
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e77575c1-2389-4702-b309-87544c125944.roa
File: e77575c1-2389-4702-b309-87544c125944.roa (raw, json)
Hash identifier: RTLbL04TKVcGXwTBZcj70ZoMslxkhm840J+/c5L0WgI=
Subject key identifier: A7:70:2A:E5:30:BD:93:79:78:7C:ED:B6:69:52:39:14:19:53:63:BD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0B38891C2DEA8D9646E82F6988E3E3B8BE8E6C4A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e77575c1-2389-4702-b309-87544c125944.roa
Signing time: Fri 20 Feb 2026 00:40:05 +0000
ROA not before: Fri 20 Feb 2026 00:40:05 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:38:89:1c:2d:ea:8d:96:46:e8:2f:69:88:e3:e3:b8:be:8e:6c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 20 00:40:05 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=fabba45dd3d265064efd4831b450b40dbaa4c6afdb0685de5fb77586026c64c1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d4:d8:70:d5:d2:86:38:95:4c:36:9b:ab:ab:
f8:56:64:93:14:34:8b:ef:59:0f:9a:df:38:13:d2:
aa:84:e6:fd:34:95:38:e0:4d:79:72:36:3b:ab:fc:
1c:5a:dc:2f:dc:ef:df:15:dd:fc:2d:ff:27:1b:60:
d2:f1:28:da:0f:0b:f5:59:a4:da:06:d8:48:d6:e2:
90:9d:89:e2:15:8b:21:20:e4:da:5d:f7:ef:34:40:
a4:39:97:e4:ec:73:d3:57:80:37:63:23:13:de:10:
ac:05:0e:ac:d8:c9:cc:23:cd:29:82:cc:c6:76:72:
3e:fc:73:d5:63:39:04:5f:8c:08:e3:75:8f:22:67:
fd:e4:aa:25:fa:70:8a:5b:11:52:86:8c:af:b2:e2:
a3:1b:e8:38:ef:9a:37:0d:c3:dc:27:c6:84:11:90:
48:e0:40:2f:37:cb:4e:86:40:6a:7b:0a:1e:39:7f:
10:63:76:ec:90:5e:a6:59:f6:c7:61:7a:1a:34:c0:
68:b7:6f:56:6e:f7:8b:9d:34:80:66:8f:80:e2:65:
a6:d9:55:b1:b4:ca:ff:77:c6:4e:f2:5b:e2:67:de:
dc:32:81:54:6f:50:b1:c0:2b:b2:ae:83:33:65:a8:
04:ac:87:64:c6:08:b4:68:e7:74:4c:1a:01:28:08:
e9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:70:2A:E5:30:BD:93:79:78:7C:ED:B6:69:52:39:14:19:53:63:BD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e77575c1-2389-4702-b309-87544c125944.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.28.0/24
Signature Algorithm: sha256WithRSAEncryption
37:9c:d0:53:bc:1d:07:11:f9:18:b4:30:92:bb:58:c5:db:6c:
08:ce:cf:ff:dc:70:bd:4a:29:3c:7d:86:73:6e:46:e6:fc:b4:
1e:ef:e8:d7:d1:9b:24:89:eb:ff:e6:c8:55:8f:ed:04:61:e6:
74:e8:58:08:70:bc:20:68:db:ed:2b:88:67:9b:a4:06:29:5a:
41:e6:2e:ee:14:cd:15:33:0e:30:68:aa:00:83:4e:a2:b6:94:
5b:c2:c5:3e:0d:a6:25:3b:da:42:3e:1f:10:91:d6:f6:5c:94:
0f:b0:d9:53:4f:13:54:06:7c:2c:20:99:35:77:7e:f7:d5:ce:
35:4c:3f:30:47:4c:81:aa:61:97:ec:7e:74:0e:d4:d4:1e:2c:
6a:fd:79:ce:69:f9:0b:5d:11:7b:d8:ba:6e:46:52:94:65:26:
7e:31:b0:96:b6:a8:5c:97:a4:80:a1:37:d5:39:8d:ea:c1:ad:
f6:5c:e0:90:bc:9b:32:60:67:5a:52:9f:3f:32:ee:11:c8:6b:
77:8c:a6:af:23:cf:76:95:72:c5:3d:30:46:d2:f8:9b:78:7f:
65:66:dc:04:4e:17:46:64:fe:05:0b:4c:81:a2:33:91:af:86:
51:d3:f6:9f:58:f3:2e:76:46:75:18:4c:b5:df:e5:6b:42:a6:
fb:fe:38:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:53 2026 by rpki-client