
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7297bd36-8fee-4da9-94e4-005765d2870b.roa
File: 7297bd36-8fee-4da9-94e4-005765d2870b.roa (raw, json)
Hash identifier: Dk4n046jGtVO2ddhOAFd6h8iAXtiBJQgw4QjdlDEHcY=
Subject key identifier: 2E:98:68:5F:31:3A:D8:75:60:11:36:C5:E7:25:4C:F5:C0:6B:C7:E2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1624F5718619407ED9F6C2C32D0B96A292579E2E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7297bd36-8fee-4da9-94e4-005765d2870b.roa
Signing time: Sat 07 Feb 2026 00:10:57 +0000
ROA not before: Sat 07 Feb 2026 00:10:57 +0000
ROA not after: Fri 08 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.54.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:24:f5:71:86:19:40:7e:d9:f6:c2:c3:2d:0b:96:a2:92:57:9e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 7 00:10:57 2026 GMT
Not After : May 8 23:59:59 2026 GMT
Subject: serialNumber=7ced7df0f055f3bd566c8cd4087c01fe7746f205d8f16d1b87a2a2b27a1c5ade, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:23:4a:30:34:69:18:b9:30:05:4c:bd:48:
30:94:09:4a:90:da:1b:8b:68:c0:9a:5a:fc:1d:5c:
df:80:84:35:38:c2:98:6e:2f:24:ee:0b:01:36:7e:
48:ef:cc:f5:2d:19:97:89:1f:b8:2c:48:bb:52:28:
6a:25:ba:31:ae:46:43:7a:d6:3f:b4:23:8d:dd:0b:
f4:90:d9:9b:1b:80:5a:63:f9:be:03:7b:7c:ef:54:
bb:e0:7a:8e:14:75:29:ed:c8:17:8b:09:4a:5b:fc:
8b:eb:2f:73:73:57:7e:f3:b0:c6:a1:42:09:bb:14:
dc:b8:07:cb:20:b0:07:26:e4:b0:cb:bd:6c:41:c7:
36:1c:8b:08:4b:f2:f5:2d:96:44:58:2f:7e:51:20:
8f:72:63:0b:45:d4:d0:2e:36:70:85:c4:a6:3b:fd:
49:12:4d:36:9d:69:bc:02:5c:88:af:38:c6:65:c1:
c5:9d:21:66:6c:94:6b:ab:6d:55:23:73:70:fb:cf:
d8:df:71:84:c9:f8:4b:b7:d8:cb:ec:51:b1:55:ce:
a8:7b:5b:0e:ae:4d:dc:28:89:aa:e3:e2:89:e5:0f:
ec:11:3b:54:f5:c8:76:2e:60:e5:1e:e5:4e:46:ab:
da:ee:4f:16:e6:b4:54:e3:f7:a7:85:66:89:8c:a9:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:98:68:5F:31:3A:D8:75:60:11:36:C5:E7:25:4C:F5:C0:6B:C7:E2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7297bd36-8fee-4da9-94e4-005765d2870b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.48.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:3b:a2:52:8b:17:45:bb:87:54:9c:e9:7d:ea:ef:c2:60:a4:
4c:1f:ec:bb:c5:84:c3:54:40:d6:8d:1a:47:0b:44:b0:be:e6:
5a:7b:e3:7a:62:bb:69:be:b1:36:ca:04:03:0c:95:3d:57:e2:
26:98:56:5c:ec:07:7e:25:7c:4f:07:43:5b:09:e6:1b:a1:d6:
9b:4d:7b:7b:ce:eb:ca:6f:95:7f:97:a3:21:2e:73:86:ef:71:
45:10:d2:55:ed:bd:5d:91:c7:45:77:17:6a:20:da:28:5b:68:
5b:4d:90:b3:d8:6e:a3:be:53:44:0c:62:0c:8a:ce:e1:16:ca:
11:2b:6c:09:97:1c:58:80:c3:fa:ac:23:4f:40:7f:0d:a1:df:
c1:8e:7b:dd:94:23:9b:cd:7c:e5:3d:4d:93:1b:f2:20:c7:4a:
88:09:e9:63:ab:b6:cc:c4:78:39:29:b3:60:35:b9:2b:99:52:
dd:60:84:da:33:2c:04:c4:5f:12:6a:c1:a4:e4:a7:4b:25:0b:
70:bf:91:8a:fd:5d:c5:8c:9f:a0:90:dc:ac:9f:cb:e9:3b:dd:
80:6f:9d:37:cb:26:b2:4b:a6:61:7f:7f:20:31:4c:7d:a2:23:
4e:09:48:4d:10:ac:49:f9:6d:7f:02:48:fa:55:7d:18:4d:21:
fa:96:4d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:01:33 2026 by rpki-client