
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/686a3662-44c6-401f-838f-01047fd9927a.roa
File: 686a3662-44c6-401f-838f-01047fd9927a.roa (raw, json)
Hash identifier: EOyfkunLgJWEYVI70MPR7HORUsIDI0JyDZoSb59hG04=
Subject key identifier: 6B:F7:D5:A2:54:AC:E0:8D:60:B7:2A:8F:35:0B:8E:89:5E:7B:47:48
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 14DF59BEF3A1F31D7E817510853A6B7DD6338652
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/686a3662-44c6-401f-838f-01047fd9927a.roa
Signing time: Wed 11 Feb 2026 01:10:06 +0000
ROA not before: Wed 11 Feb 2026 01:10:06 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fea:ecc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:df:59:be:f3:a1:f3:1d:7e:81:75:10:85:3a:6b:7d:d6:33:86:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 11 01:10:06 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=e51dcbd52d76448da523c8149e8640c6946cd44503afe9cf2864926cca2b8fde, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:cf:4b:72:40:00:85:15:1e:93:27:cb:00:
c5:2a:cf:ba:fa:35:47:bb:bd:30:29:5f:b3:78:ae:
07:77:82:20:69:fb:40:19:ea:74:7e:c2:46:96:2c:
49:a6:42:c2:2a:21:d1:3a:ec:5e:35:07:25:50:7c:
4e:f6:79:ce:9f:3f:5f:2d:ed:59:ab:fb:ef:75:07:
e5:51:63:25:a5:b6:de:a9:44:19:5e:a6:bd:5d:15:
98:ef:10:94:67:ee:bb:6f:94:bd:10:cd:05:d3:30:
7e:8e:81:c3:ca:8f:c8:c7:41:4a:df:52:c6:15:da:
73:ee:47:cb:51:15:75:df:e0:32:44:6f:82:49:6e:
08:b5:4f:e7:31:ab:99:18:8a:c4:1e:f2:ba:c7:e8:
45:d2:af:b5:34:58:76:ce:fc:b0:0d:45:92:7f:d3:
6b:b9:4c:1f:ea:ba:9f:97:b7:a6:dc:11:d5:4e:eb:
37:86:f2:b1:d6:55:9f:cb:6c:2c:cd:fa:d6:b0:96:
c8:ae:31:37:2a:34:5e:63:7c:1d:69:da:63:9b:bc:
8e:a2:3f:bf:46:48:bd:15:52:4b:dd:f6:6a:50:3c:
0a:ae:9f:f5:32:ff:23:bc:e2:84:97:aa:2e:1e:d6:
dc:00:cf:74:73:33:10:a4:4b:f9:ab:61:f2:cc:8e:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F7:D5:A2:54:AC:E0:8D:60:B7:2A:8F:35:0B:8E:89:5E:7B:47:48
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/686a3662-44c6-401f-838f-01047fd9927a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fea:ecc0::/48
Signature Algorithm: sha256WithRSAEncryption
cc:e6:d4:f1:a2:7a:6c:2c:49:ee:e5:8f:2e:5f:af:18:77:28:
9a:02:d3:18:1d:89:34:04:ee:9d:82:18:41:e4:aa:36:78:29:
71:32:98:24:71:ad:3a:42:1c:79:b2:1e:0d:8d:ee:bf:63:c1:
9b:a7:b8:a0:f0:fa:bc:97:9d:6a:15:d9:59:ae:81:21:a4:40:
86:ec:2f:d2:64:49:0c:34:fe:b5:14:3d:66:6f:a2:92:94:be:
ec:55:60:8d:4e:27:bb:13:60:6f:30:c6:66:fa:56:76:4e:d6:
17:7f:f4:a8:bb:14:5f:cd:d1:d3:d8:84:1a:b5:ff:0e:46:7e:
78:dc:7e:ff:c4:62:28:a1:2a:dc:ec:2b:64:56:8c:75:68:8d:
74:14:68:b7:49:66:c2:97:7d:12:bb:b8:e0:3a:3d:53:39:75:
fc:de:7c:43:18:17:94:fc:0c:ff:c4:87:e4:1e:43:7e:85:7f:
62:0e:ed:55:9a:fd:ef:54:c6:e1:9f:a9:8b:ef:f1:a7:6e:26:
97:e9:2d:88:40:06:63:ce:d2:5e:23:de:89:c2:18:51:2f:97:
9f:47:b0:ab:ed:80:c3:89:60:81:6b:53:22:9d:c6:03:40:0a:
57:30:8a:44:d5:8c:3c:f0:62:61:96:ba:cf:62:e9:e5:38:05:
c9:48:f1:d2
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUFN9ZvvOh8x1+gXUQhTprfdYzhlIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDExMDA2WhcNMjYwNTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlNTFkY2JkNTJkNzY0NDhkYTUyM2M4MTQ5ZTg2NDBjNjk0
NmNkNDQ1MDNhZmU5Y2YyODY0OTI2Y2NhMmI4ZmRlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCa8M9LckAAhRUekyfLAMUqz7r6NUe7vTApX7N4rgd3giBp
+0AZ6nR+wkaWLEmmQsIqIdE67F41ByVQfE72ec6fP18t7Vmr++91B+VRYyWltt6p
RBlepr1dFZjvEJRn7rtvlL0QzQXTMH6OgcPKj8jHQUrfUsYV2nPuR8tRFXXf4DJE
b4JJbgi1T+cxq5kYisQe8rrH6EXSr7U0WHbO/LANRZJ/02u5TB/qup+Xt6bcEdVO
6zeG8rHWVZ/LbCzN+tawlsiuMTcqNF5jfB1p2mObvI6iP79GSL0VUkvd9mpQPAqu
n/Uy/yO84oSXqi4e1twAz3RzMxCkS/mrYfLMjgcBAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUa/fVolSs4I1gtyqPNQuOiV57R0gwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY4NmEzNjYyLTQ0YzYtNDAxZi04MzhmLTAxMDQ3ZmQ5OTI3YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/q7MAwDQYJKoZIhvcNAQELBQADggEBAMzm1PGiemwsSe7ljy5frxh3
KJoC0xgdiTQE7p2CGEHkqjZ4KXEymCRxrTpCHHmyHg2N7r9jwZunuKDw+ryXnWoV
2VmugSGkQIbsL9JkSQw0/rUUPWZvopKUvuxVYI1OJ7sTYG8wxmb6VnZO1hd/9Ki7
FF/N0dPYhBq1/w5Gfnjcfv/EYiihKtzsK2RWjHVojXQUaLdJZsKXfRK7uOA6PVM5
dfzefEMYF5T8DP/Eh+QeQ36Ff2IO7VWa/e9UxuGfqYvv8aduJpfpLYhABmPO0l4j
3onCGFEvl59HsKvtgMOJYIFrUyKdxgNAClcwikTVjDzwYmGWus9i6eU4BclI8dI=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:36:12 2026 by rpki-client