
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ebd968d3-ce48-4118-aed7-b938cd13153f.roa
File: ebd968d3-ce48-4118-aed7-b938cd13153f.roa (raw, json)
Hash identifier: lXqqlAvvyles3rYosF5ub3ziWS45HMYjZ5oXyZ3SqQI=
Subject key identifier: 2F:2B:76:49:6D:03:DE:00:5A:88:85:08:D0:4F:96:C3:48:F3:87:D4
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 5E7D996FDC478927390DE9DE4CECD0C62EAC2B32
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ebd968d3-ce48-4118-aed7-b938cd13153f.roa
Signing time: Tue 21 Jul 2026 00:30:48 +0000
ROA not before: Tue 21 Jul 2026 00:30:48 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:7d:99:6f:dc:47:89:27:39:0d:e9:de:4c:ec:d0:c6:2e:ac:2b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jul 21 00:30:48 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=84b2a1e4ca6faca35d4d0ae88ef6a29e52e35c520ca048601c2401c937a112c1, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:bd:54:7d:dc:6d:00:10:b8:05:e0:92:84:
fc:cb:e3:68:6f:96:2d:22:ed:a1:96:df:ec:04:ab:
9f:8c:68:23:53:85:4b:63:df:14:88:32:c7:5e:4e:
07:17:87:c0:5d:56:e3:3e:2e:23:37:40:1a:34:bd:
40:da:c0:7e:37:a9:de:ad:e5:05:61:1a:39:a3:eb:
47:d3:20:23:9c:d7:1c:11:04:d0:ee:65:f8:cf:3a:
48:92:4b:71:40:cb:db:8b:9c:2f:e5:69:5b:66:10:
c4:6a:1a:13:48:e1:13:f4:db:b2:46:e5:b4:e8:55:
43:fd:fc:47:66:32:41:bd:59:82:f5:97:ef:38:33:
42:52:8c:27:35:b6:b1:71:23:6a:06:11:6a:a6:49:
b5:63:84:9b:20:e2:8f:99:77:2a:d9:cb:38:6e:36:
12:83:f8:98:14:5e:93:7b:26:79:cb:c1:9a:e6:0f:
f3:36:eb:53:4b:37:49:89:ae:f2:5c:45:e6:48:a8:
dd:a2:1f:b8:36:15:60:af:64:ef:7b:e7:4e:c2:4f:
ab:f1:f9:02:31:ad:0e:4d:4c:be:5d:a0:7c:34:a0:
b6:60:3b:cd:4a:e4:09:3e:a9:0b:a8:eb:1f:eb:fb:
61:a6:61:58:38:88:52:1e:25:3c:c0:18:7a:89:db:
02:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:2B:76:49:6D:03:DE:00:5A:88:85:08:D0:4F:96:C3:48:F3:87:D4
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ebd968d3-ce48-4118-aed7-b938cd13153f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.228.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f5:7c:53:a4:25:6e:ab:b1:6b:d4:20:af:43:dd:dc:92:55:
d6:31:ae:38:21:0b:61:7b:7d:af:db:7e:56:b9:00:bb:6d:77:
ed:ac:6c:83:69:84:09:d6:63:cb:8a:f1:6d:1f:99:92:b8:55:
f6:08:bf:7f:eb:df:7b:28:e0:68:12:d6:ca:7f:bb:2b:fa:b0:
8d:c5:d3:52:ba:50:9a:af:9e:c2:f3:f0:0c:50:48:76:82:e9:
dd:77:e2:9d:9e:99:57:2d:30:2a:50:3f:07:e3:e5:97:4f:9f:
9c:64:29:1b:53:15:50:de:1d:d8:73:de:82:08:06:d3:24:b7:
c7:28:5a:58:ee:36:6c:79:eb:db:4c:55:fd:5f:b2:42:9f:26:
2b:90:21:f4:8d:49:a2:2a:c0:f4:17:fa:fc:a0:9f:6d:54:8b:
fd:78:89:66:f1:36:cc:98:91:7f:80:b5:f8:82:be:29:1e:ba:
25:78:73:99:b6:f9:ef:12:40:c1:36:35:4e:60:2b:2a:05:5a:
ad:87:49:34:39:e5:fb:2d:68:4c:0e:4b:c7:16:31:23:66:54:
d2:97:00:d6:2f:b7:55:44:b7:58:57:0b:db:e6:cf:23:e0:f2:
db:ee:f0:aa:a7:dd:68:85:ab:97:37:46:2b:39:af:4a:b4:7d:
87:74:53:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:26:07 2026 by rpki-client