
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94bbb927-ed11-4cfd-8f38-db394dfbb980.roa
File: 94bbb927-ed11-4cfd-8f38-db394dfbb980.roa (raw, json)
Hash identifier: SjBuKanERFLl14rSzr43W6l6qvZzbc40ovsEKcKEq5c=
Subject key identifier: 7B:AE:80:E0:30:22:33:C0:0E:62:AD:47:70:DF:EE:12:42:59:BD:FB
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 043704204B1B0EB857DD4C2E47A8EEA4D5176822
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94bbb927-ed11-4cfd-8f38-db394dfbb980.roa
Signing time: Fri 08 May 2026 02:40:06 +0000
ROA not before: Fri 08 May 2026 02:40:06 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.54.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:37:04:20:4b:1b:0e:b8:57:dd:4c:2e:47:a8:ee:a4:d5:17:68:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 02:40:06 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=4975989a8904f49c13b34ae70d2e542de2d1d07010be3743f1404599a8fd37e4, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:a0:da:d4:fd:ac:8a:57:0a:79:e7:cd:cc:
a7:94:88:42:d6:65:6f:fd:c4:f3:46:79:14:0d:a5:
ce:f8:82:26:8f:35:55:68:01:0e:52:21:38:8b:d8:
cc:3b:7b:80:36:59:95:12:30:b3:8f:e0:b3:33:17:
ff:4c:30:19:01:4c:48:d8:6a:92:ee:87:8d:99:dd:
18:d8:04:41:2f:2d:9d:eb:b3:ea:6f:16:98:b1:e7:
2e:9a:05:14:f1:93:ee:af:80:f1:26:aa:74:1d:1d:
2c:be:3f:4f:4d:d4:4e:bb:bb:f5:19:20:13:f1:b7:
9f:a7:7e:d9:ca:45:f6:47:a6:29:bd:d2:25:d7:a6:
5c:28:5e:6e:9c:9f:96:d2:94:05:68:ed:0f:42:0a:
59:fe:6d:1e:cc:c8:5c:b2:cb:6c:2f:dc:5d:d0:ea:
57:7a:cf:ec:4a:17:65:52:e5:08:e0:7a:44:5b:0a:
d8:b7:6a:74:56:78:b0:3c:13:9f:c7:a2:1c:58:71:
f0:50:0f:1a:09:48:9e:3f:95:b8:f9:c9:c0:2b:ef:
ac:61:88:5a:ee:ec:87:44:af:44:b7:9a:75:08:6d:
0d:40:b5:d0:91:bd:fd:52:65:d3:31:3c:c1:e1:dc:
36:ac:b5:c2:cf:9e:5a:3b:16:2c:ae:5b:42:4e:8a:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AE:80:E0:30:22:33:C0:0E:62:AD:47:70:DF:EE:12:42:59:BD:FB
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/94bbb927-ed11-4cfd-8f38-db394dfbb980.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.54.0.0/15
Signature Algorithm: sha256WithRSAEncryption
86:61:d0:3f:fe:1c:93:cd:fc:01:a6:2a:d0:13:a7:c0:03:c5:
dc:09:28:b7:d9:53:f4:8b:a9:36:45:b6:46:bf:f9:e3:86:c0:
b0:4d:80:4c:39:b1:b9:fb:43:a3:e6:f0:a7:d8:48:0e:a5:64:
c6:88:04:c0:49:fd:b7:ba:40:bb:42:9b:db:0f:d6:c9:af:3b:
bb:a8:8a:38:4a:48:bf:e6:9a:50:4a:17:35:df:bb:45:bf:3e:
4d:bc:61:49:c0:98:ec:7a:f1:0a:88:0d:94:cd:47:22:c4:c1:
ae:d4:e1:26:7c:01:26:21:0c:d3:bb:92:90:2c:34:37:43:dd:
e5:a2:05:18:43:9f:a5:9d:d5:e8:f2:0b:3e:2e:d8:67:fc:35:
c8:5b:33:93:14:1e:35:41:5f:f4:74:70:c7:5a:53:ca:80:ec:
a7:8a:55:d4:7b:ed:86:9b:86:46:2a:0e:3f:79:ca:c3:6a:4e:
eb:08:95:51:14:bd:69:50:2e:a3:44:26:82:ed:7c:18:c5:d3:
95:24:d6:40:d3:a1:ab:d5:67:26:a4:2e:70:2b:46:00:00:ac:
ab:08:13:30:a6:0c:ad:90:71:f6:45:4f:2c:04:0b:da:72:a1:
66:99:2a:40:52:6f:68:2e:a4:3c:17:15:0c:53:41:bf:ca:b4:
fa:2b:c0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:26:47 2026 by rpki-client