
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e5a31893-a0eb-4a8e-9658-9b5dfe2781a0.roa
File: e5a31893-a0eb-4a8e-9658-9b5dfe2781a0.roa (raw, json)
Hash identifier: gxnRdIkyxca5qfc1FH3nJFdohm6Yw9zifz/MvnBPNpM=
Subject key identifier: 3D:46:07:EB:95:32:29:41:78:15:42:E8:79:EB:27:96:E6:07:D9:49
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2F3CFB12C991C8179E504E36D3A8EDCEC90B255D
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e5a31893-a0eb-4a8e-9658-9b5dfe2781a0.roa
Signing time: Fri 08 May 2026 01:40:53 +0000
ROA not before: Fri 08 May 2026 01:40:53 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.177.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:3c:fb:12:c9:91:c8:17:9e:50:4e:36:d3:a8:ed:ce:c9:0b:25:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 01:40:53 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=3636863e815c86e40c5e397e82490c797038d7d40c8646d602958bfa0d1ab754, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:86:82:9e:cd:da:10:98:79:73:49:3d:9f:15:
5d:81:50:66:55:84:6e:a1:b6:23:31:2b:cb:24:1c:
04:64:0c:bf:76:18:8f:8a:a3:c5:fc:73:9d:a4:6d:
65:4d:7f:30:79:aa:69:3b:57:96:c8:16:7b:09:ae:
1a:46:89:2e:d1:71:52:85:21:d1:97:bc:fa:c1:c6:
3f:41:7e:0a:24:c0:6a:83:2f:b6:76:44:5b:c8:9b:
ee:48:5f:9c:a9:90:b9:39:7f:00:4f:b4:48:bf:35:
91:51:eb:14:62:3a:84:5a:ac:f2:b5:85:cb:09:0e:
6a:ee:4e:fd:11:fe:47:c4:ce:ed:8f:a9:50:17:2a:
ee:e0:b5:8b:88:15:48:2e:e1:b9:25:db:9a:74:5c:
5d:e3:13:a3:f6:41:3b:c0:98:70:17:16:6b:9f:8c:
4f:13:5f:9d:d3:a4:f9:83:32:3c:dd:85:79:9b:b8:
f2:4b:65:6a:3c:ab:d3:4e:02:55:ec:af:bc:65:3e:
0e:1f:32:dc:22:68:e2:37:40:90:19:d2:78:2f:13:
67:bb:4c:49:3b:3b:8e:14:ef:cf:2e:78:9a:cb:76:
75:cc:b9:2b:e1:bf:16:d7:22:ac:55:9d:8b:7e:a2:
e9:0c:00:5c:6b:b7:3f:01:cb:38:16:3e:f9:a6:24:
b0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:46:07:EB:95:32:29:41:78:15:42:E8:79:EB:27:96:E6:07:D9:49
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/e5a31893-a0eb-4a8e-9658-9b5dfe2781a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.177.87.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8a:1f:53:c9:c2:cc:e5:c3:5e:28:0b:4a:06:24:50:ba:5e:
01:91:ee:f2:89:cc:3e:b2:46:45:db:3c:e8:2b:af:d6:88:42:
7d:2d:d2:f7:26:b8:65:56:9e:35:1f:2b:84:ae:6d:3c:d7:42:
3a:73:aa:e4:cd:87:96:b3:fa:92:90:94:7b:41:e9:b5:79:7f:
3f:e4:64:a3:2e:d8:26:40:2b:11:1a:74:02:4e:28:f0:86:a7:
5b:ee:b2:7d:3b:06:01:4b:ab:48:ac:e1:0d:36:31:4a:c3:f3:
7c:1d:83:5c:6e:de:1a:c5:bf:79:da:02:f3:3a:53:d3:44:c7:
55:7a:9f:49:95:5b:e1:b3:5a:a1:01:46:7e:4f:5e:a7:01:8c:
ea:33:43:66:13:f9:54:11:0e:82:ce:77:1b:fb:b8:2c:32:39:
12:a1:e1:45:6f:02:80:23:38:cb:c3:26:17:8a:84:1d:08:a4:
42:c9:1d:d8:42:5f:44:52:46:db:23:9d:9c:7a:e4:4c:80:1d:
24:6a:8f:aa:3d:4e:7b:d5:de:61:03:e7:da:88:61:6f:5b:40:
a7:e0:64:e1:41:d7:55:96:ce:14:af:f4:02:9a:8e:ea:ce:04:
1d:89:11:c3:22:de:3c:28:d0:e2:80:8c:3d:80:1a:f7:c1:80:
a8:2e:9d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:25:41 2026 by rpki-client