
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23112326-d9b8-4adb-8d4e-0171f8a3c2c5.roa
File: 23112326-d9b8-4adb-8d4e-0171f8a3c2c5.roa (raw, json)
Hash identifier: RYJBS0aH2KqI8Rtrc//vUSI618Y2QxjwT4L19I4vFFU=
Subject key identifier: 86:AE:72:D5:9D:FA:7B:8F:5A:48:BF:94:31:B6:F2:5C:11:E2:0F:45
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 077A1D47E77BF83E85C81F5E28F7C9763CC3DBC1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23112326-d9b8-4adb-8d4e-0171f8a3c2c5.roa
Signing time: Wed 25 Feb 2026 02:11:03 +0000
ROA not before: Wed 25 Feb 2026 02:11:03 +0000
ROA not after: Tue 26 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:4030::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:7a:1d:47:e7:7b:f8:3e:85:c8:1f:5e:28:f7:c9:76:3c:c3:db:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 25 02:11:03 2026 GMT
Not After : May 26 23:59:59 2026 GMT
Subject: serialNumber=39d1ed7748a2b705f7b343519f52043320ccdf32faaa12107663f02675974c19, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d7:b8:b2:13:23:f9:2a:1c:b8:7e:77:2a:b1:
4c:ef:8b:fa:93:7b:de:70:ba:75:0f:bd:41:ac:3b:
03:d9:b9:15:4b:c8:02:ba:0a:2d:27:4b:82:62:84:
7a:7c:eb:85:a4:34:ca:09:f0:84:3b:60:e6:c9:d4:
95:c1:45:58:7c:0b:15:c6:91:6a:28:5f:23:5d:b0:
4e:fe:88:82:6c:43:1d:28:d7:06:fd:4d:dc:8c:2a:
61:7a:45:57:ff:92:7b:09:53:11:ef:46:2b:81:31:
20:80:2a:03:c5:79:e4:d2:4b:c0:eb:8c:73:67:71:
ab:3e:a6:46:76:a9:35:7c:0d:1f:38:bf:64:d2:a1:
db:52:3c:93:41:52:72:e1:3a:d8:31:38:d5:00:32:
a7:e5:2d:0c:2d:d1:72:f6:4a:71:9c:c2:c3:46:e4:
34:d4:f5:77:91:a4:54:4e:b6:89:a8:82:63:ac:de:
68:5d:e5:c8:ac:76:6e:31:31:23:62:79:ee:75:1d:
8d:6e:84:e4:70:43:28:45:71:df:91:c8:8b:50:0d:
5b:b4:a9:a9:f2:de:01:68:9f:d9:bf:4f:b2:a4:b4:
02:26:1a:49:c3:f4:a1:de:92:58:66:91:cc:fa:4b:
68:cf:00:33:9c:12:c1:79:68:19:8e:d1:4a:9c:0d:
07:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AE:72:D5:9D:FA:7B:8F:5A:48:BF:94:31:B6:F2:5C:11:E2:0F:45
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23112326-d9b8-4adb-8d4e-0171f8a3c2c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:4030::/48
Signature Algorithm: sha256WithRSAEncryption
1f:10:4f:67:15:ed:12:63:ba:d5:c5:30:46:c9:43:de:44:1e:
9d:1e:6f:bf:90:63:51:af:b0:1a:a3:89:90:42:aa:83:8c:66:
d1:aa:b2:5e:2e:10:83:b4:13:a6:5c:67:86:48:aa:71:8a:d7:
dc:36:6d:2c:f3:bc:5f:dd:2f:9d:91:eb:27:62:0e:c7:3d:02:
92:f5:79:d7:51:13:59:49:0b:b1:38:da:7a:da:66:09:71:27:
83:1f:69:c2:c5:80:ea:58:f5:c0:e2:4f:a5:d5:f9:d5:4e:90:
ac:82:ee:76:5e:27:39:fa:0b:a0:08:2e:c8:da:04:33:59:fa:
26:0a:c4:d2:3b:0d:e6:d2:ca:1d:31:b0:0e:87:fd:1d:c7:a9:
88:21:4b:5f:1c:3c:e7:1f:28:6b:c9:b5:60:2b:ce:c1:d8:a6:
22:59:bb:c1:f9:b4:47:a0:e3:ce:72:ba:e0:e3:24:fb:83:50:
d6:38:1f:dc:f2:17:6b:63:c6:7d:92:b6:1a:6a:c3:99:cb:78:
2f:a0:ff:86:77:27:4c:85:1c:36:a2:42:7b:af:4f:40:27:9c:
f1:8b:29:3b:04:b0:1a:05:90:bf:db:de:63:d0:26:8d:1a:07:
98:e8:57:8a:6e:6f:f4:11:32:ce:2f:b7:c3:0c:85:d5:38:0a:
ae:1d:ba:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:53:06 2026 by rpki-client