
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad85cb2e-193f-4cc5-be6e-f69071c9985c.roa
File: ad85cb2e-193f-4cc5-be6e-f69071c9985c.roa (raw, json)
Hash identifier: aHYgZaulUkmO29FVoDWJ9Z70PlWW0ZK9MrQY4OG0Jjc=
Subject key identifier: 90:C2:B9:58:81:F2:CA:21:11:04:6C:39:1D:09:15:54:EB:A9:3B:5B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3C49516C8E6A963BD6546501DBA66F381FBA345B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad85cb2e-193f-4cc5-be6e-f69071c9985c.roa
Signing time: Wed 25 Feb 2026 00:31:16 +0000
ROA not before: Wed 25 Feb 2026 00:31:16 +0000
ROA not after: Tue 26 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 78.13.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:49:51:6c:8e:6a:96:3b:d6:54:65:01:db:a6:6f:38:1f:ba:34:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 25 00:31:16 2026 GMT
Not After : May 26 23:59:59 2026 GMT
Subject: serialNumber=c85aba9d7c436fed8d5aee879c375b96e54a3bfc7c21ea8db133db6eb3a48c7f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b8:82:7b:2e:7b:11:ce:6d:b3:21:b9:7a:cc:
fd:96:4b:64:ba:a6:85:61:fa:32:35:2a:23:f3:89:
c4:38:e1:fb:cb:7c:cb:94:2e:eb:66:f1:e3:c9:9a:
b4:ab:cd:2b:be:4d:2a:58:61:7b:69:c5:d7:b6:bd:
0b:74:ea:96:4d:af:9e:d8:a6:4a:97:7e:fe:54:ab:
fb:a9:2d:d9:18:cf:49:a2:4d:6b:6c:a4:b3:bd:c0:
36:ba:08:5a:38:7d:4c:45:72:27:34:94:a6:f4:90:
bc:ee:37:4b:05:b9:b9:92:f4:a0:d6:82:46:29:c4:
f2:40:e4:cb:5f:2e:72:ec:4b:bc:ea:a7:53:6a:55:
2c:9f:a0:52:23:0c:ca:c8:50:9d:35:82:53:2a:ce:
16:4e:5a:e3:7d:43:c0:2d:80:cf:e8:5e:0c:44:36:
1b:59:8d:49:20:a4:2d:0b:16:09:32:1b:1b:57:70:
3f:33:29:8d:10:94:d8:d4:7f:b5:be:57:5f:33:07:
04:0f:df:89:58:55:12:31:ae:2f:92:da:bd:89:8c:
a4:a3:e8:3b:99:0f:31:0e:98:c9:79:61:77:f7:e7:
8e:e6:cb:59:fd:c1:a2:8f:57:d5:ed:64:33:0b:73:
5e:77:b9:48:25:89:b8:65:c3:e2:0b:b3:af:fd:21:
84:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C2:B9:58:81:F2:CA:21:11:04:6C:39:1D:09:15:54:EB:A9:3B:5B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad85cb2e-193f-4cc5-be6e-f69071c9985c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.13.88.0/23
Signature Algorithm: sha256WithRSAEncryption
59:81:44:44:09:e9:e0:c3:2a:6c:61:17:7d:0e:77:09:a7:98:
26:1e:4e:26:35:d6:b1:3c:aa:c7:fe:94:07:13:5e:15:31:20:
74:76:44:4d:a9:80:ab:e8:7d:21:12:bb:10:95:2d:ab:68:6c:
4d:c4:e9:d6:2e:a9:50:75:73:96:dc:b6:68:33:fa:7c:cb:44:
5a:5b:a5:e5:0d:5e:35:7c:68:1b:18:20:7c:5c:52:f8:16:fc:
19:9c:89:15:f4:dd:db:a1:ce:c2:7c:13:11:2e:b5:05:9e:d8:
19:a0:f5:5c:66:f2:66:f5:40:a9:08:80:54:2b:dc:7b:b0:92:
63:f5:d0:3a:b3:a6:b6:10:6e:7c:d5:45:ad:f4:cb:97:24:36:
d5:b1:84:af:14:c0:25:3f:ca:36:b4:cc:25:94:ff:a4:5a:c8:
7a:08:7b:66:21:ff:40:ae:21:70:c1:6b:06:1b:65:77:af:17:
c8:95:ad:b2:0f:f1:9a:d1:60:95:1d:b0:bc:9a:09:24:bb:cb:
49:4e:0c:0e:6d:d2:85:97:ac:7e:9a:0e:83:ce:df:f6:b9:eb:
5c:dc:34:7e:8d:81:97:99:42:12:0b:27:62:99:cf:cf:d6:e5:
6e:64:fe:5d:5f:9c:36:56:55:c1:0a:32:07:6b:fc:34:ef:85:
99:9f:56:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:20 2026 by rpki-client