
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b5791fc-d3ba-408c-8836-1a17336b2ea1.roa
File: 9b5791fc-d3ba-408c-8836-1a17336b2ea1.roa (raw, json)
Hash identifier: lnh43V0qEqOYkm++wTYyxGKDPLzfxSVLnq+OiaAWLUc=
Subject key identifier: 0F:C9:F3:A9:A4:14:25:8A:7E:0A:31:06:4E:8D:04:A9:6D:09:B1:78
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4BBB4794A025CF0CE7361E8BC5CE701684167C1A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b5791fc-d3ba-408c-8836-1a17336b2ea1.roa
Signing time: Fri 20 Feb 2026 00:40:38 +0000
ROA not before: Fri 20 Feb 2026 00:40:38 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f01:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:bb:47:94:a0:25:cf:0c:e7:36:1e:8b:c5:ce:70:16:84:16:7c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 20 00:40:38 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=1a46c7ef0572e49ab26d42735002a890a6446a669b77466ac6443992bdf322b5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:3e:dd:67:cc:0c:f1:6f:d1:af:41:53:33:
a2:e6:1e:fc:ec:a3:49:c8:d2:c6:ee:0a:6f:4c:5e:
9b:ac:2c:b7:30:a3:3a:e8:e2:ba:43:04:9c:49:45:
7a:c2:ce:cc:c8:04:f8:74:2d:04:cc:19:6c:df:fc:
1e:4b:21:03:77:82:77:a0:e7:0c:09:cc:ea:0c:c4:
6f:d4:12:d6:5b:55:a3:f1:3c:d1:13:a1:ef:61:56:
a7:86:b9:90:70:dd:28:10:5d:ae:48:2a:b4:b0:91:
36:2c:86:f8:b0:aa:6d:d4:db:c7:bc:3c:08:24:09:
7c:c7:2e:75:af:8e:37:e4:33:50:f9:fb:41:40:72:
ac:6f:fc:8b:fd:8b:5c:16:b0:71:f6:b1:a7:8f:35:
f0:fb:1d:4e:8b:5c:14:b8:b0:3c:51:3e:b8:5b:b3:
c3:4a:45:7d:bd:9e:f7:e0:b8:19:a6:25:5b:2b:45:
39:16:e8:90:d2:db:9b:ae:94:d2:13:f1:1e:e1:66:
c5:3e:b9:14:9e:ad:02:e9:ca:68:8f:b6:85:ec:46:
3c:7c:35:22:dd:23:1c:e3:50:7e:cc:de:82:44:99:
d8:90:c2:85:8b:66:d3:31:8a:28:b9:03:19:bc:3c:
ae:35:da:5e:09:00:d1:12:2f:eb:04:89:17:52:41:
c9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C9:F3:A9:A4:14:25:8A:7E:0A:31:06:4E:8D:04:A9:6D:09:B1:78
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b5791fc-d3ba-408c-8836-1a17336b2ea1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f01:4080::/48
Signature Algorithm: sha256WithRSAEncryption
d8:05:26:a2:4e:1e:db:55:80:6c:77:7d:90:ed:f2:8b:c7:20:
da:a9:db:3d:41:d2:24:a1:34:00:79:6f:ac:f0:16:38:ba:32:
6e:0a:33:52:01:bc:0b:e2:1e:41:c9:1c:98:07:43:c5:04:06:
97:cf:06:09:18:f0:bd:d9:85:86:6e:34:88:37:cb:fd:18:31:
c0:70:c2:35:4f:4c:5d:da:ec:a2:1c:90:b7:3a:1a:06:bd:11:
65:61:a9:f8:87:c6:cf:2c:92:3d:48:90:05:a0:65:fa:48:e5:
64:c6:cf:df:c6:45:9e:9b:b8:94:67:1c:47:e0:48:b9:4f:5e:
8c:43:f4:91:c8:f6:8f:8a:fe:0b:c1:fb:ae:48:fd:1e:e0:ef:
db:eb:fb:94:6f:57:40:7a:d7:73:16:8c:f5:19:1e:53:c2:4e:
8f:0e:0d:66:5c:1d:38:30:d7:5e:67:ab:85:9e:f1:5a:21:20:
c5:32:59:22:dc:27:0b:56:c6:e8:ea:82:a1:ad:5d:2a:ae:d5:
69:df:2f:04:29:b4:dd:16:6d:27:7a:95:a0:8d:96:62:3f:ab:
64:f8:61:6d:a7:47:46:a0:7f:5d:6b:9e:77:b1:c2:ef:21:ab:
f6:68:b0:26:76:d9:2f:f4:8f:f9:8f:e8:8a:a2:38:4c:41:c5:
e4:b8:59:ba
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUS7tHlKAlzwznNh6Lxc5wFoQWfBowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIwMDA0MDM4WhcNMjYwNTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AxYTQ2YzdlZjA1NzJlNDlhYjI2ZDQyNzM1MDAyYTg5MGE2
NDQ2YTY2OWI3NzQ2NmFjNjQ0Mzk5MmJkZjMyMmI1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqBz7dZ8wM8W/Rr0FTM6LmHvzso0nI0sbuCm9MXpusLLcw
ozro4rpDBJxJRXrCzszIBPh0LQTMGWzf/B5LIQN3gneg5wwJzOoMxG/UEtZbVaPx
PNEToe9hVqeGuZBw3SgQXa5IKrSwkTYshviwqm3U28e8PAgkCXzHLnWvjjfkM1D5
+0FAcqxv/Iv9i1wWsHH2saePNfD7HU6LXBS4sDxRPrhbs8NKRX29nvfguBmmJVsr
RTkW6JDS25uulNIT8R7hZsU+uRSerQLpymiPtoXsRjx8NSLdIxzjUH7M3oJEmdiQ
woWLZtMxiii5Axm8PK412l4JANESL+sEiRdSQclfAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUD8nzqaQUJYp+CjEGTo0EqW0JsXgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzliNTc5MWZjLWQzYmEtNDA4Yy04ODM2LTFhMTczMzZiMmVhMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8BQIAwDQYJKoZIhvcNAQELBQADggEBANgFJqJOHttVgGx3fZDt8ovH
INqp2z1B0iShNAB5b6zwFji6Mm4KM1IBvAviHkHJHJgHQ8UEBpfPBgkY8L3ZhYZu
NIg3y/0YMcBwwjVPTF3a7KIckLc6Gga9EWVhqfiHxs8skj1IkAWgZfpI5WTGz9/G
RZ6buJRnHEfgSLlPXoxD9JHI9o+K/gvB+65I/R7g79vr+5RvV0B613MWjPUZHlPC
To8ODWZcHTgw115nq4We8VohIMUyWSLcJwtWxujqgqGtXSqu1WnfLwQptN0WbSd6
laCNlmI/q2T4YW2nR0agf11rnnexwu8hq/ZosCZ22S/0j/mP6IqiOExBxeS4Wbo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:36 2026 by rpki-client