
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/181326e1-5f1c-4b1c-a911-ede8a7728c2a.roa
File: 181326e1-5f1c-4b1c-a911-ede8a7728c2a.roa (raw, json)
Hash identifier: nDz0Qynw8nwt+dW439GOihwSdGt5Zd9q9n/06cojk0k=
Subject key identifier: 6B:5E:D7:02:89:01:11:70:64:D9:96:DF:74:A2:2E:7A:5A:70:1C:94
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 430E7475A5FD8B2036B375B123AE7892F96E8D6A
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/181326e1-5f1c-4b1c-a911-ede8a7728c2a.roa
Signing time: Fri 08 May 2026 01:01:10 +0000
ROA not before: Fri 08 May 2026 01:01:10 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:0e:74:75:a5:fd:8b:20:36:b3:75:b1:23:ae:78:92:f9:6e:8d:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 01:01:10 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=30b6235c1658dad1904e55577772ae1c7d423235f5474e3c8ef7816639bc0df2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:63:c1:79:82:63:96:41:99:82:95:f2:5c:79:
ad:40:e0:16:fd:a4:c5:6f:5c:87:66:63:38:11:65:
be:ee:b2:8f:6b:ad:f6:0a:23:16:65:c0:47:b7:bb:
95:ad:e7:57:5b:92:e7:2b:50:2a:05:06:00:cf:f1:
ef:d0:69:09:ba:05:57:0e:61:4a:09:ec:6d:01:9f:
a5:63:86:64:6a:d8:60:a8:a1:fc:5b:61:72:74:3f:
83:be:e7:62:a0:49:69:44:38:66:9e:10:0c:6d:57:
46:ce:98:63:a8:a9:ed:c3:6b:89:c5:a8:0f:70:37:
31:0b:25:17:64:b4:8a:34:b1:a0:13:ee:9a:34:00:
00:ae:66:be:5a:ec:47:43:98:c8:90:7c:82:81:24:
b5:a6:d8:57:91:73:2f:f3:13:35:17:87:9f:94:ef:
4c:f7:2a:81:45:8e:fc:04:87:6d:36:5f:1f:bf:91:
c8:ba:92:b7:84:4a:8b:75:dd:18:63:28:7a:92:23:
ee:dc:21:25:d6:3d:b0:34:ca:94:65:ac:6a:f0:42:
d1:e6:49:cc:7f:f0:7a:33:36:25:82:7c:df:18:6b:
35:f3:26:3a:c3:97:8e:f9:df:3c:ba:66:02:fd:4a:
11:9f:45:48:9f:27:d6:77:3d:61:43:70:a8:8f:22:
0b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5E:D7:02:89:01:11:70:64:D9:96:DF:74:A2:2E:7A:5A:70:1C:94
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/181326e1-5f1c-4b1c-a911-ede8a7728c2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
24:89:bc:9f:5d:f5:90:a5:c1:0c:e7:65:30:a7:e4:75:57:79:
a0:0e:d5:fb:d1:59:89:99:e2:68:85:51:d0:f7:e9:55:0a:43:
39:cd:20:b0:fb:7a:33:d0:3b:07:48:d3:5f:e7:21:d3:52:bf:
db:8b:a5:6d:ac:bc:bf:6d:2b:5e:1f:25:7b:83:d4:57:db:1d:
02:81:99:a2:66:9b:f1:5e:ee:47:fb:e9:ec:52:38:46:0f:06:
5c:a1:b3:85:ad:c9:1d:64:25:37:d0:3f:25:3f:34:51:8c:33:
97:0e:89:02:ef:62:68:41:4b:1a:8d:94:68:3d:5c:9a:a0:93:
52:6f:ef:f3:5c:ea:db:3b:b8:f9:d4:6c:9b:3b:14:04:7a:d2:
9c:7d:44:d6:da:bc:c9:00:db:0d:33:d2:ee:2e:ac:d2:f1:34:
62:8f:c2:6d:ec:90:2d:c9:37:eb:51:9e:a3:c9:70:f0:5b:14:
d1:cf:24:18:7e:0f:d1:8e:da:64:34:66:a5:d2:70:38:dd:7f:
29:e2:79:48:85:ce:ab:87:58:ac:06:b8:61:70:62:b4:9c:a5:
6e:ac:23:5d:a2:bf:d6:e5:8f:29:35:b4:d3:7c:6f:97:17:75:
1a:86:bc:b3:97:24:89:b8:ea:c7:b4:48:92:1e:d9:57:a5:19:
49:5a:0a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:25:16 2026 by rpki-client