
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fc2e9df4-0643-4bfc-b528-6948594de8d8.roa
File: fc2e9df4-0643-4bfc-b528-6948594de8d8.roa (raw, json)
Hash identifier: i18E8Fm08JEuSBj2s+PQWhpBHgnvuVAx7WiHb/CZdIM=
Subject key identifier: 3F:FC:C3:3D:5D:01:B5:3C:E3:13:16:90:92:D1:DC:E7:AF:35:BF:1A
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 6C049EF768BACD432A275828CD113255EA731C9F
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fc2e9df4-0643-4bfc-b528-6948594de8d8.roa
Signing time: Fri 08 May 2026 02:50:05 +0000
ROA not before: Fri 08 May 2026 02:50:05 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 21664
IP address blocks: 173.82.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:04:9e:f7:68:ba:cd:43:2a:27:58:28:cd:11:32:55:ea:73:1c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 8 02:50:05 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=0678458cc8185f5c74b09c6f9094d063e76204119bad3409d6d1c991c585b3a3, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:40:6d:cc:f6:5a:e6:54:65:e9:fd:32:73:
ff:12:f0:f3:8c:6e:cd:98:73:9c:da:43:c2:eb:ce:
46:dd:09:bd:16:7f:ec:58:46:c0:62:d4:09:e3:74:
a0:14:de:60:fe:ca:aa:49:79:b2:98:46:98:20:45:
b5:17:14:2b:c1:a1:96:86:50:5f:7c:97:fe:45:53:
9f:14:54:46:ad:ac:50:99:8b:a3:e8:4d:d8:0a:e6:
90:1e:41:f3:21:77:5c:97:96:76:82:9a:6c:cf:aa:
7c:ee:6d:49:53:4b:34:5d:7d:ce:b1:34:fe:69:8a:
1e:72:7a:4b:eb:8a:55:be:45:db:39:f7:b6:a4:0e:
9c:97:13:05:50:cb:e1:ba:fa:ad:67:13:3e:0f:58:
9c:a7:d1:e9:b6:b5:c5:7e:08:3b:66:de:9a:26:cc:
ba:36:8b:7d:9c:42:c3:ce:76:20:65:f6:9e:37:00:
9d:8b:a4:f8:d7:97:f9:8e:e1:f2:b5:bd:6b:4f:90:
67:28:3c:ad:03:e5:59:18:79:7c:c4:af:ed:9f:81:
7e:52:b2:43:65:bd:0f:57:e2:9f:3c:0e:29:72:64:
6f:1d:c8:bc:68:81:9f:fe:c3:a1:ae:18:8a:02:41:
d4:fd:96:53:95:1f:7a:a9:89:fd:9a:79:72:48:cd:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:FC:C3:3D:5D:01:B5:3C:E3:13:16:90:92:D1:DC:E7:AF:35:BF:1A
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/fc2e9df4-0643-4bfc-b528-6948594de8d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.82.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:b0:73:a9:5b:2b:45:d3:c0:67:a8:20:49:19:a3:8a:00:ca:
be:c1:3d:36:35:8e:db:78:42:53:66:b2:da:60:ba:97:12:e8:
f3:5c:b5:65:3d:1c:84:ba:25:de:2d:51:0c:11:cd:3b:b4:89:
18:87:ef:c6:d4:fe:24:ba:55:68:a1:a5:60:ec:8b:ba:c5:a3:
54:43:18:29:6a:d4:cb:f1:be:8c:3f:18:cf:58:10:c7:c6:40:
39:e7:81:c2:f7:79:52:ca:8d:f3:0d:ec:15:23:2c:b7:c2:9b:
95:bd:b3:a1:5a:3c:ef:3f:79:f7:51:c1:63:9d:bc:64:04:d5:
77:a7:40:9f:6b:b7:d8:0a:26:74:68:84:d4:3f:f7:53:c6:3e:
96:e7:fa:95:49:65:4e:4e:bc:8a:7a:b4:cc:e7:64:f3:b4:d5:
81:e8:45:9c:69:54:de:e8:95:a9:f8:67:a0:d0:ee:7a:6e:2f:
db:8b:12:af:95:30:53:bc:57:b9:ec:f3:f8:ae:ee:15:a2:a8:
ae:91:56:4c:89:e8:4a:fa:41:66:06:46:70:a6:3b:e3:c6:45:
40:b6:f2:f9:59:b7:0e:86:8e:ec:f0:97:fc:4d:ad:55:ec:a2:
c5:3a:c5:0a:86:91:77:59:49:57:3d:27:eb:65:b5:90:21:ec:
98:f0:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:13:48 2026 by rpki-client