
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df7dc284-58f5-45e4-95d3-57c336179849.roa
File: df7dc284-58f5-45e4-95d3-57c336179849.roa (raw, json)
Hash identifier: +t8cEDMzwGDe1Ow7wPBOtjyiDvENC7BEPCNCguQfEqA=
Subject key identifier: 29:B7:04:E3:C1:8E:C1:9E:53:B1:72:ED:59:71:8D:77:23:31:CC:56
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7FD1F76E68726D5BF2D5EED4BBFBFF96D69F4928
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df7dc284-58f5-45e4-95d3-57c336179849.roa
Signing time: Mon 11 May 2026 01:10:43 +0000
ROA not before: Mon 11 May 2026 01:10:43 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.158.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:d1:f7:6e:68:72:6d:5b:f2:d5:ee:d4:bb:fb:ff:96:d6:9f:49:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 11 01:10:43 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=d71fdac107748bcf13352424fd157de8f7853dcff2bdf01bc92e99505a008310, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:55:63:36:b7:de:d1:0a:39:6b:60:c5:eb:8c:
28:ed:b8:54:65:c3:e5:3e:f9:67:4f:c9:b6:cb:6e:
ba:55:0e:dc:41:7d:21:70:ba:d3:dd:37:78:b2:79:
33:1e:75:d9:82:6d:33:59:2b:09:f5:9f:cc:db:2d:
ad:7f:64:b4:7f:ac:4e:32:1b:1a:38:84:50:7e:2e:
dd:9c:ce:45:4b:31:e0:2d:48:46:54:57:fe:7d:d0:
c4:22:df:61:d9:fb:d4:88:8e:8e:e8:d9:fc:2d:e1:
56:80:27:6a:42:27:f8:79:28:8d:d9:cc:f8:a0:91:
7b:60:44:62:6d:e7:5a:2e:9f:b4:a3:98:79:23:7b:
03:e3:cc:7d:09:a3:4d:6f:13:9f:4f:04:e2:05:3e:
25:e6:02:af:28:6f:47:bf:7a:ac:6a:9a:70:b1:04:
7f:3d:11:9d:d0:de:6a:fd:ad:62:d0:bf:53:4e:e1:
3f:5c:7a:a0:de:e2:4d:80:41:79:d8:ad:bd:e0:8c:
15:b0:53:fd:7d:b1:6e:34:b8:7a:3e:bc:8d:c4:e4:
75:0c:01:c7:60:5d:13:9b:ba:6c:9e:38:c2:f4:a8:
a2:28:77:b6:aa:da:25:d9:51:2e:97:ed:14:9a:3e:
85:dd:0e:89:7e:1d:89:77:24:58:0d:00:66:78:f5:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B7:04:E3:C1:8E:C1:9E:53:B1:72:ED:59:71:8D:77:23:31:CC:56
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/df7dc284-58f5-45e4-95d3-57c336179849.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.158.204.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:74:24:ea:ab:1f:a9:72:2f:29:fa:7d:5f:74:53:f3:a0:81:
b1:bc:19:f6:d5:f5:28:bb:c4:63:00:e7:62:d5:8e:a9:e1:9a:
01:1b:8c:6a:de:cf:00:d4:89:f2:5d:1b:f6:c4:bc:f0:1e:e1:
95:de:ad:b4:3c:91:d0:61:c3:f7:01:21:38:fa:1f:f1:f9:8b:
91:1d:06:d1:83:1d:80:f8:1c:00:14:1b:88:10:de:5d:c6:69:
98:a6:55:45:9c:a9:22:d3:85:98:06:c2:c6:33:d5:16:bf:68:
43:ca:81:e3:d4:6a:2d:0e:85:09:84:d7:fe:e6:3a:3d:ee:67:
1e:32:29:64:f0:71:a5:26:8a:93:6a:8f:ef:81:4e:06:b2:3b:
f2:89:d7:c0:d7:b1:5a:3f:ed:58:23:22:e6:56:70:fb:9a:cd:
b4:1d:a4:39:9a:ba:52:8e:a1:20:f9:7d:ef:a0:7a:ac:8e:40:
66:72:a9:61:26:3a:e7:a1:80:6b:32:e0:71:40:84:b4:d6:aa:
aa:11:79:38:d2:e7:06:52:69:6c:09:40:f1:eb:e0:18:d3:8b:
f3:5b:85:ba:9b:fc:9f:f7:24:9c:44:e8:64:5c:e4:7b:a2:a6:
68:ed:58:17:ea:0a:b2:be:68:2d:2b:f4:98:49:19:3b:14:40:
13:fd:89:31
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUf9H3bmhybVvy1e7Uu/v/ltafSSgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTExMDExMDQzWhcNMjYwODA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BkNzFmZGFjMTA3NzQ4YmNmMTMzNTI0MjRmZDE1N2RlOGY3
ODUzZGNmZjJiZGYwMWJjOTJlOTk1MDVhMDA4MzEwMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDoVWM2t97RCjlrYMXrjCjtuFRlw+U++WdPybbLbrpVDtxB
fSFwutPdN3iyeTMeddmCbTNZKwn1n8zbLa1/ZLR/rE4yGxo4hFB+Lt2czkVLMeAt
SEZUV/590MQi32HZ+9SIjo7o2fwt4VaAJ2pCJ/h5KI3ZzPigkXtgRGJt51oun7Sj
mHkjewPjzH0Jo01vE59PBOIFPiXmAq8ob0e/eqxqmnCxBH89EZ3Q3mr9rWLQv1NO
4T9ceqDe4k2AQXnYrb3gjBWwU/19sW40uHo+vI3E5HUMAcdgXRObumyeOML0qKIo
d7aq2iXZUS6X7RSaPoXdDol+HYl3JFgNAGZ49WCtAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKbcE48GOwZ5TsXLtWXGNdyMxzFYwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2RmN2RjMjg0LTU4ZjUtNDVlNC05NWQzLTU3YzMzNjE3OTg0OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAPnswwDQYJKoZIhvcNAQELBQADggEBAFt0JOqrH6lyLyn6fV90U/OggbG8
GfbV9Si7xGMA52LVjqnhmgEbjGrezwDUifJdG/bEvPAe4ZXerbQ8kdBhw/cBITj6
H/H5i5EdBtGDHYD4HAAUG4gQ3l3GaZimVUWcqSLThZgGwsYz1Ra/aEPKgePUai0O
hQmE1/7mOj3uZx4yKWTwcaUmipNqj++BTgayO/KJ18DXsVo/7VgjIuZWcPuazbQd
pDmaulKOoSD5fe+geqyOQGZyqWEmOuehgGsy4HFAhLTWqqoReTjS5wZSaWwJQPHr
4BjTi/Nbhbqb/J/3JJxE6GRc5HuipmjtWBfqCrK+aC0r9JhJGTsUQBP9iTE=
-----END CERTIFICATE-----
Generated at Tue May 12 22:00:03 2026 by rpki-client