
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa
File: 9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa (raw, json)
Hash identifier: G25h7SKpQ1nwDKl8pbP0aXn82DE87GDuaXK9frBQWiY=
Subject key identifier: EE:8C:68:2A:16:69:67:3C:35:FA:D9:A0:78:96:A7:55:40:6F:25:19
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7E4F246A3B6C20A93C9EC20852FBF96F2B6C4BE7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa
Signing time: Sat 28 Feb 2026 00:41:51 +0000
ROA not before: Sat 28 Feb 2026 00:41:51 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.147.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:4f:24:6a:3b:6c:20:a9:3c:9e:c2:08:52:fb:f9:6f:2b:6c:4b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 28 00:41:51 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=dbc518284bf6ca3e1ffddc046ee16c7a4ba380188a8ff64a6fb47fac30a8956a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:b2:e8:1b:0e:b9:86:9a:45:e9:db:5e:d3:
f2:8e:59:2a:90:0b:97:7f:1e:df:2f:78:87:3b:f4:
a8:b9:3d:77:53:fd:73:ab:9c:a2:da:82:3e:38:10:
6e:dc:e6:33:2e:f5:4e:4e:7e:e1:82:59:b6:ee:6e:
40:8c:ca:63:3e:00:22:f1:12:03:b0:2d:30:f5:72:
65:cc:35:41:4e:d8:ad:4e:31:04:ab:1b:28:65:7a:
aa:39:66:37:46:49:b4:ab:0e:f7:df:c9:12:04:ea:
aa:10:f8:f9:cd:fa:dc:13:be:9f:ad:a6:9a:cd:4d:
5e:4c:a8:c7:15:40:43:50:71:8f:44:69:0d:3d:2c:
bc:5f:56:48:ec:16:aa:2f:8e:32:9f:a2:db:c9:e0:
5f:ce:ab:34:9d:90:99:00:30:00:47:a3:07:e3:7f:
a7:b5:a5:51:ed:7d:f3:7b:1e:a2:87:6c:f2:f1:92:
26:46:48:6e:a2:dd:b5:6c:2b:73:81:14:70:6c:e4:
db:99:9f:01:b8:e3:98:4c:d5:99:df:74:53:19:53:
3f:86:f8:32:11:ab:0b:60:6c:60:f7:ef:5b:d1:ea:
bf:fc:1c:dc:1b:18:a5:ef:b1:91:93:be:0f:e6:ab:
7a:15:84:a9:e8:0b:74:76:a0:99:f2:0c:49:af:bb:
44:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8C:68:2A:16:69:67:3C:35:FA:D9:A0:78:96:A7:55:40:6F:25:19
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b9624f6-f4c4-46d5-97c9-0950b5ae1241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.147.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:7b:9e:60:fe:00:00:45:14:03:0c:a3:6e:e2:e9:dc:2e:4f:
c3:bf:c8:5f:57:61:22:c1:f6:61:a3:5a:11:71:67:88:0a:32:
6b:b3:5e:6d:be:b4:a9:4e:24:1b:00:78:ef:1e:aa:61:0b:98:
1b:00:cd:93:9f:0e:b3:9a:49:42:f5:cf:03:b5:86:6e:c6:82:
12:45:cb:78:d1:30:8f:88:25:e8:6b:6e:09:0d:9c:23:7f:ec:
5d:af:95:e5:ab:da:7a:fe:d0:7e:26:17:2d:3e:59:55:f8:a7:
4e:cd:c2:da:a0:0e:6f:50:33:d9:5d:f6:71:76:c0:e0:b8:87:
50:df:cc:5e:fb:23:cf:63:c9:33:8f:66:ee:75:4e:dd:73:50:
6d:41:52:f3:fa:f2:d2:7e:ed:c5:6f:04:32:60:a3:2d:65:82:
ee:91:8e:a0:ae:7f:f9:9f:86:b4:57:2b:52:d8:e4:1d:d2:5e:
28:49:36:f8:dd:bf:a2:7e:c7:1c:d5:6a:35:ca:12:26:5c:22:
24:49:3d:52:59:8a:25:cf:60:17:64:71:26:48:e7:7b:ae:55:
a4:a5:64:a6:5a:10:ae:34:92:4e:cb:a5:60:84:5d:0a:4e:ed:
55:ef:18:7a:2f:03:74:07:02:e8:00:e8:a4:99:5d:ad:1f:7e:
dd:cb:bb:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:10:36 2026 by rpki-client