
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4b42247-f61c-4e66-8e1f-eec8fefcd322.roa
File: c4b42247-f61c-4e66-8e1f-eec8fefcd322.roa (raw, json)
Hash identifier: 3YDmnnSxxp/aHfmYGvAiEqLdUbxXDlTuPpQCwRMga5Y=
Subject key identifier: 31:6A:14:6B:E1:CA:EE:82:FF:23:20:F0:2E:74:8A:1D:D5:E3:1C:46
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 04140FFBC2123E2CA182B4B619EC3255AF50C674
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4b42247-f61c-4e66-8e1f-eec8fefcd322.roa
Signing time: Wed 18 Feb 2026 00:20:33 +0000
ROA not before: Wed 18 Feb 2026 00:20:33 +0000
ROA not after: Tue 19 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 216.230.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:14:0f:fb:c2:12:3e:2c:a1:82:b4:b6:19:ec:32:55:af:50:c6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 18 00:20:33 2026 GMT
Not After : May 19 23:59:59 2026 GMT
Subject: serialNumber=68a6a170fbf9afcd135c5e7574c1ece79603da1812d22369f6290bb836a2dce2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:84:a4:2e:a2:54:3b:b2:18:30:42:79:1a:
3a:42:84:0a:7f:e5:92:be:d0:26:81:9a:12:8e:0c:
be:e7:1d:20:7b:7b:8a:33:4d:78:38:ae:90:ad:b8:
13:26:08:82:77:cb:b1:7a:ea:61:85:0a:d5:c6:98:
5f:e3:85:15:4f:30:5c:17:e3:6f:59:75:d3:89:87:
f3:cf:89:e5:47:de:a6:9f:d3:85:0e:f1:76:79:e6:
2a:7f:49:3d:db:c7:5f:76:ac:9a:36:cc:dd:27:ca:
ad:dd:7e:aa:07:23:9d:db:82:15:2d:9d:7d:cf:8f:
19:2c:af:27:09:e0:7c:3c:e5:f4:0a:a5:69:3b:43:
6e:95:80:a3:50:b0:e1:8e:c2:2d:6c:0a:2e:8e:ec:
72:dc:bc:6d:ef:1c:75:a6:c2:d8:64:c9:2b:55:3e:
ab:7c:d3:65:84:0c:62:4f:08:44:67:bd:49:84:d8:
a6:2f:e7:a2:bd:40:2b:05:96:72:22:7d:a5:ad:42:
a0:21:23:b0:02:db:54:9a:57:69:9f:1b:73:ae:da:
10:10:f3:e6:c1:58:3f:2e:e8:5c:6a:75:c5:04:bc:
da:dc:0d:f9:a7:0d:5f:dc:0f:c7:ae:eb:14:dd:8d:
52:cc:58:76:40:d1:86:20:af:47:23:6d:50:7c:1a:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6A:14:6B:E1:CA:EE:82:FF:23:20:F0:2E:74:8A:1D:D5:E3:1C:46
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4b42247-f61c-4e66-8e1f-eec8fefcd322.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.230.70.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:f9:d2:de:09:88:63:32:1e:94:d6:e2:4e:47:03:aa:aa:aa:
7d:d1:1d:f4:28:1e:60:44:ce:62:ab:06:04:ae:fc:ff:b7:26:
20:3d:68:c5:c7:80:ae:9b:db:65:fc:01:67:28:80:60:59:69:
74:44:19:a9:99:53:43:ce:88:3b:3c:27:a0:42:e8:11:82:82:
13:24:24:49:54:c7:2c:bc:bf:8b:51:67:67:f2:0c:f1:82:17:
8b:c7:92:e2:04:8e:84:31:56:79:1b:60:a7:a0:03:d1:ab:25:
67:00:b9:ed:9a:bc:80:19:0c:59:53:e4:b8:21:02:bc:ac:90:
20:bf:a8:b4:fc:98:95:aa:2d:e3:db:82:61:af:c8:35:2c:48:
a0:c8:c9:87:74:65:f7:90:d3:e7:c0:62:12:15:6c:d8:80:40:
d9:3c:a9:d2:80:46:b5:83:55:0e:ca:6f:79:81:c9:ea:6d:c3:
8c:3c:04:67:03:3f:20:d2:06:ad:b5:f9:6d:20:67:97:9e:67:
4a:bd:d4:3d:e8:cd:46:88:05:02:26:e9:43:69:bf:dd:c2:6a:
c8:b5:57:95:2d:70:f1:32:47:10:c6:87:cf:b9:8f:2f:06:9d:
09:99:21:d9:40:3b:de:e7:4b:09:89:77:31:eb:09:5f:b3:ad:
3f:5b:48:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:07:48 2026 by rpki-client