
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a9e27ee-b1b7-4c8e-b5cf-0cffc63886bd.roa
File: 3a9e27ee-b1b7-4c8e-b5cf-0cffc63886bd.roa (raw, json)
Hash identifier: BXhhqZRVvDL5ZuY+0KV4GP310RJt2Zlnqb+fherC28c=
Subject key identifier: FB:84:33:89:58:A5:F0:24:59:9F:76:67:4D:C4:FE:7D:7D:3F:27:13
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 448A52F26583AA7AC14FF9AD6103752FEAF85E4D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a9e27ee-b1b7-4c8e-b5cf-0cffc63886bd.roa
Signing time: Sun 17 May 2026 00:20:58 +0000
ROA not before: Sun 17 May 2026 00:20:58 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 192.31.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:8a:52:f2:65:83:aa:7a:c1:4f:f9:ad:61:03:75:2f:ea:f8:5e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 17 00:20:58 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=1d1bf463803ba750dbedc3074fa537d7e2983255a8ab3c9632eab50c0b35761d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:a6:03:fb:a0:c9:34:4c:4f:2e:04:3b:2f:
bb:de:2d:ed:8c:9d:0f:a1:29:fa:2e:31:d2:a6:48:
7b:9d:8e:18:ae:71:f2:b9:34:98:50:b5:b9:7e:56:
d0:9f:19:8b:9b:1b:9d:bf:de:ca:0b:1e:2a:bc:c7:
fc:7b:9a:b5:ed:5b:8a:35:fc:86:65:fd:91:70:82:
ad:25:f2:15:1e:23:ca:42:ca:ac:c2:96:8f:d1:e1:
3c:5c:27:8a:b4:57:da:89:2e:e7:0c:d8:2c:49:df:
ca:b5:61:4a:e0:a3:30:56:2e:30:58:43:01:8e:66:
7f:eb:d8:2c:4a:94:2c:23:eb:f5:f9:87:69:3c:43:
7f:88:42:cb:72:c2:91:6f:c2:b3:b3:6b:26:34:15:
1e:cb:21:9e:f6:ee:f8:68:19:09:75:3c:f2:76:a4:
7e:09:25:0a:aa:c7:c7:52:d5:29:6f:f4:e0:23:17:
a1:71:84:93:a8:fa:3c:0a:a1:1f:58:08:1d:b1:1c:
5c:8d:3f:b2:d4:5e:73:4f:39:11:75:91:8e:d0:d9:
0f:8c:7e:18:47:3f:7e:36:68:f3:70:f1:db:fc:f1:
7b:e5:51:01:5d:e2:6f:71:f5:2e:57:f7:a5:6c:34:
9f:a1:20:37:2e:5a:28:79:41:13:ec:1d:91:b3:db:
d3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:84:33:89:58:A5:F0:24:59:9F:76:67:4D:C4:FE:7D:7D:3F:27:13
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a9e27ee-b1b7-4c8e-b5cf-0cffc63886bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.31.212.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:19:a2:72:d9:d1:1d:02:75:73:b2:22:6b:16:db:50:77:53:
b7:ca:bd:5b:de:07:e2:71:18:ba:b0:3e:67:51:fa:0e:95:14:
d1:fe:84:18:ae:55:7b:14:ba:6b:44:a5:a7:4c:5e:c9:69:2e:
45:15:37:b8:06:87:7a:df:e9:17:41:b8:92:ef:6d:3e:70:9e:
ee:43:8b:a7:c8:51:d9:06:10:34:a0:35:15:85:48:e9:98:68:
49:e8:18:48:e4:59:63:3c:55:7d:ec:11:34:e8:cc:61:66:ee:
86:92:c0:33:65:6e:b4:cd:bc:d5:7b:09:60:9c:b2:4a:8e:ef:
e1:67:5d:fc:58:c5:d9:e6:e0:5e:50:d4:33:d7:e7:e7:54:42:
30:dd:11:e2:9f:e9:39:61:1d:db:d5:b1:b3:1e:cb:c2:d1:d4:
dd:b1:63:72:b7:43:b2:e4:ee:f9:c7:a4:3d:ac:ca:1b:72:29:
69:f7:bf:42:54:8e:28:b5:e3:6f:4a:b0:2f:9f:9a:e6:a6:5f:
de:cc:80:54:63:42:de:38:68:3c:d8:8d:c3:96:00:16:65:45:
c5:73:7b:5c:07:d5:9f:c8:69:7f:01:06:65:fb:01:2a:f6:c5:
98:42:a5:92:42:e3:43:d1:f4:08:6d:1f:fa:3b:5b:d0:c1:e0:
ba:b1:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:15:16 2026 by rpki-client