
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4fb3a71-8c61-45fd-8023-45717ef2414d.roa
File: f4fb3a71-8c61-45fd-8023-45717ef2414d.roa (raw, json)
Hash identifier: yM1Lpm+fdp2+p4W6V564ul/nWwZb9YJn/fTlwSlRoug=
Subject key identifier: 7F:E8:76:C4:E1:DC:9B:26:C1:C7:B7:51:75:D2:0E:2A:2B:61:00:C8
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4066F1686C2A7F03A5D756FF061C9395DA8C5CA4
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4fb3a71-8c61-45fd-8023-45717ef2414d.roa
Signing time: Thu 22 Oct 2026 03:41:29 +0000
ROA not before: Thu 22 Oct 2026 03:41:29 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.232.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:66:f1:68:6c:2a:7f:03:a5:d7:56:ff:06:1c:93:95:da:8c:5c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 22 03:41:29 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=4379981aeae085bf78463517efb6fab7e61ccf5898aefd692eca563b54ede1b3, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:45:30:92:09:03:9b:61:6b:94:f1:6c:fb:
2c:92:6b:23:2d:14:8f:25:96:b8:3f:dd:f3:39:a5:
6d:db:fc:dd:cf:72:c5:9e:d7:0e:92:9d:86:29:06:
60:9e:38:88:3e:e0:84:f0:55:48:31:64:09:da:68:
a0:99:76:92:e2:01:06:1d:b5:91:1f:92:95:e4:3f:
05:e5:12:99:71:8e:27:b3:53:ad:67:dd:ce:63:32:
fd:8c:b5:cd:ba:99:f1:89:0f:6a:4b:88:77:30:d1:
b1:e0:de:36:8b:13:54:41:e8:55:e5:11:9d:72:c6:
e9:2f:93:ed:83:fe:5b:5a:70:fe:af:43:a1:c8:11:
be:47:46:0f:c7:77:69:77:57:6b:de:ee:ea:26:d0:
a0:d7:c9:6d:37:b3:be:c8:e9:0f:d6:26:57:b0:05:
af:cc:3b:f4:97:6e:58:e2:04:13:a4:a4:e0:4e:fd:
39:21:7a:96:34:63:ba:32:18:f5:de:0a:ab:f6:7d:
be:31:a5:29:2b:48:58:b6:d9:f3:96:e0:7a:46:2d:
bc:8c:54:dd:2a:a1:8f:4a:c0:3c:58:db:1b:c3:55:
34:68:ca:bf:d1:d4:02:f8:5c:b8:86:ad:77:e7:2d:
1f:e8:af:61:8b:26:cc:5b:6c:c2:03:5c:d7:7f:26:
ec:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E8:76:C4:E1:DC:9B:26:C1:C7:B7:51:75:D2:0E:2A:2B:61:00:C8
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/f4fb3a71-8c61-45fd-8023-45717ef2414d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.232.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:a8:1b:3f:56:68:92:31:23:27:70:60:76:0f:44:e2:61:e6:
52:97:ce:27:02:ac:d3:9f:96:85:ce:aa:0f:01:db:8b:b4:e7:
06:a0:f8:66:8c:17:32:9c:d8:f9:ea:8a:32:a6:25:b8:2f:1b:
6a:de:2f:cf:86:05:c4:b9:50:bd:e5:a3:a6:07:75:f6:61:6e:
ca:b5:71:c6:68:db:08:5c:a5:61:cf:a5:50:1c:9e:4b:64:42:
f1:7d:87:b6:32:2c:b3:9a:f7:fb:5b:7c:92:84:5e:74:74:2c:
d2:4d:4b:b3:ec:49:e3:c1:b8:08:df:f7:e3:2d:8f:f7:19:e7:
1a:68:99:15:8b:95:b6:b1:a0:c5:b2:b4:eb:c7:d3:cf:3a:57:
17:28:cf:b0:37:6c:be:66:95:e8:88:1f:15:28:1f:ce:63:70:
ea:4e:df:75:02:c0:9b:d9:98:d4:77:8e:c8:82:7c:92:0a:24:
70:30:62:2c:21:b6:ec:71:01:8d:41:32:85:b4:df:a7:80:bf:
c2:2c:d9:b5:b1:e6:f6:9a:31:13:e6:f1:c3:02:4a:f7:fd:c9:
fd:f9:33:db:b0:b9:5d:03:a6:ea:6e:70:b4:e4:70:c5:ed:c1:
bb:2e:48:3c:b0:dc:14:7a:a1:ac:38:6e:b2:de:38:19:ca:a5:
8a:b1:36:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 04:12:57 2026 by rpki-client