
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de90cad0-090b-43a1-95d8-5566de2bf6b5.roa
File: de90cad0-090b-43a1-95d8-5566de2bf6b5.roa (raw, json)
Hash identifier: O9Ngzha9L66UuqDVyZQ6t0bz2Nx/uUEBBMkq+TEJAy0=
Subject key identifier: 82:88:76:D2:BD:EA:3B:41:16:34:15:1A:88:E4:ED:D9:4B:D2:23:8C
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 78609B0DFD823A0FD8373C500FDC1AA3929FA3A7
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de90cad0-090b-43a1-95d8-5566de2bf6b5.roa
Signing time: Fri 08 May 2026 02:30:49 +0000
ROA not before: Fri 08 May 2026 02:30:49 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.217.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:60:9b:0d:fd:82:3a:0f:d8:37:3c:50:0f:dc:1a:a3:92:9f:a3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 02:30:49 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=6a554a00fadc8c14eac96f8b6ca4e4ca71e71dbd30c3ec9a117c91208b3b1e18, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:bc:64:84:b1:96:1c:47:94:2e:13:e6:40:
1f:d4:c3:5a:38:7f:d6:be:74:27:14:4f:ea:de:75:
4f:5b:05:30:2c:ed:0f:b3:29:4f:17:99:1b:79:a5:
b4:a0:da:a2:69:23:eb:59:d1:0c:db:9d:66:ed:a4:
6d:3e:d4:b3:cb:76:7d:3c:ed:5f:55:b2:44:94:ac:
60:41:67:ec:d7:a9:b3:09:b1:6e:da:cb:4a:c6:3e:
2a:aa:2b:ab:60:ab:0b:a1:aa:8b:fe:ba:c8:87:ce:
a7:33:3d:af:12:30:c1:36:28:b4:ed:bb:79:10:db:
e4:c9:85:b4:8a:1a:83:4b:c2:0c:c7:12:84:18:6c:
ea:c9:e7:a3:74:62:95:84:b8:70:e8:16:27:91:50:
f0:8e:41:68:dd:fb:a4:01:c3:43:92:bc:bc:aa:f0:
19:b0:2e:13:49:c5:51:4b:3c:23:51:db:41:ca:5f:
d5:e9:8e:b4:e4:50:8f:01:b8:d2:28:27:01:7d:09:
d4:2a:67:68:67:d9:1d:23:c9:b2:ff:62:41:90:ea:
30:ff:c2:aa:22:b4:2e:35:66:99:99:a4:6d:40:d1:
d5:76:75:6f:cc:29:b3:98:5a:d2:67:d9:31:b6:5e:
bc:ba:89:97:c4:aa:68:1d:99:d9:77:40:86:92:b3:
ee:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:88:76:D2:BD:EA:3B:41:16:34:15:1A:88:E4:ED:D9:4B:D2:23:8C
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/de90cad0-090b-43a1-95d8-5566de2bf6b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.217.0.0/18
Signature Algorithm: sha256WithRSAEncryption
0b:18:ce:93:a1:58:4a:32:d2:68:f7:7b:30:d1:43:73:7b:ef:
27:87:14:e1:27:ef:0e:04:68:63:83:37:db:1f:6e:07:d3:29:
d5:3a:db:45:71:b2:f1:f3:65:d5:68:1f:8b:4b:09:5d:6e:a4:
65:3c:bb:e6:3a:40:ef:30:f9:06:03:62:eb:a1:35:70:76:47:
92:53:6c:61:d4:7a:27:69:2d:26:c7:f5:91:7c:0f:f7:de:b4:
3f:d6:fe:4a:13:f9:fb:20:ce:bd:01:d7:f5:72:44:24:7c:98:
b6:fb:a1:05:4d:a0:ab:01:8d:cc:82:72:16:bd:15:d7:51:f1:
8d:da:b8:9f:bd:57:9a:da:96:4a:8c:d0:b0:04:7f:72:ce:59:
64:b0:a1:12:c3:e5:81:b8:63:d3:eb:1c:85:02:bd:b9:ba:d6:
a7:2f:80:a6:38:df:6b:be:d3:3d:32:b5:2e:ad:d0:08:bc:e8:
c7:6f:96:66:c6:ea:22:a4:ef:e3:ca:fb:b9:19:c0:ff:3c:b3:
d5:eb:ad:47:73:16:e6:09:39:cc:d5:ab:77:46:f4:52:ec:15:
7f:3b:40:20:7b:30:12:0c:1b:a2:18:34:5d:e6:e7:05:6c:8a:
8c:e1:e2:4c:a8:70:54:48:5f:b3:a0:2b:b7:96:e1:9c:bb:40:
fc:e9:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:24:07 2026 by rpki-client