
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/90d62abd-55d6-4d53-9bfb-b5e20bc6d802.roa
File: 90d62abd-55d6-4d53-9bfb-b5e20bc6d802.roa (raw, json)
Hash identifier: eeGKI09/9ljidaQNM+KswICS6UCHGGVxslcdhQn0iO8=
Subject key identifier: 42:78:A1:B3:79:8D:3C:AD:18:4F:BA:30:55:B7:1A:45:F9:81:4E:71
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 220DC7ED9C522AB5C952C9C76E8AFEB702EE8E87
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/90d62abd-55d6-4d53-9bfb-b5e20bc6d802.roa
Signing time: Mon 04 May 2026 14:50:49 +0000
ROA not before: Mon 04 May 2026 14:50:49 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:612::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0d:c7:ed:9c:52:2a:b5:c9:52:c9:c7:6e:8a:fe:b7:02:ee:8e:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 4 14:50:49 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=a139030e0450df180515e6eb40397cadb4203263b8b6f5cac9f358afc92658cf, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7f:00:c5:b7:c9:cd:5e:08:9c:f7:19:c6:60:
26:f9:25:08:df:4c:e1:bd:45:6b:10:22:46:42:f2:
09:17:cd:bb:80:9b:13:a7:ee:c2:50:36:bf:84:73:
ee:70:4c:b8:c4:66:b1:ef:6b:85:cf:5f:71:92:7d:
5e:88:a6:bf:8c:6a:4e:81:20:a9:f1:3d:2c:fe:b0:
20:64:a6:8a:8c:44:2a:18:71:0d:6c:f4:aa:12:67:
a7:5b:de:01:a1:fa:98:1f:eb:fe:45:50:5a:a6:27:
27:58:ea:19:aa:ba:a3:bb:c6:df:b1:8f:04:9f:92:
56:50:f3:c6:c7:3e:22:0b:b5:72:d1:a7:10:70:18:
cf:70:f4:86:e8:48:5a:eb:03:db:1b:a4:30:c5:e2:
cc:2c:65:27:cc:27:24:9c:a5:a9:ee:8d:1e:76:24:
69:9b:0a:eb:57:37:b8:23:c1:41:ee:7b:c5:de:5b:
41:b8:57:06:8d:2f:37:f9:bc:8a:a8:f0:52:df:df:
67:5d:eb:4f:57:ee:38:26:3b:39:90:31:fe:75:fb:
81:34:1f:00:99:a2:37:e2:41:07:dc:39:b0:f7:ab:
75:65:5d:10:5b:d4:3e:a0:ac:b1:d2:bc:75:4e:f9:
f6:39:74:15:c2:89:f5:b7:2b:47:33:18:27:10:2f:
85:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:78:A1:B3:79:8D:3C:AD:18:4F:BA:30:55:B7:1A:45:F9:81:4E:71
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/90d62abd-55d6-4d53-9bfb-b5e20bc6d802.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:612::/48
Signature Algorithm: sha256WithRSAEncryption
1f:59:d3:e4:0c:1c:49:f7:71:bc:96:93:ea:29:6a:8e:59:2e:
1f:34:72:2d:b5:93:5e:04:8e:ae:68:d2:ad:34:b9:db:08:c0:
5c:6a:9b:ad:9e:4d:66:0a:7c:b5:a3:22:63:8d:52:78:38:0d:
80:53:ce:58:94:41:58:42:f9:d7:e4:22:5d:0a:13:a2:3c:67:
cf:6a:c8:dc:c8:b8:50:53:e0:f8:1d:2d:22:39:21:54:4c:95:
ec:0b:07:ab:f4:9d:d0:ca:39:d7:cb:53:d9:f6:47:3b:bc:74:
9b:0a:f1:b5:42:3c:1a:34:86:62:8c:2f:14:da:f4:99:d8:1d:
23:7c:83:88:58:67:89:ba:34:e8:61:e1:ae:63:3c:6a:56:7a:
61:01:94:9d:15:67:0a:c3:68:30:87:e2:99:c4:6b:67:d8:4a:
31:e5:b1:21:82:9b:29:b4:60:3b:8a:9c:ff:b3:d4:37:6b:97:
5a:34:29:f2:7a:f4:0c:75:8c:ff:8e:23:cc:8d:88:a6:7a:d2:
b0:6a:f6:1b:ce:0b:68:fa:cb:87:4f:65:f8:64:8e:76:f7:e6:
15:88:ee:62:23:be:75:4f:c7:73:83:1b:81:b5:5f:b8:a4:45:
7b:82:32:fa:d3:5f:4c:b7:d6:10:1a:bc:8a:aa:47:3e:64:52:
e6:7b:28:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 22:29:18 2026 by rpki-client