
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a731ed6c-81fc-4e80-bf99-3fb86822d2cc.roa
File: a731ed6c-81fc-4e80-bf99-3fb86822d2cc.roa (raw, json)
Hash identifier: m7aaui8UxlMWnXiXUoT3+/Dei5nHW9qVWUQ9/hUApbs=
Subject key identifier: 1C:07:CB:14:80:CB:BB:20:FC:9A:FE:8E:9B:E1:31:D4:2A:30:65:D5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 364091E2F255523B3FF48527072B153F32910002
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a731ed6c-81fc-4e80-bf99-3fb86822d2cc.roa
Signing time: Sat 28 Feb 2026 00:20:34 +0000
ROA not before: Sat 28 Feb 2026 00:20:34 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1fef:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:40:91:e2:f2:55:52:3b:3f:f4:85:27:07:2b:15:3f:32:91:00:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 28 00:20:34 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=2949aaf6bd8a9e3524e87c277b7cd9505728a8be98ef27155b13f55f4dd544c4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:eb:c4:33:55:d8:e0:b1:ba:ae:1e:7d:c7:
d5:f5:66:17:7a:42:42:c6:8c:56:f9:88:59:46:65:
7a:61:c1:6d:ef:dc:20:56:5d:f1:fe:e8:27:e1:dd:
15:9c:a4:e7:27:eb:1f:4e:59:0b:c7:6c:e1:52:46:
eb:72:e4:90:61:67:b1:6f:fa:3e:fd:1b:77:f5:f8:
8d:43:b2:5b:b9:1c:a4:a3:99:b3:0e:b2:01:46:b7:
f4:56:51:cb:49:10:03:28:34:f0:37:12:dd:b5:b8:
cf:f4:e6:c5:b8:2a:0e:3d:a6:72:ed:c5:40:36:88:
ac:53:9c:3b:b8:2c:ae:b7:a9:9a:25:9b:0e:83:f1:
61:2a:20:3d:9d:5d:ce:8b:b5:89:f9:91:c0:64:0a:
bf:8d:dd:11:1f:b4:a4:14:d1:87:1b:11:08:c7:e2:
d9:e7:d2:7a:2d:bd:89:dd:72:b8:76:ef:26:e4:29:
eb:3e:b1:02:73:a1:c7:bb:bf:01:bb:57:10:07:23:
ea:90:f5:f6:96:1f:18:92:79:c6:d3:30:d0:92:f8:
33:05:4d:61:e7:dc:88:83:42:68:bd:14:5e:d5:5e:
16:14:e2:93:7d:68:d5:14:df:be:6a:9e:bd:bb:df:
e5:92:c2:b9:67:8a:80:8f:08:05:da:de:89:8a:d5:
2a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:07:CB:14:80:CB:BB:20:FC:9A:FE:8E:9B:E1:31:D4:2A:30:65:D5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a731ed6c-81fc-4e80-bf99-3fb86822d2cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fef:5000::/40
Signature Algorithm: sha256WithRSAEncryption
56:44:e1:a5:4f:90:c1:7e:7f:ff:22:17:ee:ef:12:c0:51:4b:
32:a3:d2:8a:74:74:0c:c2:f1:7f:78:de:d9:b4:b0:46:16:70:
cc:4f:87:00:ea:c3:d1:f5:86:35:d2:f8:cf:17:e7:c2:58:61:
dd:ee:b1:f7:7e:e1:b9:39:04:db:62:cb:05:be:5a:c6:48:dc:
3e:c3:cc:9c:5b:e8:99:c2:3d:6c:c6:7e:59:3d:1e:4e:4b:e4:
79:de:fb:73:5c:6f:7e:a8:b5:fa:b1:37:ad:bd:78:b8:b5:49:
fa:a5:b6:f9:cb:19:bc:bd:43:4b:17:e5:cc:28:17:df:f6:fc:
bf:f4:b5:a3:79:ce:8a:1a:8e:ba:b3:9a:35:b7:77:3b:9f:50:
14:11:9f:47:d2:c5:a7:e3:a4:63:8d:b6:70:e7:1e:7b:2e:5a:
30:bc:0c:50:ac:b9:a0:8c:a8:2b:e8:f6:e9:3e:e9:44:fb:b5:
86:6b:d7:32:c9:08:ba:fd:ae:4f:d1:c3:57:d1:8a:ba:d1:10:
23:02:ee:a2:ba:e9:fb:a4:34:55:e4:d9:d2:78:ff:e3:28:0a:
31:83:0e:67:e9:26:d2:ca:3f:0b:4d:a7:6e:48:be:8a:e2:fa:
c7:2e:12:04:25:76:84:92:1d:c2:e0:ba:20:44:56:8d:70:77:
77:dd:fc:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:07:37 2026 by rpki-client