
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4714e74-7b34-4615-a9e8-94d381af06c5.roa
File: c4714e74-7b34-4615-a9e8-94d381af06c5.roa (raw, json)
Hash identifier: 15rFflKNbhZJJwgq5Gg8IPnKME2+uT2l1S8lackar6w=
Subject key identifier: 45:FD:1F:05:E2:03:C0:52:50:FB:AB:AD:4F:94:FE:56:DA:D9:9E:47
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2841A61D60228A63AD4CBDDCD14522029545949C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4714e74-7b34-4615-a9e8-94d381af06c5.roa
Signing time: Sat 14 Feb 2026 00:31:18 +0000
ROA not before: Sat 14 Feb 2026 00:31:18 +0000
ROA not after: Fri 15 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 16.112.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:41:a6:1d:60:22:8a:63:ad:4c:bd:dc:d1:45:22:02:95:45:94:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 14 00:31:18 2026 GMT
Not After : May 15 23:59:59 2026 GMT
Subject: serialNumber=8d1cc40157ae4d5ddf33ba41a6fa08b5190244ccec4ff282f34ca8a890ebe3e3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:d9:5f:49:18:13:10:67:f7:82:2d:2a:7c:
ea:00:90:9d:27:05:bb:42:7b:82:f9:75:75:6f:bf:
12:a2:aa:fb:96:14:08:47:82:53:3b:09:06:1b:4c:
6c:0c:60:b1:1b:d3:df:5e:c2:67:41:14:c6:0f:66:
3a:e9:96:67:68:9a:b0:fc:f1:27:be:e4:f3:68:86:
27:54:cd:f5:16:40:ce:53:bc:96:b1:6e:f0:a0:18:
69:09:1f:2c:45:2c:59:84:2c:06:fb:d3:a9:e2:27:
46:20:d2:59:38:d1:d4:33:55:65:6f:6d:73:e7:6a:
3b:54:cb:37:8b:aa:0d:51:ae:da:88:4a:24:d0:09:
65:4d:4d:e2:b4:4b:4f:f4:c5:d0:f4:5f:00:e2:34:
bc:82:7b:76:b8:37:67:63:e7:68:fe:a6:8b:2c:ed:
d9:45:92:c9:0a:67:6b:ab:66:49:20:38:71:d8:73:
c5:42:63:a2:3e:0b:73:c7:e3:f9:90:ae:5c:1a:a0:
dd:78:60:8c:2d:25:43:3c:32:41:1d:6b:09:4b:8e:
73:3c:0d:e0:e2:10:d9:1e:da:f2:06:09:7c:57:1e:
35:7d:45:e3:84:25:56:6a:33:7a:b8:28:8f:eb:96:
9e:82:f3:22:3b:b5:54:ed:b5:c0:3f:84:14:76:97:
d8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FD:1F:05:E2:03:C0:52:50:FB:AB:AD:4F:94:FE:56:DA:D9:9E:47
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4714e74-7b34-4615-a9e8-94d381af06c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.112.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:9d:77:63:8a:26:23:fd:0f:80:55:45:79:ad:18:66:88:5a:
3d:63:b6:0f:46:16:f8:f9:5c:9f:6c:0c:20:9a:6e:d1:2f:b2:
cd:5f:68:fd:fe:e4:b3:6e:1b:16:76:64:e1:a7:88:28:a8:83:
4d:29:4e:be:0b:23:12:4f:c7:8c:ec:43:c0:f1:8f:e1:cb:6e:
46:90:3d:b2:3b:cf:72:04:26:7c:a3:47:7e:7c:90:ea:60:a7:
ee:7f:93:79:dd:ae:fc:92:90:68:99:8a:76:7e:2d:bd:79:ff:
07:19:35:3a:cf:8a:4b:73:f9:02:ad:d8:a5:b7:fc:4a:84:45:
e6:ce:15:88:10:fa:d5:78:52:ed:f2:da:b0:8e:d1:06:f0:fe:
04:a0:ed:ba:62:5d:0a:fa:4b:21:a6:57:79:1d:86:61:f8:7e:
48:e2:47:88:5c:af:e3:7c:7d:d4:b5:c1:73:d3:0c:12:13:81:
17:f2:4b:ea:8f:e2:35:5b:4e:d5:f7:b0:e0:c6:ac:fe:d0:9b:
be:76:b3:e7:98:af:8c:94:8b:ff:72:f3:96:eb:fc:9e:40:e6:
1e:97:b7:0c:76:bb:14:7c:0c:b6:fe:f6:20:54:6d:24:79:c6:
e6:53:34:89:59:98:2d:8a:cc:8b:e2:a7:68:b2:63:6e:18:f7:
4d:e2:da:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:44 2026 by rpki-client