
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb376071-26aa-4a42-baa1-5a5cac704a4b.roa
File: fb376071-26aa-4a42-baa1-5a5cac704a4b.roa (raw, json)
Hash identifier: 1dSODxhTTPDDlb7lKKLKfLYQuFscIsg9r82i2awOzp8=
Subject key identifier: DA:64:2E:DD:DD:FC:66:FE:88:2E:D9:4F:70:B5:08:85:DB:A0:46:51
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7F5B93F89F4CADFCD4F0CACF6135C8B5B8C06719
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb376071-26aa-4a42-baa1-5a5cac704a4b.roa
Signing time: Wed 25 Feb 2026 02:30:12 +0000
ROA not before: Wed 25 Feb 2026 02:30:12 +0000
ROA not after: Tue 26 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:7480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:5b:93:f8:9f:4c:ad:fc:d4:f0:ca:cf:61:35:c8:b5:b8:c0:67:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 25 02:30:12 2026 GMT
Not After : May 26 23:59:59 2026 GMT
Subject: serialNumber=6ed54a058e0702dc9a513c612ddef46ec614596b1d495199000b9b70390fecb2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:51:70:58:6e:f7:87:83:d2:53:24:cd:ca:89:
f6:75:33:92:ee:3c:ef:dc:82:26:4b:7c:3c:d7:03:
02:de:a2:1b:3b:c1:1b:c1:3b:75:d2:b8:58:2b:54:
4d:5f:99:13:0d:65:74:94:88:ba:36:91:45:86:f2:
a8:79:58:c7:fd:44:ae:a2:ab:cc:1a:f9:11:22:d6:
27:d1:5c:9f:45:6c:ce:91:18:d1:3f:6d:24:1b:97:
05:81:ce:57:25:e8:3f:96:b9:53:9c:be:94:41:08:
1e:d7:00:fa:0e:49:27:79:9e:8f:96:ca:9f:18:87:
bd:50:77:b7:6a:04:42:5a:f5:b0:3b:22:20:27:ef:
24:41:d7:fa:ca:e6:5c:92:af:85:55:a0:e3:95:62:
c8:b7:94:db:d7:14:1b:d3:fe:8b:fb:59:33:a6:e7:
ce:78:6d:00:d0:c2:bb:f2:7e:85:02:a3:a8:15:e0:
36:0f:a9:db:1a:7c:d6:e7:e3:2d:4b:56:94:21:85:
a2:d0:e9:b4:88:38:78:d2:f0:4d:cf:16:1b:53:65:
26:d6:66:cf:3d:6a:64:d7:19:b1:e6:83:d6:0d:82:
96:e5:0c:00:f6:fd:68:1d:7d:50:be:d0:51:44:7b:
81:d7:7a:74:dd:b1:3a:54:67:83:3f:e2:83:b3:d4:
76:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:64:2E:DD:DD:FC:66:FE:88:2E:D9:4F:70:B5:08:85:DB:A0:46:51
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb376071-26aa-4a42-baa1-5a5cac704a4b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:7480::/48
Signature Algorithm: sha256WithRSAEncryption
cb:b0:23:7e:54:ae:bc:22:3f:c9:fa:0f:7c:9c:de:65:14:4b:
4a:8d:1e:39:f5:3b:4d:ee:34:9f:52:d3:55:4b:48:bf:8f:35:
ae:f4:e9:1d:70:82:2a:1e:33:cd:5d:d7:9e:f2:1b:4e:a4:13:
a1:ae:59:05:67:e4:62:30:0d:b9:e7:8c:32:17:31:ac:43:5f:
62:b6:b3:af:32:7c:8b:9e:3f:05:4e:f5:49:e4:46:4a:f9:54:
26:f3:fe:21:f6:02:11:a9:17:e8:e4:fd:cc:b5:25:f6:de:24:
f6:34:38:16:c2:d1:36:74:10:ed:ff:e5:44:8c:d4:bc:ed:4d:
99:53:0d:94:86:77:a4:4f:ee:dd:fa:6e:19:b4:b5:06:28:bd:
9a:85:c4:83:d2:4d:2a:e0:7e:d0:be:cb:f7:fb:fd:02:b4:be:
92:c6:3d:b1:0e:bb:1d:70:54:a7:d6:fe:f5:ce:3e:44:fe:f2:
48:84:cd:7c:37:99:3c:b8:29:c7:8c:7a:23:34:33:7d:fa:29:
89:f2:c2:e3:2f:45:2c:dd:de:31:af:c2:f8:7f:33:98:d6:b6:
12:6a:08:8b:23:8b:94:d1:d3:d6:1b:a0:5c:64:18:d6:bf:2c:
1e:62:9b:f2:e7:a8:68:4d:bf:ea:51:de:d6:d1:e0:ab:5b:91:
71:b5:05:b5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:56 2026 by rpki-client