
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9070e2e-0bc9-4d44-a529-58744512f2b6.roa
File: e9070e2e-0bc9-4d44-a529-58744512f2b6.roa (raw, json)
Hash identifier: y47YtF9kIPtDwUODGhadFweyKaamLox6f8lXNc6VpzI=
Subject key identifier: 61:D0:B3:64:18:72:E8:98:FD:DD:D0:64:E4:09:D8:A0:49:86:85:1D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 021B50EE506ED173AC78A068BEC753D1933E85D7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9070e2e-0bc9-4d44-a529-58744512f2b6.roa
Signing time: Thu 22 Oct 2026 03:31:13 +0000
ROA not before: Thu 22 Oct 2026 03:31:13 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.197.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:1b:50:ee:50:6e:d1:73:ac:78:a0:68:be:c7:53:d1:93:3e:85:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 22 03:31:13 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=8a0a8feb1475944b0d841fe3e174c03b23d09dad2343c1d26d774833fdeaca60, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:1f:7b:a0:08:1a:90:cf:74:cb:23:bf:dd:
62:fd:7c:ce:ae:22:7d:01:6e:68:53:81:94:5a:b2:
07:a5:76:c2:30:ff:a7:24:94:41:85:65:5b:18:8b:
09:6a:7c:46:d5:9e:74:b2:c6:89:2d:75:56:fe:05:
d0:eb:cc:f9:63:ac:1c:4a:53:97:e9:49:8e:88:a3:
64:ab:e8:e0:22:1a:82:a3:4a:42:78:20:f7:4c:e4:
4d:44:72:1e:15:35:92:b2:36:8f:59:8d:82:49:67:
a0:44:c8:b8:32:b3:26:d0:45:54:72:64:7e:f7:54:
77:be:e1:23:e5:2f:69:5c:06:66:2e:eb:91:37:9f:
05:57:12:ac:82:37:80:90:c1:18:78:a5:1c:be:b0:
a6:da:91:6c:d8:02:d2:a9:d8:47:41:3e:59:82:3b:
c8:01:58:27:4b:bb:c3:51:a3:d2:5d:26:ea:04:e0:
79:d2:64:d9:d2:9f:94:81:c2:23:e7:52:e7:10:71:
55:94:26:e1:26:92:55:bf:2a:b4:5a:28:f3:9b:a2:
7f:de:07:96:82:d4:1f:89:b9:8f:39:15:37:85:10:
44:7b:0b:7f:3c:bd:ef:95:80:41:3c:ea:36:22:68:
45:44:aa:e4:c7:cd:92:cf:2e:2c:48:ea:76:45:5d:
dc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D0:B3:64:18:72:E8:98:FD:DD:D0:64:E4:09:D8:A0:49:86:85:1D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e9070e2e-0bc9-4d44-a529-58744512f2b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.197.196.0/22
Signature Algorithm: sha256WithRSAEncryption
97:52:aa:ed:d4:e2:ab:bc:f0:ae:8f:b1:fd:4a:b6:1b:8a:57:
a2:b3:16:cc:c4:df:5c:b4:e9:a0:88:12:bb:1c:81:00:b6:ec:
b4:d3:39:5f:0f:39:ce:9d:04:fb:af:f5:51:b0:5a:0c:55:14:
d7:55:6d:b9:c3:35:d4:37:2d:5f:51:1e:77:b6:98:01:e9:bb:
63:bc:d3:e5:be:e3:82:0c:47:cf:0a:2d:e2:e5:ab:59:c9:10:
ce:f9:bb:3f:75:17:37:11:7b:1b:e5:7c:83:9c:f2:ee:26:6a:
da:c5:80:09:b1:65:b4:1c:3c:56:49:9b:3e:9d:56:b5:13:8b:
4a:a1:ac:43:18:98:4c:b0:7b:1b:db:2c:20:d7:88:da:05:5d:
34:2a:97:5b:00:e9:5d:5f:3b:37:3c:b3:8d:58:de:64:d5:27:
61:20:c5:53:98:61:15:0c:2d:9a:6e:15:ab:3a:d6:ff:14:aa:
8b:a2:7f:bb:fe:62:2b:a1:07:56:c4:48:19:82:6a:45:8f:77:
4d:d3:6f:0e:21:78:ed:48:21:a0:c2:63:73:ac:2c:0b:6e:a4:
f9:80:06:61:f0:9f:bd:4a:30:00:7b:9e:40:69:08:28:d3:e8:
fe:4c:b4:dc:44:6d:2a:8d:1b:c9:a4:36:91:9e:b0:0a:8f:aa:
9e:33:93:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 20:13:08 2026 by rpki-client