
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2bd70db9-2525-4e15-8c88-4ccc169122c1.roa
File: 2bd70db9-2525-4e15-8c88-4ccc169122c1.roa (raw, json)
Hash identifier: EUrVQ4/QYsCR325bDR+CQsFaYegjhyF6rHnozhiFptc=
Subject key identifier: 02:31:D8:8B:E2:FD:2D:6A:F7:0B:58:C3:36:80:B8:07:CE:F8:BB:1C
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 62B8E58FEAE9B341BA6B3A6FBCB832E959FEA40D
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2bd70db9-2525-4e15-8c88-4ccc169122c1.roa
Signing time: Tue 24 Mar 2026 22:06:53 +0000
ROA not before: Tue 24 Mar 2026 22:06:53 +0000
ROA not after: Mon 22 Jun 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b8:e5:8f:ea:e9:b3:41:ba:6b:3a:6f:bc:b8:32:e9:59:fe:a4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Mar 24 22:06:53 2026 GMT
Not After : Jun 22 23:59:59 2026 GMT
Subject: serialNumber=a1a51de33c9201671f7d259b338e5afee09eed40e1df0029aef94136c113537a, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:62:55:97:57:f0:85:8d:5a:91:42:e9:c6:
31:d8:b1:3a:41:e1:3a:3b:c1:02:16:9d:de:f3:ec:
01:e4:de:a7:7a:ee:cf:60:6a:25:dc:4f:44:51:70:
d7:5e:81:8b:5c:97:bd:65:5f:95:7f:f2:02:92:3d:
b7:35:9d:be:84:76:49:5e:66:91:d7:2d:c4:35:a1:
57:98:04:0b:b8:0b:cf:8e:f3:90:af:e6:92:e1:b2:
61:36:c1:cc:a6:1e:fc:a7:5a:d4:b1:20:68:e3:7e:
2b:9e:3d:ad:d4:a2:ad:7e:28:bd:34:65:32:4c:9d:
f9:3b:2e:02:97:8e:ab:84:f2:c2:db:54:25:b8:7f:
41:9b:6a:cb:e7:95:3f:60:79:df:73:12:9f:e2:44:
9f:43:f8:37:7c:e9:71:2e:7e:a2:e4:0e:e3:e4:8d:
af:6f:7d:d3:2f:32:75:80:b7:49:75:59:d0:74:74:
d2:3a:ba:1b:a4:8c:fc:0c:70:68:27:03:68:04:fe:
1a:93:e1:74:71:4f:49:b4:9a:55:b7:09:e8:59:31:
3b:7e:d0:3f:73:ac:36:a7:a4:1e:3f:d0:e9:d6:06:
9e:44:01:92:fb:e8:59:38:ef:9b:8f:53:37:23:32:
82:70:e8:72:b7:1e:9c:77:47:39:0e:5c:6b:da:7e:
a6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:31:D8:8B:E2:FD:2D:6A:F7:0B:58:C3:36:80:B8:07:CE:F8:BB:1C
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/2bd70db9-2525-4e15-8c88-4ccc169122c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
55:4a:75:13:38:2b:b5:5b:64:56:48:fe:8d:71:16:b7:dd:30:
6c:fb:23:c2:4c:cb:1b:7c:6e:5c:d4:34:06:bd:00:23:2d:23:
1c:17:76:8b:d9:e0:ba:f9:95:99:7a:52:11:cf:4a:7a:0b:17:
cb:f6:f8:db:12:f1:0c:9d:77:fc:a6:1e:97:5b:a4:14:97:51:
e7:45:b1:81:50:c7:63:d6:af:ec:74:61:09:61:74:85:1d:81:
64:53:2f:e5:14:f2:b5:0d:cc:7d:f0:5c:4e:ba:95:30:f2:e4:
79:46:37:38:94:00:60:c2:63:c1:95:b5:6a:b0:a1:1e:04:3a:
1c:3b:a3:b4:9f:e1:2b:3b:09:d1:4b:a1:23:a0:94:19:0b:7a:
6b:68:eb:3f:0e:5e:eb:13:c1:4e:d0:14:94:08:47:16:58:4e:
58:b8:8f:1c:a2:a0:e1:a2:00:02:f6:ec:b0:d0:d8:e8:b1:4d:
e6:f3:fc:49:34:5b:43:78:56:2a:b0:76:79:29:30:ce:3b:0e:
1f:1e:53:25:d0:33:65:d7:83:44:95:b2:8c:a9:4b:ff:6b:5a:
d5:68:f2:6e:aa:4b:04:ec:bd:fd:9c:ce:4c:3d:a1:fa:ce:34:
d1:71:6e:17:c4:4a:39:50:39:5f:de:9f:e3:44:06:db:ea:ed:
f5:4e:24:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:12:11 2026 by rpki-client