
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71d6a8ef-6812-4b82-be67-19cf6fd22ae0.roa
File: 71d6a8ef-6812-4b82-be67-19cf6fd22ae0.roa (raw, json)
Hash identifier: X8/lCHGVPskxRCyrhWoD1S+gezl/v2370LDFYm7bw0s=
Subject key identifier: 78:C4:01:E5:91:0D:8E:C1:BE:76:B9:DD:FF:A0:A5:D0:95:C9:A1:9C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 767A48F7B8DDA3591BABF040F1A42F126C350026
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71d6a8ef-6812-4b82-be67-19cf6fd22ae0.roa
Signing time: Fri 08 May 2026 01:50:11 +0000
ROA not before: Fri 08 May 2026 01:50:11 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 34.223.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:7a:48:f7:b8:dd:a3:59:1b:ab:f0:40:f1:a4:2f:12:6c:35:00:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 01:50:11 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=857815745e6d02eec223342537f734e3c60eaa51c0b4efe8d590beb4268234ee, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:99:20:79:c7:bd:d3:e2:3e:c2:99:81:d8:
24:8d:7b:81:b1:90:ad:83:63:81:30:1e:81:f1:3f:
1f:37:a6:97:1e:ac:d0:b0:80:85:92:cc:c2:65:d6:
41:fa:b1:57:c3:6e:c5:1b:72:0e:10:cf:98:05:2d:
75:13:73:9f:12:a0:1b:14:8f:ff:d0:39:fb:e6:af:
8b:5f:51:75:6e:e0:d8:5a:0d:1c:53:53:be:74:c2:
d9:df:db:3b:83:7e:b0:17:0b:52:42:a5:d6:73:73:
58:81:ac:2e:df:de:40:a3:06:aa:c4:85:38:dd:b3:
60:b9:a0:2b:ae:c1:2f:ca:16:19:b9:4b:58:70:13:
dd:f1:1f:06:9c:7e:0b:91:21:58:6e:db:45:2d:7c:
29:dd:1f:60:c7:89:dc:4c:86:81:30:2f:b4:45:c5:
e0:b4:ca:a2:77:b0:e5:97:53:c5:45:96:45:02:09:
8e:0c:a9:6c:86:eb:c5:d9:32:21:ce:8f:51:d4:4a:
63:0c:69:6d:97:a7:c7:22:1c:7c:da:79:3d:55:98:
5e:f4:fd:98:1b:b0:77:9e:ac:02:59:95:ac:02:f7:
ce:02:d2:dc:2a:48:86:05:3a:65:48:76:75:0b:72:
6d:20:22:d9:1d:35:99:7a:5d:fb:f3:35:07:7f:a4:
7a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C4:01:E5:91:0D:8E:C1:BE:76:B9:DD:FF:A0:A5:D0:95:C9:A1:9C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/71d6a8ef-6812-4b82-be67-19cf6fd22ae0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
34.223.24.0/22
Signature Algorithm: sha256WithRSAEncryption
80:b6:2b:40:6d:63:59:9a:c9:37:6f:36:be:c1:de:cd:6a:fd:
85:57:7c:88:de:5f:74:f6:40:59:d5:fe:73:5c:72:24:9c:ff:
52:3e:99:28:b7:d1:c2:8a:c9:e7:f9:b8:87:ee:07:60:f6:58:
c0:8f:c2:91:79:30:ef:c6:8e:da:28:38:46:87:f2:12:01:75:
25:7c:33:03:59:bf:8b:37:15:f6:35:78:09:e4:0a:11:b7:31:
ff:05:a8:75:7b:cf:02:79:4e:98:9b:19:de:55:28:14:38:e0:
63:ff:3e:6f:96:2e:9e:05:1d:ae:59:7c:75:d8:4d:83:49:b5:
73:e8:52:78:6f:86:27:e5:60:ec:19:44:a5:e0:b5:c4:bb:5b:
12:d9:8d:6b:49:87:1a:dd:0f:06:79:89:ff:b7:15:9d:70:c8:
78:1b:81:3a:85:26:74:88:6c:a2:b3:0a:bc:af:6d:b1:a4:88:
b3:af:8d:cf:8c:16:77:b2:6d:91:61:66:91:c5:d5:a4:b5:57:
4a:e1:fe:35:34:6a:3a:24:04:a5:bf:17:00:02:56:e1:08:58:
5d:08:a4:ee:7d:b4:e1:d2:e7:98:19:8d:80:4d:d2:66:eb:87:
b2:b1:3a:eb:a6:e6:4e:ac:ad:66:01:fa:79:5a:76:31:b4:a5:
2c:cd:79:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:35:15 2026 by rpki-client