
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa
File: 3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa (raw, json)
Hash identifier: FdZKB/53+xjlUZwFneEcVP4YIHfels4vUS88P6XIe6s=
Subject key identifier: 42:AE:A2:94:EC:CE:AC:49:26:B2:CD:13:97:F2:83:0D:E9:02:35:F6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4EC4840664E26C328E1E73A4E7CF0FFF7F59AA58
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa
Signing time: Thu 26 Feb 2026 00:11:11 +0000
ROA not before: Thu 26 Feb 2026 00:11:11 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 69.107.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:c4:84:06:64:e2:6c:32:8e:1e:73:a4:e7:cf:0f:ff:7f:59:aa:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 26 00:11:11 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=96c24a8ce32444bc9d639f9a8618b01366dca5ed548b9fcafe5ec5416d13d889, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:51:46:6c:35:99:e5:c0:66:d2:96:75:eb:
ae:1e:e1:72:cc:ab:64:ff:d7:f0:84:a9:85:fc:72:
b2:12:05:5d:7d:b8:aa:09:42:9c:78:2c:00:6e:7a:
3b:73:f4:bc:35:8d:e9:fa:f0:3f:6f:db:4b:ad:96:
20:bd:73:c9:49:11:99:dd:70:42:e3:f5:0d:84:89:
6c:ea:18:f3:e3:59:b3:66:e3:28:21:6a:16:de:ab:
96:ff:5c:8b:b6:ae:79:9f:b1:70:53:e9:3b:ab:3d:
e8:89:8b:e9:c3:8b:bb:b1:5c:59:f1:6c:d4:93:b9:
18:7b:2c:78:1e:eb:0c:8a:16:71:c7:91:fe:1f:97:
51:ce:3c:47:46:4a:93:fa:42:63:96:6c:c8:86:12:
a7:7d:9a:a0:73:ab:90:bd:b5:03:5a:01:c7:2e:a8:
cb:d1:3d:04:b8:5e:6d:ae:2c:9a:b9:a8:dd:76:49:
ea:67:f2:14:db:ce:95:cf:d6:28:b0:0a:c6:7a:c4:
5b:d1:d0:b8:f8:63:ed:e8:51:c9:2b:63:1b:ee:83:
55:64:16:94:68:99:de:c8:a2:55:33:50:e3:e8:fb:
ee:0e:12:7c:0c:28:c9:5c:87:03:de:98:a6:85:4c:
d6:e3:d1:ad:31:f6:4f:9d:3c:f3:76:f3:cc:d3:cd:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AE:A2:94:EC:CE:AC:49:26:B2:CD:13:97:F2:83:0D:E9:02:35:F6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.107.0.0/18
Signature Algorithm: sha256WithRSAEncryption
ce:89:5e:9d:7d:79:7d:a6:f1:8f:7a:c2:d5:e6:4c:35:e6:5b:
ef:5b:3c:2c:02:a6:69:ba:5e:eb:8e:70:df:ba:d8:b8:63:7e:
1b:6d:91:a6:c3:66:d4:36:18:d1:bc:73:14:18:96:83:a3:6c:
51:94:bd:73:ab:9e:35:70:4a:b4:c0:ce:2a:60:55:00:ea:4f:
80:4a:f0:f2:ec:3d:b8:d6:0c:c8:f1:db:4f:4a:77:f7:4b:f0:
1e:b4:72:b3:dc:85:0b:a3:71:36:42:1e:50:3e:1e:43:2d:66:
fe:20:35:e7:8e:62:de:f3:7e:70:b1:af:2a:52:05:b7:0f:5e:
15:34:09:47:71:f5:13:35:6d:15:1c:46:58:6e:1f:91:c5:96:
53:ff:96:34:b8:37:4a:61:45:d4:4f:e3:3c:e1:b7:66:f5:0e:
4e:56:53:44:a0:c7:10:42:52:c5:e3:a7:37:4d:ac:5f:83:97:
d3:e3:ee:4e:d3:4c:88:28:1c:9f:d2:43:6c:83:c2:e6:1c:dc:
f0:ff:57:38:29:4a:3f:6c:0c:e2:04:ce:71:97:a4:1a:45:ea:
80:54:37:ad:14:ba:dc:79:96:09:5f:8b:c5:51:5a:89:7d:33:
a3:23:6b:f7:ed:66:30:34:21:99:55:b8:df:82:98:d3:94:8c:
7d:fb:9d:cf
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTsSEBmTibDKOHnOk588P/39ZqlgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI2MDAxMTExWhcNMjYwNTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NmMyNGE4Y2UzMjQ0NGJjOWQ2MzlmOWE4NjE4YjAxMzY2
ZGNhNWVkNTQ4YjlmY2FmZTVlYzU0MTZkMTNkODg5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1LlFGbDWZ5cBm0pZ1664e4XLMq2T/1/CEqYX8crISBV19
uKoJQpx4LABuejtz9Lw1jen68D9v20utliC9c8lJEZndcELj9Q2EiWzqGPPjWbNm
4yghahbeq5b/XIu2rnmfsXBT6TurPeiJi+nDi7uxXFnxbNSTuRh7LHge6wyKFnHH
kf4fl1HOPEdGSpP6QmOWbMiGEqd9mqBzq5C9tQNaAccuqMvRPQS4Xm2uLJq5qN12
Sepn8hTbzpXP1iiwCsZ6xFvR0Lj4Y+3oUckrYxvug1VkFpRomd7IolUzUOPo++4O
EnwMKMlchwPemKaFTNbj0a0x9k+dPPN288zTzbqrAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUQq6ilOzOrEkmss0Tl/KDDekCNfYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMyNTliMjEzLWY3YzEtNDFhZS1iYWM2LWU4YzVmYjM1OGYwOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZFawAwDQYJKoZIhvcNAQELBQADggEBAM6JXp19eX2m8Y96wtXmTDXmW+9b
PCwCpmm6XuuOcN+62LhjfhttkabDZtQ2GNG8cxQYloOjbFGUvXOrnjVwSrTAzipg
VQDqT4BK8PLsPbjWDMjx209Kd/dL8B60crPchQujcTZCHlA+HkMtZv4gNeeOYt7z
fnCxrypSBbcPXhU0CUdx9RM1bRUcRlhuH5HFllP/ljS4N0phRdRP4zzht2b1Dk5W
U0SgxxBCUsXjpzdNrF+Dl9Pj7k7TTIgoHJ/SQ2yDwuYc3PD/VzgpSj9sDOIEznGX
pBpF6oBUN60Uutx5lglfi8VRWol9M6Mja/ftZjA0IZlVuN+CmNOUjH37nc8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:29 2026 by rpki-client