
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb239fb4-7011-4c8a-a697-21a2fd2d9650.roa
File: eb239fb4-7011-4c8a-a697-21a2fd2d9650.roa (raw, json)
Hash identifier: wjkuKXmeVZyLT2QIXINGKux6rLhqwvnFFsCxRxbnT2o=
Subject key identifier: C3:0D:E3:FE:3E:3A:C8:E9:85:68:36:CD:06:64:BE:DA:D2:36:70:8C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7631E43DC25DEF2128FFACEC879C83CE925FE0CD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb239fb4-7011-4c8a-a697-21a2fd2d9650.roa
Signing time: Thu 26 Feb 2026 00:10:48 +0000
ROA not before: Thu 26 Feb 2026 00:10:48 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 69.0.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:31:e4:3d:c2:5d:ef:21:28:ff:ac:ec:87:9c:83:ce:92:5f:e0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 26 00:10:48 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=a4d28f4794b44f963cb517efdb42b19066740ac02c5833b6922294b4f0c0f498, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:27:e9:a2:c4:a8:d4:9b:f1:94:07:a4:36:bb:
ca:39:86:43:34:e3:be:8b:35:80:94:17:1b:d9:04:
95:68:14:8e:9e:af:d2:f5:e3:81:44:2b:85:89:ed:
2f:4c:30:4e:33:ec:21:e4:92:c0:bb:59:7c:67:54:
2b:97:f0:7e:2a:f2:49:5f:27:2d:7a:98:89:39:a9:
c7:c1:01:ac:72:db:4b:e5:f1:50:57:ab:c6:9d:f0:
cd:a1:f4:13:a5:77:76:ed:9b:e6:44:0d:cb:f3:3b:
2a:c0:06:6c:f6:df:69:ea:12:6c:a0:6a:4d:22:ec:
30:f2:74:dd:1d:72:3a:79:78:ff:df:c3:02:34:e7:
5b:9c:22:a7:d6:49:6c:3a:d0:b5:3d:77:db:c4:ea:
7f:3c:81:4e:4a:28:6d:98:c2:62:c6:15:6e:89:6f:
7a:6a:bb:b6:2a:d2:64:08:fe:74:0b:83:ef:c6:dc:
a7:75:31:a5:06:fc:3f:75:67:55:25:ab:a1:6b:34:
4c:dd:48:e4:27:da:23:45:21:01:64:c7:ae:0e:ca:
88:cc:4f:ed:83:1e:9b:66:d4:ac:b1:66:0b:42:74:
25:44:af:64:59:4d:47:3f:8a:b8:e5:79:34:99:27:
42:7c:e9:3c:26:5b:9e:50:a7:e7:67:83:18:de:1a:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0D:E3:FE:3E:3A:C8:E9:85:68:36:CD:06:64:BE:DA:D2:36:70:8C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eb239fb4-7011-4c8a-a697-21a2fd2d9650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.0.212.0/23
Signature Algorithm: sha256WithRSAEncryption
14:05:f4:51:c0:ab:33:84:74:ce:0a:b7:61:d2:ba:44:93:d8:
91:36:89:5f:34:df:6d:77:10:42:54:8b:2b:57:8e:cc:b5:d5:
81:e0:43:50:31:99:c4:6a:1e:e0:87:b8:9b:55:46:8d:69:34:
4d:7a:51:4f:90:15:35:bd:6e:87:b0:96:a1:77:18:35:35:86:
71:eb:40:c6:58:ec:94:15:e9:e4:09:7a:66:5c:46:a8:7d:21:
5d:21:23:03:1b:c6:6b:65:7e:59:ca:52:01:55:34:7d:04:66:
8a:03:27:7d:3f:27:6b:ff:f2:e0:45:cc:b5:e8:00:19:b1:1d:
8c:b2:57:06:90:c9:2e:90:d7:8c:19:eb:34:12:02:de:55:fc:
d6:a6:a1:eb:74:cb:15:dd:34:79:af:ec:71:fb:fc:3d:1d:0e:
ea:df:3e:67:f1:25:ab:8d:ff:c3:46:81:31:f1:af:e2:0d:13:
5c:1d:b6:bb:8e:1e:fb:34:1e:5b:25:88:9c:23:8f:dc:cf:b8:
9a:72:e6:cc:d6:7a:59:7d:76:74:18:c2:ca:f4:b3:33:74:c1:
d8:aa:f3:4a:1e:44:e9:02:38:a0:18:9d:8d:94:24:24:e0:e8:
4d:d7:cb:c4:71:6e:42:1d:05:50:a2:b2:43:00:c9:e4:0c:1a:
25:0a:97:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:07 2026 by rpki-client