
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab2aa067-d551-45e0-a96a-d1d39ccd3d13.roa
File: ab2aa067-d551-45e0-a96a-d1d39ccd3d13.roa (raw, json)
Hash identifier: fsLozpasSQNfCYAPZODOef3Lksdx7dUr3LR21kaGCpA=
Subject key identifier: 66:52:1F:F6:C3:3C:6C:3A:E5:1E:5B:80:46:3A:5D:E5:BA:B6:55:A1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 45174084F083A84B6DE926ADA967759930C174B2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab2aa067-d551-45e0-a96a-d1d39ccd3d13.roa
Signing time: Fri 24 Jul 2026 00:10:05 +0000
ROA not before: Fri 24 Jul 2026 00:10:05 +0000
ROA not after: Thu 22 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 43.226.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:17:40:84:f0:83:a8:4b:6d:e9:26:ad:a9:67:75:99:30:c1:74:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 24 00:10:05 2026 GMT
Not After : Oct 22 23:59:59 2026 GMT
Subject: serialNumber=0574094bb508bff6573c693f0bd828febe4ced352cd76450729ef8682ea139f6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:ae:ee:a3:cb:34:35:5c:5e:91:d0:57:f0:
d5:0e:91:8f:d2:36:fd:91:69:8b:76:4e:9d:2c:79:
b1:1c:6c:b6:a5:86:6f:af:d1:c8:b4:d6:8c:4a:07:
e3:6a:f0:a8:92:91:15:39:10:47:65:d7:24:df:46:
37:61:e2:d1:af:7d:15:cc:0d:da:3e:f1:d6:f6:a7:
39:1a:b4:e9:d8:31:3f:00:f3:f7:e9:20:aa:b5:79:
b7:c3:f6:a4:35:28:7c:53:ae:51:98:65:16:13:59:
7c:81:42:68:aa:39:fd:cd:d6:b7:36:96:29:93:e6:
4c:30:bc:4f:1d:42:a1:45:4a:3a:21:bd:2e:1a:0b:
4c:cf:8a:a1:42:e2:ea:45:99:df:06:e9:7f:33:7c:
15:7a:68:bb:df:3a:23:b3:65:cd:c4:c3:c6:e5:39:
e9:2a:11:37:b2:86:08:86:c7:7f:89:07:41:1c:50:
07:88:7a:61:5e:22:73:3c:2f:82:24:22:6e:ae:25:
f0:f8:90:04:ea:c0:ca:3f:bf:46:ac:3b:93:b3:53:
0d:db:1b:c4:21:d5:12:7d:a2:71:e7:d1:fb:02:da:
fe:d2:0c:27:9a:e5:89:45:2f:da:86:f7:f5:56:08:
d9:99:57:cf:68:c8:97:d9:3d:38:ef:22:a8:f2:9b:
fd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:52:1F:F6:C3:3C:6C:3A:E5:1E:5B:80:46:3A:5D:E5:BA:B6:55:A1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab2aa067-d551-45e0-a96a-d1d39ccd3d13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.26.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:23:03:8a:dd:51:94:69:f9:d3:a1:ee:c3:31:fa:81:fc:81:
dd:10:9a:8c:8d:ef:c6:01:75:8e:61:b7:5c:e2:67:28:e1:e4:
21:4c:db:fc:1c:28:ff:7e:e5:f1:2b:b7:82:21:4f:74:e7:14:
bb:96:86:cc:fb:10:57:54:7b:9a:e2:ff:a5:e5:39:7e:25:f3:
30:e7:3d:0e:8c:a7:f0:48:2a:3e:ad:e1:c7:2d:b7:82:62:86:
85:03:2f:38:e9:95:e3:1a:62:06:7c:1a:72:77:5b:d8:5c:87:
b6:bd:49:67:30:06:84:34:19:5b:d1:9b:0b:bc:5d:b9:74:f1:
75:7b:9d:9b:09:d4:d4:4d:dd:24:19:20:c7:44:a3:64:34:2e:
77:db:2c:f1:d6:46:3e:af:89:d8:6a:5b:74:22:5f:83:2b:32:
22:a9:f0:86:d8:da:87:63:ae:47:d8:70:9c:b1:18:11:5b:48:
d4:43:2a:5c:f8:7e:b4:bd:a2:5a:3d:99:63:9e:66:df:b4:70:
63:3c:e3:1d:c8:88:20:8d:1a:07:76:17:50:21:86:e8:49:9b:
af:23:16:13:4d:48:25:70:86:84:25:82:59:ec:76:ee:bd:9c:
52:b5:de:3c:8a:96:a4:bd:0e:2b:d1:ff:22:1b:c1:dc:f0:45:
73:c0:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:50:11 2026 by rpki-client