
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a5a6154-ac4f-4a82-a2d0-c505b2b8e53d.roa
File: 2a5a6154-ac4f-4a82-a2d0-c505b2b8e53d.roa (raw, json)
Hash identifier: OsqPhK8E3IZb7ZNLMYTQcengs+Q9HtLVo4HBgQz/PWU=
Subject key identifier: 0C:19:68:27:DD:24:35:AA:22:AD:54:B4:DB:B5:5A:A7:CD:9E:26:B3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 368C78D1F6EEA53B82FB012668E52F4CADF801CE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a5a6154-ac4f-4a82-a2d0-c505b2b8e53d.roa
Signing time: Wed 11 Feb 2026 01:00:53 +0000
ROA not before: Wed 11 Feb 2026 01:00:53 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fea:7400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:8c:78:d1:f6:ee:a5:3b:82:fb:01:26:68:e5:2f:4c:ad:f8:01:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 11 01:00:53 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=d7446409a04692aee8fd1999cee711623dc3bdcad9dee7e199578b876c37d2a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1b:11:d8:31:d7:b6:ae:38:10:cf:23:64:b6:
63:29:a5:67:af:cf:97:1e:e2:11:a4:eb:db:4b:87:
b2:b3:20:2c:7f:4d:3c:c6:51:6a:9e:e8:14:86:3e:
25:b8:3e:29:b8:1e:f6:a4:4f:a5:29:9a:aa:ee:c5:
bb:f6:af:24:4b:ba:88:08:32:75:1f:17:47:a1:ff:
ed:0a:a7:1b:cb:4c:f8:98:df:9b:70:34:22:fc:99:
9c:75:9a:5a:a8:06:ba:ee:f6:d5:66:57:0e:a1:d9:
eb:c9:cf:e6:32:10:26:7c:4f:25:f4:63:6e:06:12:
ed:74:be:26:51:4c:f9:06:c3:5f:f9:56:c1:3e:2d:
9c:a4:04:17:00:2c:c5:f5:64:a2:5e:0b:b6:63:25:
6e:e7:01:31:c4:21:35:5f:86:9f:0e:03:2a:b6:b7:
8a:4b:fe:75:65:28:96:e4:58:92:89:15:5b:90:b3:
9c:0f:fc:4d:d6:6b:45:eb:ce:f6:00:3e:8d:71:3a:
b7:a4:f3:a5:9f:da:3d:a9:b4:aa:07:a8:0a:ac:3e:
82:6f:96:f7:31:b1:f9:c4:44:41:b9:38:74:f2:d3:
3a:38:64:b7:9b:f3:b4:ea:72:1d:1d:33:77:72:f8:
94:e3:00:25:15:0e:8a:4c:35:c8:01:c3:68:ab:cf:
e7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:19:68:27:DD:24:35:AA:22:AD:54:B4:DB:B5:5A:A7:CD:9E:26:B3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a5a6154-ac4f-4a82-a2d0-c505b2b8e53d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fea:7400::/40
Signature Algorithm: sha256WithRSAEncryption
09:47:ae:43:d6:98:05:ed:2c:e8:1d:d6:47:6c:ab:42:a3:36:
40:83:33:18:d9:fa:77:a8:fe:27:2d:ef:24:48:7d:a8:a2:82:
a5:c5:61:4a:41:e5:4a:75:bf:7f:1d:b6:a1:23:ed:ca:f7:73:
ff:11:ce:be:d4:d0:76:a9:30:9c:d8:7b:8a:75:99:f3:43:fa:
78:30:99:24:ab:e4:18:f9:99:1b:43:ac:66:67:f5:8f:e3:8f:
7f:1a:93:fe:85:df:b5:21:7e:0d:f2:6c:dc:ba:09:61:68:91:
6b:39:c0:92:a7:58:d3:63:72:04:7a:a4:8e:09:a1:2e:7a:88:
8a:9c:56:8c:39:0b:5d:52:36:89:15:e1:ad:0b:9b:cb:90:73:
ba:f2:c7:10:c1:f9:e7:5c:ea:bd:f0:68:11:d5:65:8f:2d:8f:
17:45:d1:fa:b2:ac:ea:13:37:87:53:d0:ac:e9:21:18:36:ef:
73:73:60:ad:84:dd:78:c9:57:9e:9e:be:d6:d5:bf:b2:ac:c2:
0c:fb:79:c4:0e:be:b4:42:e9:1d:ec:47:e3:6f:e3:57:8c:00:
28:f9:f6:de:94:3b:e9:2a:5b:25:1c:64:75:5f:46:64:1d:4d:
b3:9b:f4:40:cf:11:76:52:7f:66:0d:9b:11:8a:e8:8e:75:be:
60:03:7d:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:10 2026 by rpki-client