
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272b68bc-ad95-4c61-a057-e565a411a365.roa
File: 272b68bc-ad95-4c61-a057-e565a411a365.roa (raw, json)
Hash identifier: o9XAw8/49n3IIA4y9K2R5xyM8Ua9YF8osGoaVC6yjDA=
Subject key identifier: 95:F8:C5:88:CC:7B:AD:7C:B0:8C:8F:F7:57:57:D1:5F:25:DD:91:BB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 64175BF4778A5DEC8A3655AB769469944AD07D04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272b68bc-ad95-4c61-a057-e565a411a365.roa
Signing time: Thu 26 Feb 2026 00:21:22 +0000
ROA not before: Thu 26 Feb 2026 00:21:22 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ff3:8090::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:17:5b:f4:77:8a:5d:ec:8a:36:55:ab:76:94:69:94:4a:d0:7d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 26 00:21:22 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=293b9933c21013d8d5e953ec47f9fd6a5d7a20a0124ac964a757b123f0b87843, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:5b:9e:76:0f:3e:f3:14:3e:3c:93:b3:c6:
3b:ee:95:00:b9:2e:7b:bd:fa:cf:b2:17:48:3f:52:
42:7b:52:61:19:c3:12:40:09:72:8e:61:2e:d0:67:
a2:00:41:d1:50:8f:f4:4a:fa:5f:01:6e:e9:ef:f8:
56:45:28:75:dd:31:fe:23:69:30:fa:41:8b:2c:73:
e4:8f:2b:4d:f9:93:7c:b5:16:70:87:30:ec:dc:71:
19:d2:5f:96:fc:fe:6c:34:81:19:23:cf:e7:2a:36:
9d:75:71:dd:5b:e0:7c:58:b3:6b:06:e9:a2:05:54:
40:ad:6a:02:39:66:a9:e5:f9:fc:48:2c:d9:6c:cb:
dc:a8:6c:6f:12:c5:72:b9:6a:07:cf:80:c3:63:ee:
b1:79:f1:68:67:b0:b6:ad:e1:48:ed:20:9c:59:31:
29:54:bf:49:58:c2:63:47:fa:6e:7b:f1:10:12:fb:
3f:bd:cb:ba:43:c5:54:ea:41:a9:eb:be:3a:5c:6b:
57:8b:87:1e:c8:5e:12:e7:fb:d0:27:31:53:43:03:
c2:8b:1b:f8:03:27:2f:c0:2c:c4:4d:28:d4:bc:1a:
f7:49:42:ed:b3:a4:81:60:ae:a2:21:81:71:e7:d1:
58:46:62:df:38:ad:cd:9b:f9:ea:e6:26:be:c9:2d:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F8:C5:88:CC:7B:AD:7C:B0:8C:8F:F7:57:57:D1:5F:25:DD:91:BB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/272b68bc-ad95-4c61-a057-e565a411a365.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:8090::/46
Signature Algorithm: sha256WithRSAEncryption
ba:a8:af:41:fa:ed:13:1b:e2:31:12:88:a6:b4:0e:c3:53:5f:
1c:ec:06:7d:e6:f9:c2:af:ba:1b:67:7a:7b:3c:a8:39:d7:11:
dc:9e:43:a0:28:e4:b0:88:a8:76:32:19:ab:b0:77:10:2b:d8:
e0:9c:21:77:ad:ae:35:34:aa:05:35:71:0b:83:3c:7d:27:99:
83:f4:23:2b:8d:ab:7c:53:a2:ad:ee:5a:dd:90:eb:96:16:6a:
f1:09:22:d8:de:c5:8e:aa:8e:19:aa:8a:80:36:03:3f:bf:64:
e0:68:65:99:66:63:c6:75:9b:29:75:93:1a:c8:01:1a:92:65:
1a:a1:39:4d:83:70:37:1b:76:09:cc:f2:9d:87:fe:81:72:6f:
bb:2e:99:f9:e7:dc:af:6b:45:b4:58:b6:e8:97:86:75:46:9b:
76:d3:dd:af:56:10:c7:10:75:e2:71:a9:99:4b:78:72:00:09:
52:99:29:60:da:27:d2:94:6f:7e:52:90:d9:46:a1:48:de:19:
c1:56:1d:e9:4a:60:14:b2:1e:4f:87:d7:96:ff:56:5c:0d:86:
4e:da:9f:c5:c0:9e:39:74:ec:e8:28:16:ec:b7:53:c7:19:24:
2f:53:52:4e:f2:a2:2e:9c:2f:68:59:01:ff:af:97:bf:fe:93:
0e:18:9c:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:59 2026 by rpki-client