
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b077c7f9-666e-471a-9d7f-878e8767a601.roa
File: b077c7f9-666e-471a-9d7f-878e8767a601.roa (raw, json)
Hash identifier: zuwpAJWrJJsUS0QJLArqVrMFqg5qZoTv2PWttqGN0dw=
Subject key identifier: EF:F4:94:3A:EF:32:62:3B:F4:A5:08:38:90:8F:B2:CF:B0:3F:91:C3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B8FC467A3BBDFE542A5E5109C6E0861B79CCD7F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b077c7f9-666e-471a-9d7f-878e8767a601.roa
Signing time: Tue 24 Feb 2026 02:00:56 +0000
ROA not before: Tue 24 Feb 2026 02:00:56 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 107.20.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:8f:c4:67:a3:bb:df:e5:42:a5:e5:10:9c:6e:08:61:b7:9c:cd:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 24 02:00:56 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=190de7ee70260603232ecc3b0130dd354da8c367b81a5b8214cb1d6cd0970e6b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:42:41:11:f8:d6:dd:4a:02:49:bf:77:a4:cc:
72:67:24:ab:5e:aa:5f:9b:96:d6:88:51:0e:b2:c4:
09:f4:ea:35:99:6f:a5:43:5a:d3:6c:f9:7c:48:0c:
80:67:c5:2a:03:3e:1a:7e:d0:06:f6:56:5f:26:cc:
29:c4:36:28:72:21:85:64:b5:a0:28:5f:37:e5:3e:
c9:85:1d:19:8c:37:57:3a:c8:f6:63:d1:44:5e:2f:
7c:6e:a4:00:fa:9e:fe:8a:ed:67:af:59:dc:47:bb:
a7:c7:d3:34:20:97:7c:57:59:9a:36:bc:07:5c:71:
ed:e6:9e:e3:75:6d:77:73:55:87:e7:8c:b4:75:b9:
86:12:c3:d4:4d:05:9b:d1:d3:d4:3e:6d:6c:76:ed:
36:62:36:97:60:a8:c9:53:25:bb:c6:e9:6b:2a:ef:
4c:fc:11:19:f5:9d:75:c0:10:61:28:56:55:31:9f:
b6:64:c9:1c:60:9a:cb:a8:4d:77:d5:7a:18:9d:6a:
7a:e3:c0:f7:73:0a:03:00:1c:f3:02:58:3f:d1:41:
b0:96:53:b2:9a:d1:6e:04:22:21:95:5a:82:49:f6:
10:24:b3:63:42:4d:ee:6c:0c:de:01:c9:a5:35:fd:
d2:38:8a:53:cc:23:6a:d2:de:47:b4:83:1b:b7:5f:
b7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F4:94:3A:EF:32:62:3B:F4:A5:08:38:90:8F:B2:CF:B0:3F:91:C3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b077c7f9-666e-471a-9d7f-878e8767a601.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.20.0.0/16
Signature Algorithm: sha256WithRSAEncryption
53:6c:d5:36:d8:83:3b:b4:c9:e3:b2:a8:19:c1:7d:61:49:29:
c6:b6:ac:62:db:36:28:5f:4b:09:3f:1e:0b:0b:0c:ee:78:19:
15:16:a5:8c:53:d7:0b:50:aa:63:a1:a8:a0:5c:fb:ea:80:97:
13:a7:f8:28:7b:10:1c:ec:b8:76:01:64:0d:6f:ca:50:f9:91:
41:81:f1:aa:6c:54:9f:15:01:19:d1:52:ec:43:14:5e:b5:91:
99:ce:e6:e5:71:ac:22:2e:6a:56:11:33:ba:8c:c9:e8:f8:90:
b2:17:1e:ec:99:b2:c0:2f:57:8f:66:15:dd:b1:46:17:14:25:
3d:99:8e:6f:0a:80:87:51:52:ec:92:4f:ac:cf:76:b3:a5:c3:
58:8a:47:22:cc:2f:c4:8b:f7:13:a3:0d:51:f6:96:ad:78:0a:
f5:4a:ec:41:8e:7d:9e:27:9c:5c:94:78:5c:a0:c8:e5:a4:b2:
56:58:92:ee:d0:09:15:3f:4a:06:22:67:90:2c:a4:ef:5c:a1:
7d:74:80:62:2f:8d:e0:d5:08:5c:6e:3c:13:b3:55:32:96:13:
92:b0:f3:a6:1c:f8:96:10:a2:22:69:b6:95:c0:c1:33:9f:d4:
4a:e2:a2:ff:0e:ce:bb:60:b8:14:d3:bf:34:d7:b3:b3:e6:cc:
c9:1a:b3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:43 2026 by rpki-client