
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc398802-d220-4643-8e26-46671c848505.roa
File: fc398802-d220-4643-8e26-46671c848505.roa (raw, json)
Hash identifier: 6mvD+8OTw3Vg0fgLUXIKOmkbmwXnhxQ453Hn1qU6dMg=
Subject key identifier: C3:73:D8:77:A3:49:11:70:A1:97:A9:30:3C:9C:C6:98:6F:86:8D:47
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0F6648F7F8A08399AFC0CE800CC12694419B28D5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc398802-d220-4643-8e26-46671c848505.roa
Signing time: Fri 08 May 2026 02:31:50 +0000
ROA not before: Fri 08 May 2026 02:31:50 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.124.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:66:48:f7:f8:a0:83:99:af:c0:ce:80:0c:c1:26:94:41:9b:28:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 8 02:31:50 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=2bf562d4737c8eef2015c96d0f2104dda3095f514631de1693dd39f463a7f1eb, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:44:16:30:4c:09:3c:01:6a:3b:a4:2a:a0:
29:d7:f4:b7:4f:19:41:78:fc:37:d3:2f:69:99:37:
c7:ba:d0:f4:99:ac:0d:a3:c1:8a:8e:30:39:ab:d7:
2d:3c:fb:3a:73:00:b6:85:f9:04:c5:09:c4:39:ba:
6c:e0:f6:43:14:1e:a7:e7:1c:3a:0f:8e:69:52:b8:
6e:d5:40:40:03:09:9c:e6:60:8e:07:8b:88:6d:37:
49:c7:aa:24:50:2a:c6:22:b9:97:f3:96:bd:4b:55:
b9:9a:8b:d9:3f:cd:80:2a:22:a3:9e:4c:51:74:e1:
8c:31:c9:4e:02:41:42:9a:c5:5f:de:b2:b8:b7:e7:
1c:6a:cf:0c:58:3e:e3:05:5d:d6:d1:62:ad:98:74:
d1:88:1b:04:97:57:9b:a2:7e:1c:06:1e:9d:fe:5c:
54:5a:3d:b2:fc:b6:49:24:87:d1:20:4e:02:5a:72:
c9:d5:42:99:b6:af:b4:04:81:f4:eb:ff:f3:ad:fa:
83:2b:c7:19:cb:4c:48:a8:23:52:a2:e9:6a:be:fa:
03:47:b9:c8:2e:3c:d2:5f:71:73:21:54:13:6f:32:
99:ab:27:0e:d3:44:f6:1a:30:e2:6d:25:b0:6a:7c:
ec:6b:b1:30:e9:b8:ef:ed:83:ff:f2:5e:e2:05:36:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:73:D8:77:A3:49:11:70:A1:97:A9:30:3C:9C:C6:98:6F:86:8D:47
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/fc398802-d220-4643-8e26-46671c848505.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.124.0.0/14
Signature Algorithm: sha256WithRSAEncryption
3d:b6:14:96:d6:56:fd:70:cb:1f:e0:52:9f:ce:df:9a:28:4e:
f0:62:c1:d8:b3:44:3f:c6:b0:8f:bf:e5:a1:d2:58:27:3d:6d:
42:d6:c3:2c:8f:f9:3d:64:e6:2f:1b:b1:1e:41:fa:4e:23:69:
f1:5d:7e:3f:4c:a1:81:d6:29:08:3b:89:bc:ca:86:e3:4b:32:
17:7c:7f:12:0b:dc:f1:72:2f:4a:3b:b7:0a:4c:a7:7e:d8:34:
ed:7d:57:4d:50:c0:19:9a:31:43:d7:1f:db:3d:8e:4f:74:56:
59:c4:c8:ea:c0:ff:65:bb:a8:c8:ce:97:df:2d:39:50:ca:56:
10:37:f5:41:36:54:e5:08:25:d8:75:1c:99:ac:5b:c3:94:ed:
17:23:e6:a5:fd:b7:43:c9:f0:76:10:cf:f9:ce:e3:56:97:fe:
24:11:81:de:8c:b4:04:05:a0:94:39:fb:95:b7:53:19:a5:dd:
f0:1c:00:3a:ff:f9:cf:59:cf:f0:04:e5:32:f9:a9:e8:dd:da:
2a:ac:be:c0:71:fe:18:5c:f7:fe:b6:ab:6d:5c:f8:60:93:d2:
66:48:87:27:cc:c8:0c:25:91:0d:8b:fa:98:aa:64:5d:e4:e9:
f4:a7:1a:11:3e:99:5c:35:9c:19:f6:e9:5f:bf:7b:50:b3:05:
45:5c:e5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:25:37 2026 by rpki-client