:4c:71:af:90:
87:e4:cb:18:4a:22:85:aa:1c:e1:62:3a:71:e3:cf:7c:37:51:
32:bd:3f:b6:85:37:f1:51:dc:64:d2:c6:fa:b3:82:5f:91:b0:
2c:7f:5a:06:68:64:3f:15:86:be:30:ce:90:da:84:38:f3:21:
a2:07:26:b3:ce:47:bf:05:3d:e7:ba:e9:fb:82:42:ff:58:04:
84:2b:cb:a4:07:01:ca:eb:ca:36:e9:c4:cb:de:3b:99:58:37:
56:1f:36:8e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUexWxxS43T/6UDC1q5tPw299295IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwMjI4MDMxMDEyWhcNMjYwNTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BhODBjZmFjYTI2YTRmZmJmOTRhOGQxMjI1NGIyYjk0YjYz
NWRkZDA1NmM1OGRmMDhlMmM3OWJmYzhhODQ3YTEyMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCn6tyaybXLmgu1fl+Kc9n43Pz1o6JvDLy7p/Dt2iPCGKjd
ROGbA56guoqMiu7GgezST1YUmov01cjDZJf/v/K6pEZCR6Nt60LwgVbc+GuOty30
HILoREEHy6teTBZgWMK+4a9/BGB182RKGdcjyhq943JEiddR+y6uODDucEO6wGeY
c7LtwdCC45tB6ZxEBvwI0JToKRXbj0W5lulDYmMWVsw0+L16P9oJEQvZ9jgWKJJC
CsLSaAFrq/NM2wb1E1IYwE7h0fxO1WoR3I8p3Sefvb0VhHZKoCfZ6q3wIOFlNsqQ
xZUHSIkzr0V+ki4Pjb9GmPlaV4HuYUBVbatpoXOtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUk6M4VUOpHDDyLGBGxhwNX0qU0acwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2RiNzNhMWZjLWIyNjYtNGVkYi1iZTQ5LTFmYjFiNjMzYzdiOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYPwYAwDQYJKoZIhvcNAQELBQADggEBACqNwzjimMVFqTKRFgVf1sfC2q0G
O4SJyIsjaXNvOhdg0MAZeutnKtd4FlavMZsz0otVdzzGCTinwDmJ2Klh3qKToZSa
rZvt0l2x9Rga0AfyVp2JMiaMSQ8gzbzTuRm4HBR0AowxewBtcuyeXw0cl6BFHskw
BLCXxPpI4jYHpHNCfJ5cQCVMc0PKHNVcIVf1pYB0wTwMRUSP0+jxNmyXTHGvkIfk
yxhKIoWqHOFiOnHjz3w3UTK9P7aFN/FR3GTSxvqzgl+RsCx/WgZoZD8Vhr4wzpDa
hDjzIaIHJrPOR78FPee66fuCQv9YBIQry6QHAcrryjbpxMveO5lYN1YfNo4=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:21:37 2026 by rpki-client