
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81e65b55-e793-4e3c-b747-4e9f7fe5cb15.roa
File: 81e65b55-e793-4e3c-b747-4e9f7fe5cb15.roa (raw, json)
Hash identifier: cp49gb93cyYK2wuBnMatCI1NZukrVyeQ7MvPJCqjwO4=
Subject key identifier: E3:01:20:5E:3A:7E:45:C6:8D:03:F4:11:4A:EE:B9:91:47:52:03:9E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0EDB2A9CCD7B15F40D4670FF184E20CCB774E921
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81e65b55-e793-4e3c-b747-4e9f7fe5cb15.roa
Signing time: Fri 06 Feb 2026 00:11:01 +0000
ROA not before: Fri 06 Feb 2026 00:11:01 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 129.224.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:db:2a:9c:cd:7b:15:f4:0d:46:70:ff:18:4e:20:cc:b7:74:e9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 6 00:11:01 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=26c262181d4e7822eb9e5ac1a1bb2ea80c3d36a3b312b65e1c9976773265f679, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:df:8e:d2:0b:e3:1b:85:af:6d:2c:92:70:
64:31:c2:d2:2d:4b:40:df:53:81:85:0c:8d:21:c9:
55:f8:a9:b9:43:cf:e9:8d:73:f8:98:07:09:ba:a1:
e7:a7:cf:14:d0:50:66:63:5a:30:22:10:ad:c7:c1:
54:75:d3:39:a6:c5:83:59:6b:eb:e0:f2:74:31:9f:
60:42:3c:2e:61:97:b5:da:e9:34:66:83:89:a8:ab:
c2:f0:f8:e5:cf:2d:3f:7f:2d:cf:01:82:e6:cc:3f:
13:1d:6c:95:a5:44:37:4b:a4:0a:8f:01:67:1c:8d:
4d:89:a1:6b:8d:cb:ce:e0:a1:4c:da:23:53:19:ca:
66:63:eb:d4:95:75:6c:8a:cd:b5:79:38:dd:4f:93:
1c:80:92:92:35:d0:21:86:44:ce:37:62:06:55:1c:
55:c3:9f:b0:d9:ef:4a:10:30:3c:41:60:b0:5c:c5:
f9:99:7f:ef:ad:56:59:c2:03:78:70:81:45:2b:66:
00:6a:8a:d7:35:ef:c4:51:00:13:cb:79:c3:d9:46:
5d:99:67:dd:17:c7:f0:f2:eb:6e:a8:95:89:47:fd:
3e:bd:92:22:a6:c0:95:4b:1b:ca:16:35:0b:c4:8b:
85:35:23:5f:36:32:e4:51:44:28:06:cc:b4:76:ef:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:01:20:5E:3A:7E:45:C6:8D:03:F4:11:4A:EE:B9:91:47:52:03:9E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/81e65b55-e793-4e3c-b747-4e9f7fe5cb15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.224.0.0/17
Signature Algorithm: sha256WithRSAEncryption
b7:a6:a0:33:68:f7:15:73:67:c8:b6:2e:1c:d7:98:e5:ba:21:
2f:3b:04:1e:15:32:57:bb:12:7e:64:3f:88:3c:9a:57:5e:98:
cb:59:f5:21:a1:e8:4f:c1:3a:28:60:65:0e:94:51:af:fc:45:
03:2b:a2:b8:26:97:40:fe:5d:4b:35:5d:b5:88:34:55:da:96:
21:0e:f7:67:1b:66:95:2a:ce:da:bf:2b:ee:33:20:87:24:ca:
c4:30:f8:5e:e6:3f:4d:28:eb:39:c5:01:b2:2a:1c:fc:3e:d6:
c3:1a:8d:85:b1:a2:9e:2f:29:38:cb:02:8b:fc:67:af:2e:80:
d8:52:da:de:93:75:81:b5:3d:4d:92:a2:38:91:25:74:da:11:
ee:ef:8b:7d:d6:a9:a8:60:65:c6:e7:2e:06:3f:5e:4f:22:e5:
cb:a9:95:70:37:f8:4c:a4:bd:bc:f0:e6:e9:83:db:86:8b:fd:
f7:c3:2d:88:24:aa:5a:62:33:2c:5e:54:b4:f5:a4:53:aa:ad:
bd:a6:30:99:96:d7:fd:5f:1d:a2:01:1a:68:7b:09:e3:61:fe:
46:9f:c6:07:23:fd:b0:56:a6:26:f8:7e:5f:95:56:34:74:22:
ef:bc:3d:61:0a:d7:de:ec:76:ae:33:91:d7:6f:1e:86:fd:1b:
f2:c3:e2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:54:40 2026 by rpki-client