
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30083b55-0236-4f8d-8387-e3015b3d58d8.roa
File: 30083b55-0236-4f8d-8387-e3015b3d58d8.roa (raw, json)
Hash identifier: Y0SNhVXQX2Q4dVM5fCv3/gTtOjQF30Yd4FO7v9u07Ok=
Subject key identifier: 29:C6:E6:24:7C:43:CF:FE:3C:0C:47:51:93:6F:66:6C:73:85:DA:7A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1DD97FEDCD0E5DBD60D575F4BE9C3A8230F94DD4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30083b55-0236-4f8d-8387-e3015b3d58d8.roa
Signing time: Sat 21 Feb 2026 00:20:12 +0000
ROA not before: Sat 21 Feb 2026 00:20:12 +0000
ROA not after: Fri 22 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffc::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:d9:7f:ed:cd:0e:5d:bd:60:d5:75:f4:be:9c:3a:82:30:f9:4d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 21 00:20:12 2026 GMT
Not After : May 22 23:59:59 2026 GMT
Subject: serialNumber=206ca26ae0471f98f14ab38f8031fd6497e58736ce5f41b41cd8109b06a98e15, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fc:ed:b0:5a:98:fc:5f:46:b2:71:c3:f5:8d:
f3:27:25:77:0d:37:77:23:3d:53:44:3c:d8:44:8d:
c8:b1:b9:54:25:8d:cc:56:e1:72:df:a1:9c:d7:dd:
85:76:06:0a:15:af:bd:d6:46:12:c5:e5:6e:59:e7:
b8:b9:a2:a7:14:65:dc:27:97:2f:9d:25:2e:c8:9f:
9b:84:71:55:25:cb:16:96:70:d2:57:52:c8:d9:b6:
88:8f:d6:34:e0:19:f9:ae:5e:80:a8:ad:8e:3b:aa:
e2:af:54:a1:f3:e1:c0:19:dc:37:21:8f:c1:df:78:
4a:15:98:a1:8f:ef:cc:01:ba:6e:2a:c7:52:50:6f:
90:cd:a8:a4:a5:0c:32:24:24:98:2e:15:4a:eb:52:
f2:44:92:8d:5a:4b:c8:80:11:ab:ec:2a:fd:66:86:
e1:d3:3b:08:fc:dc:a6:63:69:b4:c1:22:31:0a:bf:
40:9c:36:b5:c9:dc:fa:92:d4:ca:60:0a:64:0d:36:
b1:e4:13:fb:4c:cd:06:0c:8b:cf:75:c3:55:ea:9c:
5c:d8:f1:fa:4f:cd:06:52:77:a7:e0:ce:dd:80:83:
80:e9:56:0c:57:e0:3b:7d:0d:68:5e:54:69:00:2d:
e5:cb:a7:da:6e:01:45:0b:17:ba:5b:d0:30:01:1b:
e2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C6:E6:24:7C:43:CF:FE:3C:0C:47:51:93:6F:66:6C:73:85:DA:7A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30083b55-0236-4f8d-8387-e3015b3d58d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffc::/32
Signature Algorithm: sha256WithRSAEncryption
d6:c3:7d:16:3d:bb:19:a9:86:15:fb:75:25:07:f4:cd:fd:77:
13:27:7c:86:c3:c0:bb:39:52:84:2c:45:57:ca:4a:89:34:08:
c6:ec:0f:c2:37:68:28:43:1a:3f:78:ee:33:56:09:f8:26:87:
2c:c3:f5:23:ac:7f:0a:59:79:aa:0f:34:d6:b7:7e:e4:46:6f:
e1:de:79:97:6b:0e:95:bf:e4:d2:32:a7:21:0a:ce:8d:bf:52:
55:3d:f7:c6:e2:ab:dc:ed:37:c9:0d:56:03:d5:aa:89:50:e8:
18:a1:26:d0:e6:f2:ca:f6:17:05:be:5a:50:96:7d:48:07:73:
65:1c:d8:a3:57:33:0a:b5:a3:b3:2e:a8:49:25:bd:ed:83:aa:
06:07:ef:21:d2:85:06:f1:d2:f8:ec:43:b4:ef:09:30:e0:c7:
17:93:45:2f:16:f5:ca:9f:06:59:54:d2:0c:39:79:35:76:b4:
50:8a:92:e4:df:77:13:76:88:e4:82:08:b6:15:cc:b0:aa:ac:
3a:33:0b:5b:7e:05:84:0e:03:38:af:08:36:68:1e:5c:c9:ac:
34:31:01:43:a6:06:89:d6:2d:ee:79:86:d8:ad:bf:d6:b2:f2:
93:3e:73:72:eb:01:65:e5:11:a0:7f:14:45:b3:3a:79:6d:17:
c7:08:71:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:55 2026 by rpki-client