
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c26a8b2-a90f-480e-a02b-fcac6ceb7973.roa
File: 4c26a8b2-a90f-480e-a02b-fcac6ceb7973.roa (raw, json)
Hash identifier: auba56PH9HqOA8MNxl92W2isLcIK0Mu6kWbn9clsw0Y=
Subject key identifier: 02:AD:A3:06:B7:62:72:69:A3:26:8A:41:2E:BB:41:E2:A9:24:A6:A1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F12A87BF362495500A22B6F128EFBEFFAA08E19
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c26a8b2-a90f-480e-a02b-fcac6ceb7973.roa
Signing time: Fri 13 Feb 2026 01:00:05 +0000
ROA not before: Fri 13 Feb 2026 01:00:05 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.82.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:12:a8:7b:f3:62:49:55:00:a2:2b:6f:12:8e:fb:ef:fa:a0:8e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 13 01:00:05 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=1847f100e6838b99a4cc84d42921ab0132b3b8cce3ac374e0804ae00cfd63d1a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:99:be:a2:be:b8:e4:49:6a:3c:31:6e:d7:
eb:d0:84:5b:c6:54:7e:76:94:69:f6:dc:bf:13:23:
40:20:6e:ac:ee:d0:2f:4f:05:4a:83:4b:84:58:c2:
64:4c:01:b3:65:24:2d:75:de:80:cb:dc:91:39:75:
2a:69:90:dd:ae:96:ba:db:a5:cb:f3:8e:86:12:00:
58:2e:0b:3d:a6:15:96:2f:a3:67:7e:11:d6:11:84:
77:fd:2e:3a:d6:61:0e:29:94:da:80:66:ca:3a:da:
0f:a4:0d:50:a9:8d:b3:cc:83:fe:c6:ff:41:a4:c0:
c6:71:f5:b8:75:ae:40:3b:75:bc:e7:32:3a:d9:88:
92:c3:d8:49:c2:80:c5:4d:2e:df:be:87:58:b3:44:
41:95:d6:73:3d:16:05:c7:a8:65:23:71:5b:8b:dc:
ba:84:d3:3b:e1:a6:3a:39:ad:74:2e:9f:e3:1f:d8:
54:e6:33:59:0a:0b:d3:e3:0e:fc:cb:13:93:55:73:
9f:5b:5b:59:0b:61:a3:7d:7b:1a:db:49:66:b4:cf:
8b:16:d1:1d:1e:f0:14:69:c2:d5:a6:ad:29:d5:f9:
62:e2:8d:d4:cc:97:ff:31:10:c3:b8:42:c6:17:38:
13:67:10:9b:3b:5e:1a:99:bd:ff:8b:a0:8c:ef:02:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AD:A3:06:B7:62:72:69:A3:26:8A:41:2E:BB:41:E2:A9:24:A6:A1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c26a8b2-a90f-480e-a02b-fcac6ceb7973.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.82.152.0/22
Signature Algorithm: sha256WithRSAEncryption
17:3c:49:1e:d4:c7:b3:e4:69:8f:40:39:ec:a6:29:97:d5:c3:
ec:3f:04:f1:d4:e8:67:51:7e:5b:ec:78:e9:78:d9:22:03:96:
98:62:5d:57:ac:d3:8d:ef:7c:0e:c2:e9:9e:55:7b:fc:54:0c:
f4:10:a5:b5:9a:c7:68:d3:e8:1b:c4:4c:eb:a0:72:c9:9c:29:
8a:4b:30:4d:23:b0:6b:bc:d2:ab:5a:fb:62:a5:6a:bc:8f:7d:
68:e9:0d:54:8c:fd:6d:ae:b5:37:86:07:41:4e:c6:0b:5c:c1:
09:d5:33:11:b9:0f:a7:dc:1f:6b:90:2b:f1:7f:fc:d3:9c:48:
75:eb:38:b5:c9:6e:94:1f:78:8e:e3:01:50:58:dc:3c:e9:5e:
79:7c:9e:37:2c:89:8f:79:84:80:82:93:38:91:e4:ee:db:a6:
bb:79:43:43:0f:40:eb:0b:cf:75:48:62:e5:7b:0a:a2:52:24:
19:23:77:21:19:ee:21:4f:8b:6f:c9:cd:8b:8c:f4:c1:3b:fa:
3e:74:67:e4:27:50:c0:df:7a:2a:bf:e1:1c:fe:02:67:21:2d:
c2:e6:5a:61:6a:1d:93:bd:ad:ff:b8:39:9d:01:fb:d2:73:57:
5f:fa:4e:58:a7:3e:03:25:10:c3:5b:34:ff:0b:1f:81:e6:b1:
f3:11:20:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:24 2026 by rpki-client