
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea443fce-4f53-4ffb-844f-f4ca506ecf0d.roa
File: ea443fce-4f53-4ffb-844f-f4ca506ecf0d.roa (raw, json)
Hash identifier: vv/+9XxbqhVYsm8qzMOX5MnIxCSe1fma9VkyKas6wyE=
Subject key identifier: 38:72:13:C0:80:CE:D6:05:D1:B8:CF:E4:C3:F4:50:FF:8E:F8:A2:4A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 05D4E6CC68D7C4484F90148DF8A237EED3AF1E96
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea443fce-4f53-4ffb-844f-f4ca506ecf0d.roa
Signing time: Sun 22 Feb 2026 00:51:10 +0000
ROA not before: Sun 22 Feb 2026 00:51:10 +0000
ROA not after: Sat 23 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 205.147.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:d4:e6:cc:68:d7:c4:48:4f:90:14:8d:f8:a2:37:ee:d3:af:1e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 22 00:51:10 2026 GMT
Not After : May 23 23:59:59 2026 GMT
Subject: serialNumber=27b543c5838d8a86e24a49036d9369bf854da3ea4149b42f99703dca1d15b458, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:6b:06:b2:84:92:53:d4:24:fa:e9:ec:f4:
e8:1c:da:17:1c:0a:7a:1c:0a:0f:3d:d3:af:db:94:
22:5f:5c:27:b9:a3:0c:08:28:0e:a4:26:79:4e:22:
63:41:de:f9:bb:f3:c1:93:33:a2:4a:5a:32:1f:c7:
7e:e7:32:e3:cf:6b:c2:ee:b8:1b:b9:cc:69:e9:71:
2c:54:dc:7f:9b:28:58:f7:9c:1b:cb:d5:d3:85:95:
17:be:72:4f:46:21:78:d3:55:fd:37:1a:73:0e:b8:
da:ac:e4:99:11:80:23:15:9f:2c:0d:5c:9a:2e:5b:
96:93:ad:9a:28:f3:71:1f:68:88:4f:ae:c4:31:04:
7f:ae:55:c9:f9:20:7a:c4:73:d4:4a:93:02:cb:6a:
e1:c4:b8:31:94:ef:da:5f:3a:b2:27:4e:46:61:34:
16:f1:e2:ed:36:3c:9a:5c:23:8f:87:b8:51:ec:fc:
1d:60:1e:91:00:14:a6:7d:c5:34:45:8e:e7:b0:9d:
ae:2c:39:cf:8a:63:09:4c:a4:0d:51:2b:45:ac:71:
7e:08:6a:be:a7:10:1d:1d:da:09:57:41:0a:78:61:
8d:3a:6f:8c:f9:42:3c:1f:90:86:9e:cc:05:d4:9a:
9f:72:48:d6:77:39:ba:9d:45:4b:68:df:81:c0:67:
c1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:72:13:C0:80:CE:D6:05:D1:B8:CF:E4:C3:F4:50:FF:8E:F8:A2:4A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ea443fce-4f53-4ffb-844f-f4ca506ecf0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.147.234.0/24
Signature Algorithm: sha256WithRSAEncryption
21:1b:c8:eb:48:4c:a4:fe:12:8b:aa:0a:72:44:13:c5:3f:fd:
c3:40:cc:89:49:b4:43:61:41:d8:5e:62:4a:76:19:d7:fc:20:
a9:0f:47:e8:75:76:92:f3:78:ef:ef:41:88:9d:37:64:cd:54:
61:12:b4:86:2b:5e:01:32:e3:86:bd:98:ca:26:e0:50:d4:5f:
08:e4:c6:c9:4e:fc:52:a3:ab:23:20:b5:e7:3f:c3:b4:12:3b:
69:7b:2d:53:76:27:5e:8a:3b:a6:77:61:b5:a9:39:b3:e8:d3:
0c:cc:52:ed:2f:48:ee:ce:2b:da:ca:94:29:de:e1:32:62:16:
31:d3:ec:aa:d0:9e:b2:f5:7d:55:6a:dc:ad:c1:ca:93:9f:76:
f4:c0:42:f5:82:46:c0:76:0c:6d:ff:53:e2:14:d7:ea:50:66:
0a:25:ee:c9:47:e6:5d:73:d7:c8:74:1c:41:a9:f0:9f:fb:1a:
8f:96:81:c1:15:09:83:f3:80:8b:01:de:27:9d:41:f8:c5:13:
02:d4:61:f2:db:fa:aa:61:5d:ed:b5:c0:a1:24:b7:15:28:58:
50:42:cd:e6:d0:c6:99:55:47:a1:52:be:5c:e2:a9:6f:54:a7:
bc:7e:79:1f:9f:cd:b1:1a:af:4e:17:3d:28:e6:44:44:84:f2:
e1:9f:8d:28
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBdTmzGjXxEhPkBSN+KI37tOvHpYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIyMDA1MTEwWhcNMjYwNTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyN2I1NDNjNTgzOGQ4YTg2ZTI0YTQ5MDM2ZDkzNjliZjg1
NGRhM2VhNDE0OWI0MmY5OTcwM2RjYTFkMTViNDU4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpPGsGsoSSU9Qk+uns9Ogc2hccCnocCg8906/blCJfXCe5
owwIKA6kJnlOImNB3vm788GTM6JKWjIfx37nMuPPa8LuuBu5zGnpcSxU3H+bKFj3
nBvL1dOFlRe+ck9GIXjTVf03GnMOuNqs5JkRgCMVnywNXJouW5aTrZoo83EfaIhP
rsQxBH+uVcn5IHrEc9RKkwLLauHEuDGU79pfOrInTkZhNBbx4u02PJpcI4+HuFHs
/B1gHpEAFKZ9xTRFjuewna4sOc+KYwlMpA1RK0WscX4Iar6nEB0d2glXQQp4YY06
b4z5QjwfkIaezAXUmp9ySNZ3ObqdRUto34HAZ8HPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUOHITwIDO1gXRuM/kw/RQ/474okowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VhNDQzZmNlLTRmNTMtNGZmYi04NDRmLWY0Y2E1MDZlY2YwZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADNk+owDQYJKoZIhvcNAQELBQADggEBACEbyOtITKT+EouqCnJEE8U//cNA
zIlJtENhQdheYkp2Gdf8IKkPR+h1dpLzeO/vQYidN2TNVGEStIYrXgEy44a9mMom
4FDUXwjkxslO/FKjqyMgtec/w7QSO2l7LVN2J16KO6Z3YbWpObPo0wzMUu0vSO7O
K9rKlCne4TJiFjHT7KrQnrL1fVVq3K3BypOfdvTAQvWCRsB2DG3/U+IU1+pQZgol
7slH5l1z18h0HEGp8J/7Go+WgcEVCYPzgIsB3iedQfjFEwLUYfLb+qphXe21wKEk
txUoWFBCzebQxplVR6FSvlziqW9Up7x+eR+fzbEar04XPSjmRESE8uGfjSg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:06 2026 by rpki-client