
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ecd5cdc7-a08f-4791-88d4-ad2bee5fd82b.roa
File: ecd5cdc7-a08f-4791-88d4-ad2bee5fd82b.roa (raw, json)
Hash identifier: yHSRCrGixViu3sfQw/lysu7F9/xZAnCDt2YVohqHWQg=
Subject key identifier: B7:B7:C6:1D:F0:E6:A2:A2:63:FF:DC:3C:D4:0F:75:72:40:F7:0B:3A
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 39219D2B6B59737F0008A76A02BF52ACAE2F3A0F
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ecd5cdc7-a08f-4791-88d4-ad2bee5fd82b.roa
Signing time: Fri 08 May 2026 01:20:09 +0000
ROA not before: Fri 08 May 2026 01:20:09 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 13.248.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:21:9d:2b:6b:59:73:7f:00:08:a7:6a:02:bf:52:ac:ae:2f:3a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 01:20:09 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=547488749a11aa84141733c3aedc9dac57025db1f6e8a8fd6a1a94e01595762f, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6c:54:19:47:7c:40:32:6d:b1:16:c6:ad:22:
ad:a2:04:10:ba:3d:f2:d6:74:de:8f:cf:1e:4b:9c:
a2:ab:66:7b:e3:56:0d:b6:8a:e1:ca:53:07:38:aa:
64:6e:9d:78:06:9e:e0:1d:72:c1:97:d3:34:d0:6f:
9b:1d:67:46:ed:ef:91:9c:b4:11:2b:ae:f0:96:8c:
fe:f4:b8:19:0e:f2:19:61:26:c9:44:03:0a:5a:e3:
89:00:82:c7:05:af:a1:4b:0d:e7:a0:14:6d:98:36:
60:49:04:db:a1:c5:75:bf:63:3f:9c:1f:bb:46:30:
fe:7a:b0:14:73:3a:56:62:ef:23:e7:46:c1:c0:cb:
21:05:06:5e:28:b7:70:b1:c6:c5:4f:f9:94:c3:0f:
2e:4f:6e:86:84:3f:9f:9a:5a:05:2b:83:e0:eb:a3:
14:a1:51:14:37:08:24:53:ad:cf:14:f9:ba:ff:c9:
71:5d:7f:87:f7:a8:1c:9f:fb:86:54:e1:9b:ce:ab:
b8:ef:77:b9:d1:d8:b7:90:6d:9a:ba:43:b3:0a:be:
05:df:a9:0d:ba:b9:04:7c:33:99:e7:81:69:56:21:
3f:00:ec:e0:b7:66:34:eb:1c:ca:4b:57:3e:ec:0b:
d7:b0:99:19:ed:d1:d9:45:b3:0f:53:98:dd:cd:ae:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B7:C6:1D:F0:E6:A2:A2:63:FF:DC:3C:D4:0F:75:72:40:F7:0B:3A
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/ecd5cdc7-a08f-4791-88d4-ad2bee5fd82b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.248.108.0/24
Signature Algorithm: sha256WithRSAEncryption
af:f4:e7:2a:82:de:87:38:07:e9:b2:cb:41:3e:7f:af:5d:b2:
c3:61:51:9f:ca:9e:8f:ee:c8:4f:42:1f:23:bc:25:d4:0b:58:
89:67:c1:88:f0:b1:6f:17:88:23:42:56:7b:33:49:a9:41:63:
3a:8b:4c:e9:df:0a:ff:98:90:9f:ff:d8:e2:98:1e:97:1e:59:
80:8b:11:0e:5d:28:18:c7:fa:2c:1a:1a:90:fd:44:63:0d:db:
61:d7:32:a5:26:a0:78:33:29:81:ef:c8:a6:b5:73:08:a9:66:
ba:a9:39:d8:88:fd:7d:c8:cc:23:06:f6:ac:34:3b:ce:d0:91:
07:56:d2:a8:77:94:c2:38:e5:cc:ad:8e:6b:cf:6a:e6:c1:94:
0b:1c:1e:5c:ea:1c:a4:d4:b2:e1:81:0d:4e:c5:c3:f1:02:e2:
27:df:5a:16:fb:be:f7:a6:86:ac:f2:80:16:1a:0e:6c:c5:b4:
51:4a:7b:65:b1:22:14:20:61:97:c8:c8:98:ac:96:00:10:33:
d2:2d:c0:59:a5:5f:05:f6:9c:dc:86:84:a9:e6:91:ca:de:41:
fe:df:cc:1a:9a:78:17:7b:0e:f3:6f:3b:7b:ec:b3:6a:8f:21:
35:8e:ea:b2:13:00:bb:c5:00:67:c2:c6:5c:f0:cb:fc:16:4b:
dc:be:5e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:10:27 2026 by rpki-client