
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc69a83-4a96-485c-9489-1b574db4510f.roa
File: 7dc69a83-4a96-485c-9489-1b574db4510f.roa (raw, json)
Hash identifier: Nr5YNbsZj1vDZvYmElkuiDZMn2MpkFT6FVZ6+QD3zL8=
Subject key identifier: 0C:76:51:AF:91:9E:62:92:64:10:2D:BB:7E:4B:1F:41:0A:61:A0:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4118603B50DD02670F90345A4A1435A58E97DF88
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc69a83-4a96-485c-9489-1b574db4510f.roa
Signing time: Sat 14 Feb 2026 01:00:38 +0000
ROA not before: Sat 14 Feb 2026 01:00:38 +0000
ROA not after: Fri 15 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.90.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:18:60:3b:50:dd:02:67:0f:90:34:5a:4a:14:35:a5:8e:97:df:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 14 01:00:38 2026 GMT
Not After : May 15 23:59:59 2026 GMT
Subject: serialNumber=7c5a55b44e0fd5686044673bbcbc4e49af940fbfeae3e93f05c8507f91dd37bf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:08:ea:c1:b1:62:55:32:fb:4d:40:c9:81:
d6:87:9d:d0:f3:08:a9:b1:70:97:7d:6b:d6:70:a5:
2f:66:d7:ee:f1:53:45:15:b9:bd:e7:1d:17:cc:ff:
d8:91:e8:5a:f9:31:f7:82:02:c5:72:7e:07:ac:d1:
5b:44:fa:fa:9b:4f:3b:54:d4:73:25:30:59:e8:05:
c2:ec:ce:74:79:cc:8c:6f:14:f1:42:df:44:ce:ca:
29:c5:fc:09:ef:06:fd:12:7e:23:b3:26:e9:0f:3a:
f1:a7:d9:95:25:00:9a:df:a3:82:7e:5a:f4:35:a7:
9c:24:22:2f:6f:56:49:c2:6d:1c:8f:98:8e:89:49:
3a:32:67:f6:40:f1:a1:66:f0:cf:05:3e:ed:75:54:
19:a4:65:f9:83:de:6e:35:fd:76:ff:7c:70:28:5b:
fc:2f:81:21:7d:e9:ac:3d:24:82:39:60:20:27:3a:
5f:d2:23:29:f9:da:48:d1:6e:d9:fc:29:02:72:db:
1a:37:6e:0f:07:c1:f6:4e:f2:1c:1b:fb:d2:8c:2b:
f2:9e:bd:c8:a8:14:82:cc:75:d0:9e:b0:20:ab:44:
c2:db:66:7c:1a:9d:23:95:d6:33:64:45:8a:86:f0:
dc:e3:4c:82:35:d3:f2:47:76:c5:f7:8e:23:aa:f2:
b8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:76:51:AF:91:9E:62:92:64:10:2D:BB:7E:4B:1F:41:0A:61:A0:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc69a83-4a96-485c-9489-1b574db4510f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.90.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:12:17:5d:f7:7f:7b:65:e1:07:ea:16:b6:60:d1:68:91:a0:
f3:40:0f:1d:0b:e5:3e:6d:07:64:03:60:56:e8:a7:2e:4d:05:
f6:ed:a7:8c:6f:57:af:31:ab:b2:4a:dd:db:6d:30:1c:e3:87:
43:6a:8e:f4:c0:6a:da:4e:3d:ec:4d:31:da:0f:c0:cc:b0:68:
68:ca:f5:92:7e:2a:e4:56:03:53:c6:bf:d0:b7:6c:82:9a:df:
f4:97:02:6a:b5:a1:12:8c:bd:50:78:67:c0:27:c3:c5:d4:9b:
aa:38:2c:2d:18:f1:a2:f2:f9:6f:3f:0e:53:22:c7:bf:c8:63:
9b:2b:77:65:de:18:94:e4:5c:f6:da:0a:3d:ac:0d:84:d8:3f:
9d:ac:76:b5:6b:ee:21:96:6e:2d:2a:77:bd:11:9d:ba:27:6d:
0c:4c:61:33:59:66:d7:bf:22:c8:e7:8b:ff:68:7d:7e:5b:49:
91:ce:bf:65:a6:3c:32:ec:2e:dc:d2:51:fe:8c:a4:f4:46:dc:
8c:f6:ad:86:eb:39:9c:69:48:76:42:b3:bf:cf:c4:65:de:40:
ce:0c:6e:7e:0c:a2:16:92:4b:e2:46:1d:b1:c8:04:9b:81:63:
56:39:ad:73:67:ae:47:7c:b9:5e:5d:ae:7c:59:57:e9:0d:18:
ed:a8:f1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:26 2026 by rpki-client