
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab073fb0-7c4c-4764-a8c0-cf4e247792d5.roa
File: ab073fb0-7c4c-4764-a8c0-cf4e247792d5.roa (raw, json)
Hash identifier: ANBNf1aXrDA66VCvoD35v6/Xjt28mptOuwUU6Yqeq8k=
Subject key identifier: E6:05:81:8C:40:BA:29:BD:EA:6C:EE:44:53:5C:51:DC:2E:12:A0:85
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 13FE735BD2A3A8CE7083F151BE59E352B0E6E8B4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab073fb0-7c4c-4764-a8c0-cf4e247792d5.roa
Signing time: Tue 24 Feb 2026 02:01:48 +0000
ROA not before: Tue 24 Feb 2026 02:01:48 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:1020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:fe:73:5b:d2:a3:a8:ce:70:83:f1:51:be:59:e3:52:b0:e6:e8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 24 02:01:48 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=7f57b8822e325a32af0c3dec6a59d67e0e3db0ac1d2e4a56e16978a41684f282, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:75:21:af:f9:99:d3:91:6b:38:23:14:2d:
40:e5:4d:c5:ad:c7:57:17:55:ec:d6:86:ca:fb:2f:
5e:41:54:b9:0a:cc:ec:4e:76:a1:f6:8e:59:f0:fe:
ba:48:75:e0:c1:cb:dc:79:ed:fd:2f:bd:4c:df:de:
a4:dc:c5:13:fb:45:c4:c9:a9:37:f0:2f:59:e5:4b:
1e:8a:64:9e:46:ec:b0:da:e0:05:75:b4:60:8b:aa:
58:a8:fd:22:e2:e4:21:68:c4:bb:79:1b:96:08:ca:
85:96:ba:a8:62:34:b9:0c:b2:3d:78:f5:74:a1:50:
2c:a0:4e:56:a1:35:a2:70:27:a5:95:43:02:37:9e:
ef:27:29:b5:d9:09:14:9a:bb:1f:fb:e0:aa:9e:30:
b6:9d:d5:cb:25:11:fd:7a:35:f2:ef:c0:6f:60:cc:
a0:fb:cc:a7:38:27:12:f4:cf:cc:05:a6:91:9c:87:
87:93:67:ba:5e:7a:db:5b:d3:84:25:14:0e:e4:b4:
e4:3f:e9:b1:d7:44:23:2b:59:b7:07:62:99:c3:7c:
62:85:98:32:b2:85:9f:d8:fe:84:d2:cc:72:28:c4:
2d:95:76:89:4a:94:e4:96:72:f7:fa:a8:5b:6f:71:
9b:eb:57:7f:29:59:a9:c9:de:6e:b4:00:f3:ac:d0:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:05:81:8C:40:BA:29:BD:EA:6C:EE:44:53:5C:51:DC:2E:12:A0:85
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab073fb0-7c4c-4764-a8c0-cf4e247792d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:1020::/48
Signature Algorithm: sha256WithRSAEncryption
0d:b3:96:01:37:1c:e1:8e:25:5a:83:e4:8f:df:99:63:cf:c0:
30:0a:2f:77:3c:bf:6e:54:e3:9a:b9:e0:91:36:b5:b7:53:b9:
79:ac:f9:e4:c7:d9:5a:e4:70:c9:76:c8:6d:71:87:c7:a7:70:
04:77:db:3c:73:77:cf:96:06:8a:ca:49:4d:12:4d:ba:99:06:
e2:b7:47:dc:4a:05:b1:c1:20:d2:5f:1c:48:1f:62:eb:2b:09:
af:39:ad:b5:a7:d1:a7:df:42:1b:ed:ee:f9:15:ca:f9:53:ba:
09:ea:b6:0b:ae:4d:e8:11:6f:8d:36:c1:9f:d7:5e:d9:c5:32:
7e:33:26:5b:33:bb:e1:29:88:34:75:fc:e8:b3:ba:1a:e5:07:
50:48:08:13:90:d5:ea:f9:6b:ad:56:2b:5a:91:6a:63:8f:0c:
41:8d:34:5c:be:7e:63:a7:79:91:ad:1c:94:43:7c:df:6a:86:
70:ee:a4:36:28:7c:72:7f:00:0e:fb:70:ef:7d:6a:16:22:2c:
8c:64:f4:2b:35:71:59:0a:20:6e:e1:a8:30:d9:b0:8a:c1:16:
bb:6f:2e:c7:e1:66:15:fb:60:8a:c2:74:4b:1a:1e:9e:b0:54:
9b:3d:dc:f3:9d:b8:56:47:c7:12:76:4a:5e:e9:72:05:89:20:
37:23:e0:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:39 2026 by rpki-client