
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/deea364b-9e92-4fa6-a021-a1d02bd92804.roa
File: deea364b-9e92-4fa6-a021-a1d02bd92804.roa (raw, json)
Hash identifier: hcm7WLs+NueNBhKkHrzM7fuBiPqOMpBI/08WEl8F4SI=
Subject key identifier: 46:18:3D:DB:46:B1:B6:83:13:73:26:AA:D6:A9:FE:F0:AC:4B:57:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 72572711D7BB2BB9ACE3CE5DFD553C2CED0A75BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/deea364b-9e92-4fa6-a021-a1d02bd92804.roa
Signing time: Tue 24 Feb 2026 00:20:49 +0000
ROA not before: Tue 24 Feb 2026 00:20:49 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:3400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:57:27:11:d7:bb:2b:b9:ac:e3:ce:5d:fd:55:3c:2c:ed:0a:75:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 24 00:20:49 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=b89ba25a4b661254c505536efdffa3a51b3b6d7ef36a9573b3c752c2b80d860e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:06:35:cf:49:a1:73:c5:8d:a2:3b:3d:4c:5e:
39:92:20:81:9c:90:cd:43:28:94:c4:1b:3f:30:7b:
be:56:83:f5:78:93:be:6f:55:7d:48:d7:6d:16:bc:
2b:4c:f3:69:60:38:af:0d:96:f7:2d:2f:e8:c6:cf:
b1:e4:82:e3:85:6c:93:f4:5a:d3:46:83:9f:24:c8:
42:62:3b:90:a3:f6:14:15:62:8a:ab:1a:bb:f2:2b:
66:5d:05:bd:ce:72:fa:0d:f5:a4:2a:e1:f1:af:18:
f8:2c:a7:77:aa:ed:82:ae:da:1f:19:02:9f:ec:69:
4e:f9:13:a3:f8:37:40:1a:98:d2:cf:d1:fa:2e:e7:
fe:74:5b:c2:ca:40:57:30:4f:80:ba:6e:8c:d8:95:
8c:43:ce:3d:16:56:c2:54:11:d2:34:76:0f:b4:72:
e3:fa:25:75:25:dd:1d:1e:b6:a5:f9:56:3b:5c:0d:
cc:8d:d1:b0:6c:32:6b:b3:7b:a5:9e:4d:0d:0b:99:
0f:a0:b8:41:5f:f9:43:c3:db:44:fe:f9:c5:a7:1a:
d4:9a:e9:24:39:1e:fb:6b:f0:d6:b0:a8:d6:65:51:
c2:13:33:b5:7c:76:44:ff:08:96:9a:7a:4e:18:0c:
dd:5d:cf:68:b3:c8:11:bf:a9:0a:7e:72:a6:60:19:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:18:3D:DB:46:B1:B6:83:13:73:26:AA:D6:A9:FE:F0:AC:4B:57:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/deea364b-9e92-4fa6-a021-a1d02bd92804.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:3400::/40
Signature Algorithm: sha256WithRSAEncryption
01:c4:a6:20:95:90:d6:84:f1:8e:cd:b0:af:e2:b6:77:7a:86:
ad:0d:02:f5:d1:0f:4e:37:f6:1b:2a:bc:53:1d:6a:39:7a:f1:
41:ef:65:54:92:7a:0b:8b:7b:cc:46:6a:db:05:2b:90:03:e9:
1e:70:f1:fb:45:f8:14:d5:36:72:e8:13:9e:56:11:1a:a6:dc:
c6:f6:c1:a2:3b:a1:47:80:0c:d6:fb:95:8a:ab:9b:51:e5:18:
e7:4f:0b:7b:c4:6e:b6:5a:a7:8a:e4:b4:a6:be:a2:91:98:6c:
05:0c:b5:09:89:df:1f:01:7f:75:b6:90:69:69:f0:f7:4e:54:
dd:18:76:b8:44:f1:d1:c6:54:4a:ae:18:08:1b:b8:64:3c:7d:
9f:f3:88:3b:73:ac:47:4a:a7:a7:ea:a6:02:bb:37:c4:d5:3d:
38:53:da:09:e2:83:d4:8a:ac:36:4c:b0:b8:45:44:26:12:18:
fa:bf:fb:3f:26:24:a9:82:34:27:d1:70:2b:44:93:f6:80:6a:
c5:6b:ed:d2:bc:05:eb:c6:e0:0a:73:99:56:fe:6f:3c:f0:0c:
cb:b2:91:17:40:c1:a3:1a:6d:43:de:39:e5:59:aa:14:14:d0:
f9:18:76:a7:e2:e1:be:30:9b:38:cf:76:8e:c6:dc:ed:8d:cb:
e2:12:77:6a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:00 2026 by rpki-client