
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f7939dc-a277-4b22-bc27-1cf03b312feb.roa
File: 2f7939dc-a277-4b22-bc27-1cf03b312feb.roa (raw, json)
Hash identifier: 3D/Qv71XS2kq5j91auv8YzJQch9UHGrBJ0kiiknQqr0=
Subject key identifier: 2C:BC:F5:11:B3:65:1E:79:FF:2C:17:47:47:D3:1A:5B:96:4B:21:A5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7C1B23770A08B511D12F41D6E8A7EDA57ED4F748
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f7939dc-a277-4b22-bc27-1cf03b312feb.roa
Signing time: Sun 24 May 2026 00:00:02 +0000
ROA not before: Sun 24 May 2026 00:00:02 +0000
ROA not after: Sat 22 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 43.226.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:1b:23:77:0a:08:b5:11:d1:2f:41:d6:e8:a7:ed:a5:7e:d4:f7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 24 00:00:02 2026 GMT
Not After : Aug 22 23:59:59 2026 GMT
Subject: serialNumber=18f5ed2f25a2c595cc0704f58ba3b06113a7197d8676fc2af3c9ee1fd625e8a0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:91:76:20:6a:fb:85:3b:d1:74:dc:77:34:e5:
a1:09:f4:5e:b2:35:c4:be:72:fe:7f:75:2b:08:a4:
42:07:3f:70:bf:4d:19:68:79:0a:b1:24:7f:46:4c:
ad:d8:42:74:2b:e6:03:8e:c7:05:bc:0b:f9:ea:71:
53:33:f6:66:8a:52:67:a6:60:07:45:41:38:11:74:
c5:50:12:88:36:73:44:11:f8:6d:55:07:36:e5:8b:
0d:be:0e:0b:75:e0:1f:3c:56:c8:24:29:04:de:7b:
36:7e:91:23:7f:8c:a2:a3:d1:56:4c:68:d4:ad:e8:
40:f7:f2:88:70:bf:77:d8:f2:bc:35:c4:22:2b:2d:
3a:04:d7:0c:d7:9b:85:48:70:47:b1:bb:02:85:5d:
05:07:cb:e3:42:ed:a5:f6:66:1f:f5:fb:39:5d:d1:
7d:01:77:b1:2e:61:02:0c:b0:da:38:a6:f0:28:02:
28:87:6a:aa:79:4b:1b:29:f5:52:95:6b:29:04:dd:
f2:75:41:fa:fb:79:30:0d:32:cb:64:dd:25:bb:50:
54:52:4b:cc:a1:a0:5b:2b:c0:3a:0c:6d:30:a3:9e:
2b:cf:36:c2:28:91:0b:ee:8f:47:33:36:86:17:9a:
0e:5f:07:91:67:0c:8a:26:9c:9d:6b:9c:9d:20:66:
78:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BC:F5:11:B3:65:1E:79:FF:2C:17:47:47:D3:1A:5B:96:4B:21:A5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2f7939dc-a277-4b22-bc27-1cf03b312feb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.24.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:9f:93:09:33:b2:27:b9:aa:8b:74:d0:30:e8:7a:e4:ed:ec:
0e:6e:2a:c1:e7:76:a2:8e:6a:03:73:b4:c4:3a:21:a9:43:88:
ef:5f:2b:c0:dc:c7:23:63:a9:39:63:f5:79:08:64:75:2e:8c:
1a:04:60:77:97:bf:17:7a:81:a7:c4:9d:65:0b:7a:ed:82:3c:
44:d7:c3:e2:8e:98:e2:db:f4:5a:72:2a:d0:10:88:10:b9:f7:
4f:db:e6:3a:f0:f6:4d:a0:53:f7:cf:b4:5c:26:1f:e1:57:d6:
c7:f2:ea:21:89:17:fd:a3:09:1d:99:a3:11:a8:73:78:c4:93:
f8:f0:30:70:59:91:8c:14:04:84:b4:45:2e:67:6f:14:fe:9b:
59:05:e0:b7:79:e8:08:5d:ba:28:bf:ea:61:f9:32:69:89:3c:
fa:62:0c:91:8c:b9:75:b0:7a:e3:12:46:bd:63:f8:a7:11:70:
62:81:22:a1:83:2f:74:c3:ad:b6:5e:c9:e9:48:ec:6d:20:db:
cf:9e:28:1e:e4:9d:84:ae:e7:05:41:dd:22:01:2a:94:08:db:
a9:3e:0a:70:c9:8a:5c:6a:4c:bb:fe:fc:77:cf:fd:46:07:72:
f1:ed:0b:ad:f5:b4:8e:f6:11:0e:d1:24:ba:70:d0:60:24:eb:
8e:43:4a:cf
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfBsjdwoItRHRL0HW6KftpX7U90gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTI0MDAwMDAyWhcNMjYwODIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxOGY1ZWQyZjI1YTJjNTk1Y2MwNzA0ZjU4YmEzYjA2MTEz
YTcxOTdkODY3NmZjMmFmM2M5ZWUxZmQ2MjVlOGEwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNkXYgavuFO9F03Hc05aEJ9F6yNcS+cv5/dSsIpEIHP3C/
TRloeQqxJH9GTK3YQnQr5gOOxwW8C/nqcVMz9maKUmemYAdFQTgRdMVQEog2c0QR
+G1VBzbliw2+Dgt14B88VsgkKQTeezZ+kSN/jKKj0VZMaNSt6ED38ohwv3fY8rw1
xCIrLToE1wzXm4VIcEexuwKFXQUHy+NC7aX2Zh/1+zld0X0Bd7EuYQIMsNo4pvAo
AiiHaqp5Sxsp9VKVaykE3fJ1Qfr7eTANMstk3SW7UFRSS8yhoFsrwDoMbTCjnivP
NsIokQvuj0czNoYXmg5fB5FnDIomnJ1rnJ0gZni/AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQULLz1EbNlHnn/LBdHR9MaW5ZLIaUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJmNzkzOWRjLWEyNzctNGIyMi1iYzI3LTFjZjAzYjMxMmZlYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIr4hgwDQYJKoZIhvcNAQELBQADggEBAH+fkwkzsie5qot00DDoeuTt7A5u
KsHndqKOagNztMQ6IalDiO9fK8DcxyNjqTlj9XkIZHUujBoEYHeXvxd6gafEnWUL
eu2CPETXw+KOmOLb9FpyKtAQiBC590/b5jrw9k2gU/fPtFwmH+FX1sfy6iGJF/2j
CR2ZoxGoc3jEk/jwMHBZkYwUBIS0RS5nbxT+m1kF4Ld56Ahduii/6mH5MmmJPPpi
DJGMuXWweuMSRr1j+KcRcGKBIqGDL3TDrbZeyelI7G0g28+eKB7knYSu5wVB3SIB
KpQI26k+CnDJilxqTLv+/HfP/UYHcvHtC631tI72EQ7RJLpw0GAk645DSs8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:18:23 2026 by rpki-client