
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6ad32d5d-7dd7-4fc6-93fc-3ac8d1b02136.roa
File: 6ad32d5d-7dd7-4fc6-93fc-3ac8d1b02136.roa (raw, json)
Hash identifier: 0t9GSQbfRPR8o2FECBEoG7BQ5t50EY7sjeQqJ25IlgQ=
Subject key identifier: FA:7E:E3:9D:92:91:2C:3E:25:66:96:87:ED:A7:B3:52:80:7C:D0:60
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 6A3BBCA66937F95DE270260413A4F6989BF86AE1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6ad32d5d-7dd7-4fc6-93fc-3ac8d1b02136.roa
Signing time: Mon 23 Feb 2026 01:30:46 +0000
ROA not before: Mon 23 Feb 2026 01:30:46 +0000
ROA not after: Sun 24 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.68.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:3b:bc:a6:69:37:f9:5d:e2:70:26:04:13:a4:f6:98:9b:f8:6a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Feb 23 01:30:46 2026 GMT
Not After : May 24 23:59:59 2026 GMT
Subject: serialNumber=64e070f5b8ea3d56383a7bac6daaf6d670402ac4cbb19db795c42725ec80a560, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:93:0e:fd:e3:cc:48:ec:98:7a:06:b7:63:e0:
56:ae:86:e8:cd:cc:ad:bc:f9:c1:97:14:e3:4e:14:
28:ce:be:9c:db:41:b1:a3:85:36:d8:3e:77:4a:56:
4b:26:ed:f6:e5:51:05:22:be:f9:c3:40:c0:9d:29:
f7:85:e8:6a:39:74:6a:fe:29:5d:e7:5d:da:07:a3:
98:76:de:35:55:46:9c:49:47:22:05:fd:49:76:9d:
41:ac:2b:48:1f:11:7e:e9:1d:ce:19:e8:ea:a5:b4:
59:29:cc:f5:43:c9:e2:a5:7b:55:70:3e:e7:0f:a0:
21:76:ed:77:59:1f:08:c8:c5:37:4c:4e:4b:b7:91:
6b:20:55:cc:9b:2b:36:77:ce:08:ed:9e:0f:03:bd:
2b:f5:25:88:28:09:86:5b:88:82:d4:4f:96:65:2a:
6b:21:d4:ae:70:e5:0d:cd:47:fe:ed:37:8a:45:ec:
bf:58:fc:8c:eb:0d:5e:a7:de:e1:5f:83:99:3f:80:
b8:98:6b:93:53:b9:7d:cd:f1:1c:fb:5b:fe:0c:05:
88:69:5b:f8:28:c2:3c:48:bc:7c:64:e2:0e:e2:d8:
ad:9c:d8:1c:a7:4a:af:7e:cf:72:48:2a:54:51:f1:
fe:ff:58:52:28:aa:6c:55:ce:d3:d0:82:8d:77:61:
ac:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7E:E3:9D:92:91:2C:3E:25:66:96:87:ED:A7:B3:52:80:7C:D0:60
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6ad32d5d-7dd7-4fc6-93fc-3ac8d1b02136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.68.183.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:c8:27:4d:1c:33:46:63:2c:d9:c1:b3:71:42:cb:51:b0:ea:
98:a4:21:0f:8d:de:83:1a:80:8a:30:5c:a3:bf:e5:9e:f6:da:
01:a9:69:54:6e:e6:88:c3:b1:4f:86:25:6d:f6:0a:0e:bf:f9:
7d:42:ac:38:23:4f:1d:54:40:4d:7e:69:c8:7a:59:5f:b1:c0:
cb:90:92:f6:5f:a3:37:32:f5:87:78:61:d5:f1:de:7b:7d:75:
24:05:91:bc:09:59:18:a0:75:c6:90:d2:97:5e:82:e5:48:79:
b2:02:d2:da:19:05:42:97:0b:54:88:13:13:2f:cf:ca:c4:ed:
ad:9b:e3:9b:65:f2:42:10:bc:cb:77:eb:69:14:e8:49:93:92:
de:66:12:89:bc:c9:83:ec:d1:af:09:fc:ee:7d:7a:6e:52:bb:
36:ad:8f:f0:39:23:8b:a8:07:02:47:8f:d0:85:80:c7:3e:b3:
ee:1a:78:06:bb:ac:ed:c8:bf:5f:df:ad:7f:7e:f3:2d:72:76:
6b:2d:bf:bb:1e:13:11:42:93:20:7b:db:a2:c9:52:26:22:15:
fe:7b:f3:4b:a9:6c:b7:5f:1f:e2:59:a6:cd:65:6e:00:a0:2e:
1d:29:a6:72:2c:ad:f8:91:de:c7:4d:69:58:9d:a6:09:e2:1f:
eb:bb:57:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:42:28 2026 by rpki-client