
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e3a929d-259e-4e9a-877c-a22ab110aa02.roa
File: 6e3a929d-259e-4e9a-877c-a22ab110aa02.roa (raw, json)
Hash identifier: e76/yL5aCXTCTOl5cwUKbCC2XHCOHPzqJedWfXMwKIk=
Subject key identifier: 59:35:8A:35:CF:C5:1B:5E:66:8F:4B:AC:D3:84:F1:50:C5:64:4B:54
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71C0B1E68F78A7CE1A33B1C6B6CCA0A315CFCE45
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e3a929d-259e-4e9a-877c-a22ab110aa02.roa
Signing time: Mon 09 Feb 2026 00:00:07 +0000
ROA not before: Mon 09 Feb 2026 00:00:07 +0000
ROA not after: Sun 10 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 195.4.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:c0:b1:e6:8f:78:a7:ce:1a:33:b1:c6:b6:cc:a0:a3:15:cf:ce:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 9 00:00:07 2026 GMT
Not After : May 10 23:59:59 2026 GMT
Subject: serialNumber=c187683be510763f6c1d8425a440a1915e582b8e8f4865baaa56ce9fd20e4eae, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:41:2f:9d:bd:3b:8f:b4:78:ce:af:ce:76:6d:
8d:61:50:4f:e5:22:2e:05:1b:bd:9b:83:f6:3c:92:
87:6c:33:33:b5:38:95:a8:46:6f:ba:97:d0:36:d9:
7e:04:dc:75:f0:82:2c:11:42:86:03:cc:14:74:a1:
2a:71:29:ac:9a:8a:ab:3e:49:03:3f:2e:30:e6:17:
d3:dd:c8:65:79:c5:b6:14:4d:2c:9c:b7:c8:f0:c0:
b9:28:3e:16:fc:81:0b:c8:af:bf:1a:ad:66:70:ff:
6e:a5:e8:ac:af:ac:de:bf:c1:f3:62:53:50:d7:fa:
65:ed:14:c7:99:af:cb:ae:86:71:d5:aa:f6:02:a8:
08:a2:05:ee:09:3a:30:30:c9:94:4c:bd:48:f8:43:
c6:c0:61:9e:a0:cc:30:61:93:98:24:19:a3:80:38:
63:48:76:00:93:96:24:1b:f1:4b:78:42:4b:22:76:
d1:d5:6b:c7:f4:d0:67:61:f8:4a:7d:7e:32:04:6a:
6a:15:21:63:cf:a3:98:84:88:f1:c0:4c:ba:00:ec:
fe:2d:c2:7b:71:ed:ee:ea:6a:38:ed:4f:19:ad:a9:
c5:66:b9:0b:ee:0e:36:1a:b8:35:02:8c:13:1a:a3:
03:df:b7:d9:15:84:aa:e7:1c:15:02:db:9d:4f:6c:
21:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:35:8A:35:CF:C5:1B:5E:66:8F:4B:AC:D3:84:F1:50:C5:64:4B:54
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e3a929d-259e-4e9a-877c-a22ab110aa02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.4.96.0/19
Signature Algorithm: sha256WithRSAEncryption
b9:f7:be:b9:ee:76:21:4d:a5:0e:cd:e4:df:6d:a9:bf:8d:3b:
d9:23:d6:10:f3:d3:03:00:aa:62:62:33:56:af:de:e5:bd:8a:
e5:36:2d:ea:c1:84:8c:70:48:aa:e9:7b:90:28:32:96:1b:07:
f4:a2:72:ca:81:ac:ca:8f:fd:48:c4:d0:82:87:55:f9:41:53:
ef:17:8f:f3:d2:76:60:0f:e7:da:0e:3e:c4:2a:8a:b3:ec:c0:
24:f5:f2:4f:43:cd:9b:61:dd:0b:b5:25:8a:5c:91:aa:da:b6:
14:d4:d6:dd:1f:9a:95:93:d9:19:d0:86:e7:d6:c1:78:c3:e9:
c0:a6:8e:e8:6d:71:99:51:0c:77:59:90:f7:e8:ab:f2:07:ad:
bc:a5:d9:62:ca:46:42:a5:5c:ac:67:00:6d:30:aa:6c:aa:87:
46:f1:35:c3:21:e1:09:68:df:48:e8:5d:d2:b0:d6:ae:15:09:
e1:1a:d8:a8:da:48:71:ac:eb:fa:6d:8c:18:df:b6:62:45:a8:
fa:e9:b7:f7:c4:f1:c4:49:80:b5:b4:6d:e4:95:01:0c:1a:53:
f2:e4:9c:b8:5d:24:82:72:22:a7:68:c8:33:92:66:19:f7:9f:
14:44:29:1f:33:da:95:2c:88:18:c3:97:bf:d1:5d:c6:3f:eb:
36:c0:b9:94
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUccCx5o94p84aM7HGtsygoxXPzkUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA5MDAwMDA3WhcNMjYwNTEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BjMTg3NjgzYmU1MTA3NjNmNmMxZDg0MjVhNDQwYTE5MTVl
NTgyYjhlOGY0ODY1YmFhYTU2Y2U5ZmQyMGU0ZWFlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCWQS+dvTuPtHjOr852bY1hUE/lIi4FG72bg/Y8kodsMzO1
OJWoRm+6l9A22X4E3HXwgiwRQoYDzBR0oSpxKayaiqs+SQM/LjDmF9PdyGV5xbYU
TSyct8jwwLkoPhb8gQvIr78arWZw/26l6KyvrN6/wfNiU1DX+mXtFMeZr8uuhnHV
qvYCqAiiBe4JOjAwyZRMvUj4Q8bAYZ6gzDBhk5gkGaOAOGNIdgCTliQb8Ut4Qksi
dtHVa8f00Gdh+Ep9fjIEamoVIWPPo5iEiPHATLoA7P4twntx7e7qajjtTxmtqcVm
uQvuDjYauDUCjBMaowPft9kVhKrnHBUC251PbCHvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWTWKNc/FG15mj0us04TxUMVkS1QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZlM2E5MjlkLTI1OWUtNGU5YS04NzdjLWEyMmFiMTEwYWEwMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXDBGAwDQYJKoZIhvcNAQELBQADggEBALn3vrnudiFNpQ7N5N9tqb+NO9kj
1hDz0wMAqmJiM1av3uW9iuU2LerBhIxwSKrpe5AoMpYbB/SicsqBrMqP/UjE0IKH
VflBU+8Xj/PSdmAP59oOPsQqirPswCT18k9DzZth3Qu1JYpckarathTU1t0fmpWT
2RnQhufWwXjD6cCmjuhtcZlRDHdZkPfoq/IHrbyl2WLKRkKlXKxnAG0wqmyqh0bx
NcMh4Qlo30joXdKw1q4VCeEa2KjaSHGs6/ptjBjftmJFqPrpt/fE8cRJgLW0beSV
AQwaU/LknLhdJIJyIqdoyDOSZhn3nxREKR8z2pUsiBjDl7/RXcY/6zbAuZQ=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:19 2026 by rpki-client