
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6271cdb9-a1cf-466f-b289-1d6b56a411e5.roa
File: 6271cdb9-a1cf-466f-b289-1d6b56a411e5.roa (raw, json)
Hash identifier: q8d6WdWYAPFb3pTkrR6cKLYC2bjemuQzM7ltxYzqW9M=
Subject key identifier: C5:1B:EA:9B:67:0D:13:D6:77:33:C2:EB:C3:EE:AC:7E:C2:A1:E3:1E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63E866E6B4FF4DB120AD00BEDF3E4BE4AF5C8A91
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6271cdb9-a1cf-466f-b289-1d6b56a411e5.roa
Signing time: Sat 21 Feb 2026 01:32:09 +0000
ROA not before: Sat 21 Feb 2026 01:32:09 +0000
ROA not after: Fri 22 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e8:66:e6:b4:ff:4d:b1:20:ad:00:be:df:3e:4b:e4:af:5c:8a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 21 01:32:09 2026 GMT
Not After : May 22 23:59:59 2026 GMT
Subject: serialNumber=a27f800d7f5b8955b649e78c4c7d91605d80e463587a62fc256e2d396324d37b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:42:d8:81:eb:26:8f:2c:d0:98:9d:e5:12:
ee:0c:18:6f:32:f4:41:72:9d:4b:9c:ea:71:ae:d6:
e7:4c:e2:f8:cc:54:a5:47:e4:6f:b4:1f:91:82:d9:
5d:1f:46:5c:62:a2:1c:e7:25:03:e7:85:02:76:3a:
57:dc:4c:47:91:5b:d1:09:49:02:3f:f0:7a:50:21:
7a:4b:19:d0:97:62:bc:a4:78:5f:25:b1:d8:0d:43:
93:b8:cf:25:9d:29:b0:fc:70:ed:47:b8:fb:75:85:
ff:17:bd:f8:bb:2d:0d:ae:16:5f:f2:4c:45:11:aa:
6f:d8:8e:4d:f5:1a:66:ed:16:ba:79:eb:56:2d:ae:
a5:ad:99:1b:ec:f7:c4:68:a0:ed:65:a3:bd:24:53:
e0:a1:c7:82:dd:5b:35:9c:d8:69:4d:5c:f2:e3:f5:
2f:eb:5e:26:14:b8:c0:06:75:37:f5:ca:50:b5:bf:
00:b4:d2:06:3c:88:8c:66:ad:80:27:f7:d2:62:4e:
01:9f:80:0d:ea:c8:b0:66:e2:05:5f:af:23:98:b0:
6b:d0:94:f9:b8:b7:6c:99:2c:18:2b:c2:0f:10:07:
d9:65:fd:a5:e7:26:15:23:68:be:1d:d9:24:8b:fe:
f4:c9:eb:62:25:52:fc:b2:4e:10:39:30:47:13:e8:
5f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1B:EA:9B:67:0D:13:D6:77:33:C2:EB:C3:EE:AC:7E:C2:A1:E3:1E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6271cdb9-a1cf-466f-b289-1d6b56a411e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.92.0/24
Signature Algorithm: sha256WithRSAEncryption
92:33:a3:00:cf:20:2d:9e:56:ee:a3:af:6c:f4:98:39:14:f3:
49:b4:a6:e4:9c:8d:6a:9e:12:26:e7:d9:e7:51:59:fc:50:53:
66:cb:a2:42:e1:4b:cb:e8:f2:72:99:e1:1f:18:be:9f:c8:4f:
1f:0a:8c:53:16:93:d4:84:c6:31:23:2b:ff:3d:1e:7e:72:22:
5b:40:cd:03:bc:b6:db:9e:3b:93:5b:e3:70:21:c7:d3:c1:2b:
9b:2c:cf:ee:91:30:bf:93:4f:25:f2:bf:90:66:67:21:e4:3c:
31:e5:5c:3b:b1:2e:51:a9:66:b3:ef:24:ec:1f:91:2f:4c:8d:
39:92:9c:24:e5:2c:a2:17:9b:65:c5:b4:fd:9d:e8:e6:ba:e6:
03:17:60:86:ca:38:dc:20:14:24:76:34:2a:fd:70:44:e7:91:
2a:8d:33:71:5e:59:82:00:88:1a:e2:e5:2c:10:d9:a1:d0:be:
7e:30:29:c3:a0:52:26:7c:10:11:8b:c7:f1:61:41:74:38:27:
0f:b6:b4:e3:a5:f1:3e:93:56:9f:d9:55:f1:c8:eb:06:30:9e:
c4:93:b5:ee:e6:a3:1a:22:1a:61:9b:07:0f:86:11:3d:ca:00:
cc:0e:33:da:4e:cd:fc:8c:0a:93:9e:af:ab:cf:75:01:55:e9:
9a:98:23:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:18 2026 by rpki-client