
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00cae676-7b3b-4fba-9c48-be691e86b9c8.roa
File: 00cae676-7b3b-4fba-9c48-be691e86b9c8.roa (raw, json)
Hash identifier: jP8VPpEg7SZwb7SlZqgDSLJkTUTMd05T2F860ti4kZI=
Subject key identifier: 44:22:63:EB:C6:FB:97:6E:24:F0:13:DF:A0:E0:92:41:39:4F:07:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 16EA57B81B5CB35924A4B08FDF3AB3EB146AD23E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00cae676-7b3b-4fba-9c48-be691e86b9c8.roa
Signing time: Tue 24 Feb 2026 01:10:06 +0000
ROA not before: Tue 24 Feb 2026 01:10:06 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:a480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:ea:57:b8:1b:5c:b3:59:24:a4:b0:8f:df:3a:b3:eb:14:6a:d2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 24 01:10:06 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=2b7e77d1f74193760fc197493c901908b8d4907638b00b761cc6a59d6ee835b5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:5d:3f:3c:08:b4:db:bf:aa:83:60:cb:b0:
1f:35:b0:eb:94:91:90:68:a1:5c:69:89:ab:c5:5a:
0d:2c:9a:28:d1:9f:bd:bb:e0:4f:44:04:d4:81:30:
e7:62:f6:db:bc:2a:ff:34:fd:c0:8d:66:98:b6:c0:
3e:be:59:8a:09:71:c8:e6:59:44:b3:67:04:b6:f1:
0d:89:60:36:c4:d1:0f:2d:f3:e5:7e:93:08:62:f4:
96:50:ee:02:1b:df:2c:6b:fc:06:4e:d3:5a:39:27:
10:04:53:06:2c:ac:aa:ec:47:b3:8f:30:8c:61:8a:
16:57:bd:7d:e1:52:1c:fa:e7:e6:63:58:b9:32:c1:
6f:58:ac:37:55:6b:25:90:54:ed:e1:07:ed:77:81:
e5:f0:54:f4:9c:28:ba:ff:7a:2a:89:13:62:79:d4:
e7:4c:e9:20:d1:56:5b:f1:4c:09:57:a0:1b:fc:77:
4b:2d:c5:d7:a6:89:48:ea:14:cb:e3:d4:8d:cb:3a:
62:31:a3:ad:bb:60:55:66:60:38:7e:dd:c5:65:cd:
5f:05:d2:95:20:1d:77:ed:7d:e6:5c:c5:c9:42:fd:
86:38:b2:f4:ef:d7:9e:93:56:45:d7:bc:d9:59:b2:
29:a9:3a:54:c5:b8:8f:ab:61:a2:0b:6b:c1:f8:3d:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:22:63:EB:C6:FB:97:6E:24:F0:13:DF:A0:E0:92:41:39:4F:07:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00cae676-7b3b-4fba-9c48-be691e86b9c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:a480::/48
Signature Algorithm: sha256WithRSAEncryption
53:24:5d:5c:b9:9f:06:f3:f4:3a:cf:22:99:9f:0c:02:26:b7:
2f:73:06:9e:57:8f:9c:0f:f0:8a:87:31:86:22:b6:9d:d8:90:
6e:80:75:fc:73:dd:12:c4:cb:d0:21:99:98:74:fc:cb:79:0a:
ba:d0:16:bf:3f:c7:23:52:a8:3c:a8:0f:a5:34:40:78:ed:78:
d9:c7:5a:33:c5:b9:ab:25:2e:d6:74:4c:af:20:93:d3:55:d6:
0d:d6:23:ff:f3:b4:2f:11:f0:d4:08:d0:22:1a:01:d0:5e:05:
29:b8:ec:55:55:0a:ed:c2:37:53:5b:a4:56:4e:ef:65:ba:d7:
68:d6:82:7f:85:eb:5b:b4:d2:4e:b4:5c:46:49:40:78:f1:31:
9b:78:b8:0e:97:fe:18:21:24:d3:bd:3f:bc:ee:ac:ce:53:3c:
37:eb:8d:9a:bf:d5:27:13:03:f8:64:7c:83:4c:19:59:a0:36:
fc:8a:99:fb:fd:d9:37:9f:51:22:6e:ce:f5:2c:a5:c9:11:9b:
3f:e9:cc:2f:fb:7c:7a:cd:2b:fe:de:23:22:ad:68:81:7e:df:
e9:73:3a:d2:20:14:86:7b:93:6e:8f:00:75:80:fe:36:cd:56:
24:74:42:55:e4:e9:66:63:d8:24:65:9c:19:7a:8e:c8:6a:26:
1e:e5:13:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:18:55 2026 by rpki-client