
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83436f15-9744-44ae-bab9-2563f6c055aa.roa
File: 83436f15-9744-44ae-bab9-2563f6c055aa.roa (raw, json)
Hash identifier: CQ5nsIAfz1Kdq4YaE2U3w+1Y6s9A8MLBV1lQHqQ5KBk=
Subject key identifier: D4:B6:55:6D:19:80:76:EB:06:75:74:75:C4:B0:16:4C:54:9F:C1:95
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 41A0AD0EFFF6FBE0416095B1171D0C0F14EEF984
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83436f15-9744-44ae-bab9-2563f6c055aa.roa
Signing time: Wed 25 Feb 2026 00:20:48 +0000
ROA not before: Wed 25 Feb 2026 00:20:48 +0000
ROA not after: Tue 26 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 204.123.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:a0:ad:0e:ff:f6:fb:e0:41:60:95:b1:17:1d:0c:0f:14:ee:f9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 25 00:20:48 2026 GMT
Not After : May 26 23:59:59 2026 GMT
Subject: serialNumber=f71f88604051bd2943a494ff08b296c7eda8a4a70b0d89cfdbd43720eeae0bfa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:72:81:9f:d4:b1:25:5d:33:46:50:e0:4d:ec:
dd:13:db:e0:5d:5b:57:db:e9:14:e5:38:f1:6d:61:
28:9e:a2:f6:9a:0a:55:dd:8d:d0:f0:0d:5d:bc:0d:
4f:5f:2f:16:65:66:ac:e5:48:15:a9:dd:13:d7:ed:
ef:14:03:57:58:1d:6f:3e:11:3d:5c:01:6a:1f:67:
7d:27:f4:41:5c:64:89:9f:f3:5a:ba:be:bb:ec:96:
bb:3a:43:46:79:eb:1d:96:d8:11:51:7b:f6:cd:f6:
bd:3d:f6:3e:88:7f:62:ad:44:00:0a:46:b9:4f:53:
b0:65:23:40:14:02:30:07:3a:65:78:25:2e:81:09:
19:6a:17:50:f0:f1:a1:ca:e3:7f:d8:67:5d:1c:b1:
26:ea:a8:04:93:1f:06:00:61:b2:75:91:0d:a7:6c:
10:21:d5:23:45:50:74:3a:10:74:8e:3c:67:3b:21:
0f:ff:e0:e5:fe:25:46:3f:61:85:ee:5e:e9:3e:06:
f5:98:81:03:68:8b:ac:42:ce:31:11:00:76:cf:01:
cd:97:b1:27:17:c7:55:b6:74:e0:5b:68:90:35:c0:
7c:be:91:64:79:d3:b0:9b:f7:11:fb:46:fe:20:94:
1c:b3:a8:81:03:dc:e0:2a:bb:25:34:65:93:0b:b0:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B6:55:6D:19:80:76:EB:06:75:74:75:C4:B0:16:4C:54:9F:C1:95
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/83436f15-9744-44ae-bab9-2563f6c055aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.123.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c0:d8:c8:01:94:f0:71:aa:34:ae:fb:2c:f1:98:ae:a4:5a:0e:
2c:ea:a3:35:52:4b:0b:24:86:2d:ba:32:2e:50:a7:8b:b1:90:
64:03:58:7c:c8:b3:96:75:e1:16:6a:e3:ea:96:57:1c:6f:46:
16:24:08:41:de:2a:f7:00:59:ac:d3:83:d7:b9:2e:7e:ac:81:
ee:bd:e2:2f:22:e7:8e:1f:fa:9e:20:c1:bd:08:7a:e5:3f:ad:
0f:80:18:e3:e8:fc:21:b8:47:9e:65:37:76:a2:8b:6b:bc:30:
85:f9:e3:70:55:35:ef:ac:ca:2d:eb:a5:b7:c4:41:aa:f8:59:
0c:51:0d:76:87:ce:0a:74:67:a1:e2:0d:ee:90:f1:90:f6:8e:
83:ec:1f:88:5e:51:19:8c:bb:9b:62:31:a9:fe:b3:07:2b:ad:
e4:0a:8c:9c:6b:ac:9b:67:92:22:fb:bf:ed:5a:67:f1:56:b7:
4a:8a:36:dc:5b:3f:63:54:45:bf:a8:0c:26:e0:2c:38:60:dc:
89:ea:c2:9d:6a:88:47:f1:96:d5:f2:25:a9:c9:26:d0:28:fe:
24:98:67:da:e2:f8:0d:84:03:27:a4:fd:41:bc:76:07:ce:84:
43:68:29:f4:6a:88:ed:51:da:ca:f8:fe:a7:fc:37:ed:97:72:
8a:84:a4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:43 2026 by rpki-client