
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa
File: e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa (raw, json)
Hash identifier: YbXOOhvv0qJU/jJuPfhGBHOtdkkwAF/JJd/KLi+sclE=
Subject key identifier: 93:53:F2:AA:C2:E1:8A:14:A3:FB:80:18:13:11:2E:0C:EC:F0:DF:D1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 265A673EB3A7A6B9859CF6CCFFE963E5201F9BE9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa
Signing time: Mon 27 Apr 2026 00:20:58 +0000
ROA not before: Mon 27 Apr 2026 00:20:58 +0000
ROA not after: Sun 26 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 134.251.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:5a:67:3e:b3:a7:a6:b9:85:9c:f6:cc:ff:e9:63:e5:20:1f:9b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 27 00:20:58 2026 GMT
Not After : Jul 26 23:59:59 2026 GMT
Subject: serialNumber=b3879e3ee72d3cb342c42663e93f3abdc4584fead0e7103bfc5618a5d6790e02, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:b2:ef:30:5d:a9:7c:c2:e8:2f:18:73:d2:
06:4d:34:8e:3b:f3:26:6e:cc:7a:88:70:4b:7e:7d:
2b:ec:4e:12:b7:2f:10:21:9f:4d:55:6c:c0:05:e1:
ab:76:7d:c7:30:51:56:87:6e:ec:35:2b:f3:78:b3:
2e:8e:1a:b3:c7:c6:c4:53:2d:41:ae:1d:df:42:a7:
d4:b0:a7:a5:bb:d0:57:56:cb:65:8f:1f:a8:9c:14:
f5:f3:8d:51:bc:4b:eb:06:fb:e5:18:bd:23:19:df:
06:36:0d:3a:2b:1a:ce:eb:b2:58:c6:db:0a:f9:4b:
b3:26:65:9c:4a:13:22:ec:66:52:d1:ac:fe:b0:e9:
75:ee:77:72:c4:bd:5e:9e:af:00:4a:9c:d3:99:ee:
30:18:3a:1b:09:01:17:f9:f6:ad:7e:9b:7a:55:f7:
aa:af:1d:75:d1:81:6e:fc:0c:08:e9:2f:11:cd:67:
91:a4:0e:3c:4b:da:3a:ef:ac:86:41:c2:00:7b:e0:
3f:0a:6b:10:bf:eb:1b:73:a8:8f:cf:14:df:c8:28:
78:ee:4e:04:c5:48:3e:08:a5:ed:45:bf:96:23:94:
1f:b7:62:d0:01:45:23:6f:e0:9d:98:85:d7:15:d8:
26:6a:b9:b9:6e:bf:33:55:80:f6:21:3b:14:02:e8:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:53:F2:AA:C2:E1:8A:14:A3:FB:80:18:13:11:2E:0C:EC:F0:DF:D1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9ccd6d8-6e4a-413b-8442-42e53f83991e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.251.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:e0:a6:b7:3a:50:b8:14:82:15:5b:f2:bc:b1:b4:bc:52:db:
c2:af:a1:2c:d9:a1:0c:e2:0a:0b:c2:97:4e:69:da:a5:5a:3e:
21:d7:ef:08:f9:ed:43:f6:0a:0e:32:3e:97:a6:5a:dd:cb:26:
53:a0:d4:90:a7:a1:f7:3b:8f:60:a1:4e:34:a2:4a:85:3a:b7:
d9:8a:5c:6b:c9:08:ca:02:b4:54:4c:15:8f:d5:6a:af:07:b0:
7a:3e:50:3c:90:4a:f0:f5:a3:9e:aa:aa:e9:e0:e9:7c:ff:32:
63:6a:24:14:50:4b:be:f0:56:a3:b0:31:b9:12:aa:6c:33:c1:
9d:c5:65:cd:e2:2a:5e:95:13:ae:66:7f:18:77:84:5b:63:1f:
8c:03:cc:ef:bf:34:ba:06:15:87:5b:70:3e:08:4d:07:ec:ba:
97:88:c9:1e:c9:c6:03:87:ea:ea:8f:8c:9d:84:ac:ee:3c:f9:
e9:93:96:20:44:8e:2b:b7:0b:20:d6:d4:67:6b:f2:e8:2c:b6:
3f:9a:73:c1:50:34:b6:47:a5:bb:d4:0a:3a:ac:42:fd:0b:54:
d9:58:29:c0:15:5d:2d:cd:73:d6:94:74:a8:d0:14:4a:ee:d7:
62:63:55:70:38:42:8b:0f:0c:0b:24:1e:a2:f0:69:80:20:0a:
1a:f4:a5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:30:02 2026 by rpki-client