
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/572f362e-6914-46b6-ac5b-4d5ab372468e.roa
File: 572f362e-6914-46b6-ac5b-4d5ab372468e.roa (raw, json)
Hash identifier: Gyjz4y0buPB5jS9VlmIi5MNvCpX26v4S20Up6ziEpqM=
Subject key identifier: 94:FE:71:EA:2F:08:98:18:2E:2B:63:30:6C:AB:C5:F1:B3:E7:56:DD
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 44D5DA1A1C5C398AE7ED0C3E55B1AADB32B63713
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/572f362e-6914-46b6-ac5b-4d5ab372468e.roa
Signing time: Fri 08 May 2026 02:30:11 +0000
ROA not before: Fri 08 May 2026 02:30:11 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.210.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:d5:da:1a:1c:5c:39:8a:e7:ed:0c:3e:55:b1:aa:db:32:b6:37:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 02:30:11 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=98c2d976cf1661e07c50d111a5123157a08ddbb7fca342694eafff35c56d88ed, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b9:97:a5:bc:00:ba:8d:fd:93:ca:85:03:64:
dd:b1:c1:85:44:74:5f:21:b4:52:3c:70:d2:3c:0c:
dc:ab:c0:1d:d7:8f:90:37:b7:a4:b2:02:4b:64:b3:
d5:07:5a:5f:b2:1f:f6:06:36:c3:33:80:37:b1:95:
de:dd:f6:a6:d4:59:c1:6a:5a:21:db:4f:6a:35:62:
07:73:34:53:60:4a:14:89:ed:0e:36:a9:42:18:a8:
ca:d2:93:01:aa:be:16:86:1a:4a:37:40:f0:d5:4b:
42:d3:8b:b9:ee:fa:2b:09:32:b4:b6:ae:cd:93:5b:
d5:02:bb:75:a9:02:7b:98:29:ea:b2:6e:be:c5:d9:
b1:84:b6:51:e0:fa:87:0a:1a:b3:03:1f:7f:53:86:
a0:d6:9b:a6:a9:fd:09:f8:a1:29:1e:24:bb:64:da:
a8:43:61:ee:fc:3f:08:ba:30:17:7f:53:5f:e0:3c:
12:2c:a4:ae:b2:1b:44:f4:67:ba:fd:71:06:fb:3b:
e8:94:7e:e5:75:4a:36:fd:80:4f:59:7d:19:f7:3f:
f5:d4:0e:60:45:23:6f:f2:76:d1:bf:8e:a4:b6:45:
77:63:e5:96:d7:49:f1:14:a4:3e:ab:c7:6a:88:1c:
12:64:f5:6b:fd:02:e4:ff:7e:2a:9f:57:18:98:73:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FE:71:EA:2F:08:98:18:2E:2B:63:30:6C:AB:C5:F1:B3:E7:56:DD
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/572f362e-6914-46b6-ac5b-4d5ab372468e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.210.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a2:4b:a4:46:c1:28:10:81:67:78:43:0a:53:8e:79:a1:49:3d:
ed:c2:87:a5:f0:20:19:73:ce:9d:45:a3:40:9f:f0:bb:94:50:
c0:12:ec:be:02:01:49:04:27:70:c0:87:9f:4c:85:2f:54:a7:
9f:23:e5:20:40:58:7c:3c:42:10:37:62:65:67:dd:8e:93:ca:
c6:46:e3:65:5a:80:4c:02:8c:fc:97:57:6f:89:ca:78:85:86:
9b:80:9f:50:ee:b5:e2:8b:85:87:5a:15:75:87:24:83:d0:2d:
e9:31:1e:2e:0a:fc:15:1d:f3:8e:00:54:f0:4b:02:91:23:0d:
2d:3b:fa:fa:46:bc:bb:d5:36:3f:7c:c4:f7:7f:3e:4e:5b:59:
ad:74:04:28:50:5b:35:fc:1a:a2:98:eb:55:22:bc:78:3c:80:
6e:97:0a:fc:38:77:75:d2:84:32:bc:51:37:00:15:4d:51:df:
32:e4:18:7d:2f:0b:bd:3d:9b:74:2f:90:f1:30:ec:ca:6e:ff:
56:2a:b2:c3:af:7f:e2:65:04:60:cc:08:de:06:7d:13:98:12:
af:15:43:2c:a2:34:9b:c0:c0:4e:1e:9f:72:d1:f8:23:fb:d0:
fd:c8:7b:78:c1:17:01:dd:f8:37:6a:3d:55:8b:85:eb:44:12:
24:88:40:ff
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIURNXaGhxcOYrn7Qw+VbGq2zK2NxMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTA4MDIzMDExWhcNMjYwODA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A5OGMyZDk3NmNmMTY2MWUwN2M1MGQxMTFhNTEyMzE1N2Ew
OGRkYmI3ZmNhMzQyNjk0ZWFmZmYzNWM1NmQ4OGVkMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDguZelvAC6jf2TyoUDZN2xwYVEdF8htFI8cNI8DNyrwB3X
j5A3t6SyAktks9UHWl+yH/YGNsMzgDexld7d9qbUWcFqWiHbT2o1YgdzNFNgShSJ
7Q42qUIYqMrSkwGqvhaGGko3QPDVS0LTi7nu+isJMrS2rs2TW9UCu3WpAnuYKeqy
br7F2bGEtlHg+ocKGrMDH39ThqDWm6ap/Qn4oSkeJLtk2qhDYe78Pwi6MBd/U1/g
PBIspK6yG0T0Z7r9cQb7O+iUfuV1Sjb9gE9ZfRn3P/XUDmBFI2/ydtG/jqS2RXdj
5ZbXSfEUpD6rx2qIHBJk9Wv9AuT/fiqfVxiYcxhBAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUlP5x6i8ImBguK2MwbKvF8bPnVt0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzU3MmYzNjJlLTY5MTQtNDZiNi1hYzViLTRkNWFiMzcyNDY4ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwE20jANBgkqhkiG9w0BAQsFAAOCAQEAokukRsEoEIFneEMKU455oUk97cKH
pfAgGXPOnUWjQJ/wu5RQwBLsvgIBSQQncMCHn0yFL1SnnyPlIEBYfDxCEDdiZWfd
jpPKxkbjZVqATAKM/JdXb4nKeIWGm4CfUO614ouFh1oVdYckg9At6TEeLgr8FR3z
jgBU8EsCkSMNLTv6+ka8u9U2P3zE938+TltZrXQEKFBbNfwaopjrVSK8eDyAbpcK
/Dh3ddKEMrxRNwAVTVHfMuQYfS8LvT2bdC+Q8TDsym7/Viqyw69/4mUEYMwI3gZ9
E5gSrxVDLKI0m8DATh6fctH4I/vQ/ch7eMEXAd34N2o9VYuF60QSJIhA/w==
-----END CERTIFICATE-----
Generated at Tue May 12 22:37:26 2026 by rpki-client