
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4d14a5-ea9d-4174-9b05-39e291c5617a.roa
File: 0e4d14a5-ea9d-4174-9b05-39e291c5617a.roa (raw, json)
Hash identifier: 6xxzEy+7eTJPTV84KthQrd4aF1Q+tmJF2CmragQy/Ls=
Subject key identifier: F7:DE:A0:5D:50:01:D9:D7:1D:B4:4F:AA:63:62:F5:62:41:38:F4:D0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 18FB3FB61628F30FFD3FCADCBAE50EBF41F79C64
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4d14a5-ea9d-4174-9b05-39e291c5617a.roa
Signing time: Sun 08 Feb 2026 00:00:06 +0000
ROA not before: Sun 08 Feb 2026 00:00:06 +0000
ROA not after: Sat 09 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 216.113.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:fb:3f:b6:16:28:f3:0f:fd:3f:ca:dc:ba:e5:0e:bf:41:f7:9c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 8 00:00:06 2026 GMT
Not After : May 9 23:59:59 2026 GMT
Subject: serialNumber=518f291796ab048a2ebf5fe029bcdeee73acc8d57b1f52feb4a37c47dd185fe6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:13:97:1d:6a:0b:c2:46:26:e9:20:cf:ab:
94:30:3b:73:85:aa:a3:a3:b7:b2:10:02:13:cf:43:
b8:15:19:da:dc:1f:ee:97:bc:2f:bb:68:67:e7:31:
6c:50:04:b4:fb:e3:b0:d2:b0:fe:04:f2:3a:95:07:
d0:99:3a:ef:55:b7:f3:e4:4e:74:41:86:7c:50:18:
7f:3b:12:1c:00:f3:e1:82:2f:ea:f0:f0:20:58:62:
24:a4:70:7b:06:a5:f6:9c:69:b7:d4:2b:5f:97:bf:
54:ce:6f:6e:11:f6:7b:0f:cc:09:10:e3:ed:2f:c7:
5a:6b:39:05:f6:f3:64:4e:b3:3e:50:58:3b:78:20:
35:25:91:67:6a:9a:5f:f7:97:ef:20:ca:38:4a:22:
d7:94:05:ab:7b:f2:d8:d3:78:01:09:95:47:48:1b:
fb:4f:f6:66:7d:30:ed:be:7e:56:e9:b3:34:3a:1e:
78:fe:77:f3:3f:63:e8:2f:5e:6c:a1:7c:d4:f1:f8:
27:bd:26:71:e4:06:b2:00:56:ff:b0:12:e0:ed:35:
39:ce:d4:d3:d7:91:b7:aa:93:31:56:eb:e3:1f:08:
06:8a:79:ea:dd:62:5d:15:3f:53:33:64:c6:9f:91:
1e:9a:bb:92:ea:0a:34:28:6d:f3:8d:73:54:3f:68:
65:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DE:A0:5D:50:01:D9:D7:1D:B4:4F:AA:63:62:F5:62:41:38:F4:D0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e4d14a5-ea9d-4174-9b05-39e291c5617a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.113.224.0/19
Signature Algorithm: sha256WithRSAEncryption
50:13:e9:a5:25:d5:05:ad:ea:7c:89:03:9d:66:72:fb:28:f5:
93:2e:4d:4c:12:98:8a:6a:5c:d5:be:8d:b8:f1:6a:0e:0c:ea:
a7:26:8c:ec:91:40:9b:8f:ec:de:9e:f0:37:74:13:35:cb:67:
e4:d6:ac:00:b5:01:c0:75:89:c1:ee:f9:f6:e7:41:be:ce:aa:
4e:40:4d:53:94:97:4d:ae:29:99:c4:1b:4a:74:36:9b:87:a8:
4e:53:16:ab:45:09:58:07:6f:90:9b:0d:5e:9c:f2:00:86:da:
43:f8:4e:67:d2:a9:82:4c:14:a3:dd:86:6c:11:d9:5d:0e:76:
ae:fb:25:ed:ed:21:58:14:18:42:62:3d:fb:44:69:66:d4:6b:
45:72:cf:17:1d:56:fd:4e:b7:92:0e:d3:d2:d5:4e:3d:d3:cb:
c5:80:9c:9a:65:be:ec:95:d7:cc:7b:72:9e:bb:a4:e0:58:60:
ab:de:69:37:43:06:5b:db:dd:e7:4b:5e:16:fb:2d:dc:bc:fd:
a4:95:84:ac:62:7d:e1:5f:6f:27:10:58:29:50:76:b6:6b:2e:
cd:7c:d0:cf:a2:48:7f:bf:9d:4c:39:87:80:d2:97:8b:e4:81:
dd:bb:b9:5e:2d:f9:2c:a4:e6:0c:9d:4c:77:8d:5d:60:2d:41:
e2:65:9d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:29 2026 by rpki-client