
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73a72287-a007-477d-be27-23de72267120.roa
File: 73a72287-a007-477d-be27-23de72267120.roa (raw, json)
Hash identifier: +unMLFfP57lVvB4nWMnzfB2wVxPMpRBccD119DgZbtg=
Subject key identifier: 48:A8:96:56:19:1A:D1:F0:13:88:13:B5:B6:13:CC:94:8A:59:D1:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1A797E2E14CB16A19708EA6A22ED141DA05AB968
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73a72287-a007-477d-be27-23de72267120.roa
Signing time: Tue 17 Feb 2026 08:21:48 +0000
ROA not before: Tue 17 Feb 2026 08:21:48 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 216.52.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:79:7e:2e:14:cb:16:a1:97:08:ea:6a:22:ed:14:1d:a0:5a:b9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 17 08:21:48 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=fecc97556dc1024e7ee4c0b4c7491ae376d4e31def285c2c48f4cf8151fcadaf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b5:74:6f:de:f3:02:e3:f7:29:7f:7d:87:23:
0c:65:0c:e0:2f:7d:4f:52:73:47:3d:be:49:51:1e:
d7:c8:ff:0a:6f:16:87:26:16:5b:01:db:ca:cd:26:
92:e6:86:e7:67:e5:d0:30:26:4b:e9:0d:3b:e1:78:
5b:88:04:57:cb:c9:eb:37:81:cd:1b:a5:28:1f:ae:
db:10:0f:d5:4f:eb:30:74:4e:46:34:6b:12:83:e1:
87:26:a1:4d:07:c2:ee:3f:66:d8:c4:09:e5:85:65:
7a:f8:ba:63:f9:e5:ca:52:56:08:a7:ef:03:a4:cd:
78:0e:99:59:40:0b:61:df:6f:6e:bd:b7:4f:d1:77:
1d:97:9b:21:c6:23:f8:51:fb:38:4f:45:b4:b1:51:
e4:af:73:20:cb:bc:3a:bb:0a:65:38:94:e5:a9:5d:
9f:92:1e:7d:c3:86:c3:42:69:7c:ed:08:66:e4:46:
27:e3:2a:67:f8:92:91:72:3a:8a:e3:f8:3f:b9:66:
b2:fa:18:b5:84:e5:33:87:3b:e5:39:0a:2c:bb:66:
14:cd:19:bb:e6:b6:a3:54:79:b8:26:31:ac:37:cf:
4f:37:2b:90:47:ec:45:94:fc:ab:82:28:0f:84:cd:
65:28:27:3b:85:7e:c5:e9:ab:ab:1c:28:7c:0f:4f:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A8:96:56:19:1A:D1:F0:13:88:13:B5:B6:13:CC:94:8A:59:D1:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/73a72287-a007-477d-be27-23de72267120.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.52.136.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:be:b7:4c:6d:56:b5:cc:48:b2:d7:24:e6:69:e7:ee:38:7b:
58:72:38:3a:d1:a9:84:c8:aa:88:ea:8b:0e:c2:2d:d2:20:a8:
81:42:11:36:82:24:d1:51:21:0b:90:61:20:fa:d5:70:2b:dd:
82:8a:fa:66:ed:5b:b8:9a:a7:59:b6:c2:30:ab:aa:3c:28:54:
dc:3b:4d:3e:01:3b:33:bc:93:91:c7:89:22:41:b1:42:6e:e1:
3a:0b:86:5e:b3:04:77:88:5a:95:d4:93:4c:f1:83:94:bb:8e:
77:ef:87:e1:ab:f2:fb:6c:f2:21:e6:02:38:af:9c:55:1e:af:
68:71:ac:9b:44:7c:8a:84:ec:8e:27:6c:a3:9c:3c:e4:13:fb:
87:f5:a1:e7:94:4b:53:0a:32:5d:40:40:e3:b9:c9:08:c7:be:
22:7a:80:6f:aa:55:94:87:6f:f0:1c:0f:40:3e:00:f6:b7:c1:
b3:ee:d8:46:f0:57:22:fe:e0:1d:14:e8:67:a2:9a:b3:6d:61:
f5:ee:23:55:8e:d2:de:58:9e:0d:ea:d4:8b:e4:36:ff:79:42:
2f:13:27:36:77:9b:5b:8c:b5:c5:de:a4:73:f5:06:73:bd:06:
19:66:02:2d:db:4f:92:52:ed:8d:eb:21:f9:ca:bb:c4:63:d6:
ea:6e:e8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:38:47 2026 by rpki-client