
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2f7eaf5-fb23-4e3d-8236-f34d872d769a.roa
File: b2f7eaf5-fb23-4e3d-8236-f34d872d769a.roa (raw, json)
Hash identifier: R//PXMrpE8DupKwO1FRvL8R+l8NqcNrAQJ+zuvyz7tk=
Subject key identifier: 11:05:2D:79:62:7D:E5:CF:19:11:25:57:0F:7C:35:7A:64:8F:68:CB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 23C6003F74292E231ADF99A2372BFF721ABC9240
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2f7eaf5-fb23-4e3d-8236-f34d872d769a.roa
Signing time: Tue 17 Feb 2026 00:20:05 +0000
ROA not before: Tue 17 Feb 2026 00:20:05 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f15:c800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:c6:00:3f:74:29:2e:23:1a:df:99:a2:37:2b:ff:72:1a:bc:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 17 00:20:05 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=d28c89ed1de8fb7c2df78cbabb5f113d3112c30b988948048edba7dc7bf1e74a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:80:3d:eb:ae:81:8f:7b:0a:42:f3:a2:68:
78:de:30:d3:4d:1b:34:d0:ed:8a:f3:3a:ed:37:f4:
d6:ca:8d:97:02:88:01:b4:ab:26:80:d7:e3:06:55:
59:1c:39:4e:89:ce:d8:bb:e1:dd:9a:99:3d:2d:5a:
86:66:18:73:72:a5:98:5d:a3:b6:50:2d:16:ae:18:
a6:a8:42:7f:22:35:0a:00:a2:95:84:69:be:58:f9:
af:5d:f9:49:20:b2:f1:13:53:4c:df:50:66:51:ce:
aa:fd:b8:a5:61:cb:dc:d0:52:37:0d:b0:9c:e6:a3:
62:bd:43:b9:61:61:82:e3:0b:4a:6f:20:75:41:26:
c0:63:3e:e6:6c:2b:1b:03:b3:b7:48:67:b7:c6:af:
32:e5:0b:11:4d:76:93:f6:d4:59:e3:26:69:b0:a8:
08:c4:d2:39:97:59:86:f3:f2:21:f9:9d:27:cb:d9:
8c:58:f1:07:c4:e0:5e:73:5d:4d:16:c4:81:b1:c2:
64:fc:c6:35:c5:5e:a0:69:f2:ff:ed:6b:68:17:86:
5f:f5:b4:59:7f:47:54:e6:c1:72:6d:aa:47:be:1e:
89:09:56:f1:1f:09:24:06:42:d8:1a:e6:b3:b0:cd:
e4:96:5f:6a:03:b5:fc:00:5e:55:66:19:a9:a2:fc:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:05:2D:79:62:7D:E5:CF:19:11:25:57:0F:7C:35:7A:64:8F:68:CB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2f7eaf5-fb23-4e3d-8236-f34d872d769a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f15:c800::/37
Signature Algorithm: sha256WithRSAEncryption
83:75:b3:14:a3:ff:41:ea:f8:6c:42:4a:3d:87:84:66:51:87:
80:64:b2:bd:01:3c:13:ea:7b:63:48:f5:ad:8f:e8:26:d9:32:
4d:de:18:de:91:e6:7d:06:07:76:db:b1:44:94:4f:8a:2e:96:
a2:5d:b4:a0:40:02:79:78:8d:68:cb:66:e6:2d:a0:97:96:62:
54:a0:3a:17:fb:b2:80:68:de:c3:78:a0:df:93:f9:b5:0d:55:
dd:9a:48:bb:8a:71:c7:49:89:2b:59:60:24:46:ad:56:20:21:
fe:5e:80:27:06:a2:41:c5:ac:13:8e:62:00:e0:a9:af:0f:71:
7d:02:f7:41:4e:74:f9:bc:4f:7f:4f:f2:ac:46:c3:57:6a:cc:
c6:ca:9f:32:e2:da:8b:84:0d:b9:8c:e6:38:ec:1d:04:d8:ee:
a3:ce:30:b3:fd:60:0e:5d:1f:8f:69:5f:cb:48:51:83:46:4b:
e8:6b:5c:a3:1e:ca:66:3e:f4:ad:a7:6f:a4:63:bc:7c:92:c2:
fd:ec:91:c7:09:1a:83:fe:5d:c1:f4:fe:6d:75:75:8a:d6:1f:
49:41:2a:42:e1:16:b6:83:df:df:38:51:76:d8:38:5f:ff:2a:
d6:74:f4:e6:bd:08:16:f5:ad:02:9b:47:88:0e:3b:06:ef:1c:
ed:60:9e:42
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUI8YAP3QpLiMa35miNyv/chq8kkAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE3MDAyMDA1WhcNMjYwNTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMjhjODllZDFkZThmYjdjMmRmNzhjYmFiYjVmMTEzZDMx
MTJjMzBiOTg4OTQ4MDQ4ZWRiYTdkYzdiZjFlNzRhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDEfIA9666Bj3sKQvOiaHjeMNNNGzTQ7YrzOu039NbKjZcC
iAG0qyaA1+MGVVkcOU6Jzti74d2amT0tWoZmGHNypZhdo7ZQLRauGKaoQn8iNQoA
opWEab5Y+a9d+UkgsvETU0zfUGZRzqr9uKVhy9zQUjcNsJzmo2K9Q7lhYYLjC0pv
IHVBJsBjPuZsKxsDs7dIZ7fGrzLlCxFNdpP21FnjJmmwqAjE0jmXWYbz8iH5nSfL
2YxY8QfE4F5zXU0WxIGxwmT8xjXFXqBp8v/ta2gXhl/1tFl/R1TmwXJtqke+HokJ
VvEfCSQGQtga5rOwzeSWX2oDtfwAXlVmGami/GJ3AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUEQUteWJ95c8ZESVXD3w1emSPaMswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IyZjdlYWY1LWZiMjMtNGUzZC04MjM2LWYzNGQ4NzJkNzY5YS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgMmAB8VyDANBgkqhkiG9w0BAQsFAAOCAQEAg3WzFKP/Qer4bEJKPYeEZlGH
gGSyvQE8E+p7Y0j1rY/oJtkyTd4Y3pHmfQYHdtuxRJRPii6Wol20oEACeXiNaMtm
5i2gl5ZiVKA6F/uygGjew3ig35P5tQ1V3ZpIu4pxx0mJK1lgJEatViAh/l6AJwai
QcWsE45iAOCprw9xfQL3QU50+bxPf0/yrEbDV2rMxsqfMuLai4QNuYzmOOwdBNju
o84ws/1gDl0fj2lfy0hRg0ZL6Gtcox7KZj70radvpGO8fJLC/eyRxwkag/5dwfT+
bXV1itYfSUEqQuEWtoPf3zhRdtg4X/8q1nT05r0IFvWtAptHiA47Bu8c7WCeQg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:14 2026 by rpki-client