
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee68bff1-93a8-4190-83c6-382c6b109b6e.roa
File: ee68bff1-93a8-4190-83c6-382c6b109b6e.roa (raw, json)
Hash identifier: uClG2wh1UgCl7Dlrz7mplZZBua4JwNJTSRH5hAwvvxk=
Subject key identifier: 65:83:50:25:9F:0C:9F:7C:0A:D2:A7:FF:A1:4C:9D:2C:A2:72:AC:95
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 78815E49BCBDDDB8EE4FB472C5BEB726376ADE02
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee68bff1-93a8-4190-83c6-382c6b109b6e.roa
Signing time: Mon 09 Feb 2026 00:00:55 +0000
ROA not before: Mon 09 Feb 2026 00:00:55 +0000
ROA not after: Sun 10 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 150.247.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:81:5e:49:bc:bd:dd:b8:ee:4f:b4:72:c5:be:b7:26:37:6a:de:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 9 00:00:55 2026 GMT
Not After : May 10 23:59:59 2026 GMT
Subject: serialNumber=fc3a5df2045489e960575bd0b84da36cef5f993f70b9e482d0a298af459541b7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:85:75:f2:33:1a:39:af:48:3b:60:5f:0e:
e4:55:18:87:dc:33:e0:b0:41:e2:a3:aa:3b:b2:b2:
a7:3d:26:a2:8f:b0:43:d8:53:7d:e8:f3:d3:64:4e:
82:87:00:78:8f:f8:85:31:68:de:52:b9:ea:cb:d0:
b5:f3:57:26:fa:c4:e9:8b:da:5a:66:b8:91:eb:69:
e8:0f:d0:78:b4:53:76:51:7f:e0:ea:b6:04:16:8d:
d8:d8:a3:02:bd:fa:64:b2:44:d4:42:2a:24:c5:24:
f3:4a:2e:5b:6b:08:da:0f:37:5f:f1:31:6d:88:28:
8b:e6:3e:e6:a2:a5:1b:50:9d:45:ae:84:ad:ed:76:
b8:55:f6:62:90:de:0c:e5:09:79:9e:71:5d:09:21:
92:f4:4a:7a:cd:07:a3:19:02:ca:e6:0f:90:e0:93:
07:8c:16:f8:7f:ac:69:70:ae:45:6d:1e:b4:e7:a2:
4c:7a:4a:92:81:a8:ff:2e:a4:ce:69:ae:f3:33:a4:
1e:ef:66:5f:55:92:75:87:f0:45:b8:d4:9d:c0:2c:
c1:66:ef:55:51:4a:bb:df:c6:fe:39:86:6a:6d:be:
ff:ae:14:86:4f:f5:45:57:e8:67:79:07:1a:4a:df:
2e:2c:25:f3:ac:44:b0:a7:c6:58:d6:37:0a:ac:44:
08:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:83:50:25:9F:0C:9F:7C:0A:D2:A7:FF:A1:4C:9D:2C:A2:72:AC:95
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee68bff1-93a8-4190-83c6-382c6b109b6e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.247.43.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:09:eb:fb:04:b4:32:d2:dd:b3:6b:1b:b0:66:92:43:95:eb:
86:c3:ea:64:f1:d1:e2:e4:43:86:5d:f7:e4:8d:26:ce:4f:3d:
e5:eb:04:62:c1:14:7f:9e:02:b0:b5:75:d3:dc:bf:88:be:fe:
c7:b2:9c:b1:e8:69:ec:f7:70:f9:c2:7e:03:24:7e:72:41:b2:
61:c0:c4:3f:2b:f3:6f:b8:6a:01:b3:67:42:48:50:94:93:18:
44:c3:a1:d3:0a:05:66:47:bb:f6:56:af:73:ca:21:62:62:f9:
56:82:c9:81:c4:ec:b4:ec:e5:76:08:ae:64:c8:8c:e3:9a:58:
47:ee:5b:b9:ef:13:b3:4b:9a:de:7a:0f:0b:a5:ec:b3:a2:b7:
9a:f5:2d:31:39:b2:9e:ac:a0:27:cb:92:7d:b2:fb:57:aa:2c:
0f:01:10:2a:98:01:8e:d9:7d:7c:02:d6:c5:3e:20:1f:e6:8f:
2f:2f:a8:94:2e:a9:02:23:1d:1e:31:73:12:e6:c6:33:97:60:
84:cf:69:d6:f5:2c:86:92:64:5e:40:00:04:fe:d0:4c:68:65:
b0:a8:e0:4f:22:aa:f3:fb:58:49:89:e9:56:62:01:8b:c6:c6:
f9:bc:32:dc:e4:67:c5:64:ba:4f:39:59:a2:e2:fc:16:30:e5:
94:5e:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:07 2026 by rpki-client