
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03c1b076-3e5c-4a1b-998e-c8a52f062188.roa
File: 03c1b076-3e5c-4a1b-998e-c8a52f062188.roa (raw, json)
Hash identifier: Z//wbiCtCiRsYMPqWfZGw7MNWEvlQdYz7L7kS7Fbw7Q=
Subject key identifier: AA:2A:7D:B5:9C:C7:0E:69:1C:01:43:74:FC:85:14:01:CA:64:3C:31
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6286F2122D071C5D84BBEF6A2544DEAF7DEF6680
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03c1b076-3e5c-4a1b-998e-c8a52f062188.roa
Signing time: Wed 18 Feb 2026 21:36:53 +0000
ROA not before: Wed 18 Feb 2026 21:36:53 +0000
ROA not after: Tue 19 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 32.192.0.0/12 maxlen: 12
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:86:f2:12:2d:07:1c:5d:84:bb:ef:6a:25:44:de:af:7d:ef:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 18 21:36:53 2026 GMT
Not After : May 19 23:59:59 2026 GMT
Subject: serialNumber=821fdd60eca84b3cae4cb534ad2635bf17d6e3855b5240d8596d9a7931efea43, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:44:cf:0c:8c:b9:ab:bf:b8:8b:25:57:5c:48:
57:07:a4:b9:d3:53:ba:2b:f1:b8:d4:68:66:e6:0a:
46:4a:1a:36:85:79:a7:eb:b5:7f:a6:c0:32:db:09:
72:9e:98:32:80:90:12:df:40:0b:e7:f8:c2:ac:a3:
27:3f:04:e4:7e:49:94:5a:c8:38:9e:0a:55:45:9d:
ce:fd:b4:09:9f:50:14:4b:61:36:7e:c0:1a:21:9e:
0f:f5:30:d9:d5:40:a3:22:c0:33:b8:d3:62:5e:58:
97:46:45:62:48:2d:49:48:c7:03:23:78:a7:84:52:
26:11:40:5f:64:4e:88:90:9b:8d:fe:0c:bc:5f:a9:
39:3d:bc:a6:3c:ef:e6:60:ab:d8:2f:64:eb:51:d4:
45:4e:5d:f3:62:83:2a:eb:d0:48:29:45:9c:e0:d7:
3f:15:48:ea:15:52:fe:d5:d4:07:6a:c8:d1:0b:08:
f9:41:95:ef:49:92:db:2b:e4:6f:ad:03:c9:7f:3d:
9a:8e:bb:b9:df:1e:e9:84:c3:2f:d5:49:49:13:fb:
ed:34:4c:ef:ca:91:fe:da:7f:c0:9c:ab:19:84:50:
c6:d5:db:c4:91:47:39:c4:27:0c:90:36:56:21:ac:
fd:b6:33:48:04:9c:4e:d4:79:91:12:3b:a2:f5:27:
0b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2A:7D:B5:9C:C7:0E:69:1C:01:43:74:FC:85:14:01:CA:64:3C:31
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/03c1b076-3e5c-4a1b-998e-c8a52f062188.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
32.192.0.0/12
Signature Algorithm: sha256WithRSAEncryption
95:59:88:c9:8b:7a:8a:73:a3:32:96:b9:ac:1e:f9:ed:74:9c:
78:45:20:ed:25:c4:7e:42:bf:50:57:4e:ac:3d:bc:b7:68:47:
ec:c5:cf:8e:ba:20:eb:9a:47:41:ad:7c:e4:da:8f:47:40:04:
e2:70:d8:0f:95:bd:f7:49:97:ef:c5:c4:e7:a0:10:09:c1:b1:
07:49:81:05:2a:dc:81:f9:0c:34:1d:7e:cc:dd:4c:e1:e7:04:
08:a5:1d:c7:36:ce:b7:e3:f5:bf:32:31:74:f4:cc:c3:3f:15:
4a:27:e0:21:70:4f:8d:cc:71:f5:6d:ae:cf:52:49:1f:a8:2b:
9a:33:29:60:5a:da:39:71:c1:da:3f:c4:f2:70:9e:e7:5f:b5:
14:8a:66:8d:cc:80:95:f6:5f:dd:c3:6c:8d:25:ba:fa:f5:a9:
87:e4:b6:68:87:a6:d2:c4:38:8f:bd:e5:8d:9e:7e:71:04:7e:
06:5c:fe:b5:48:28:08:ec:16:62:b6:c8:2e:d7:4f:0c:00:0c:
b9:6b:82:7b:6c:3b:b1:b5:1b:3b:2e:a5:6d:ab:e1:92:44:85:
da:d0:c6:a5:31:b8:08:1a:01:94:0d:95:3f:03:5e:19:17:f2:
3d:2b:4d:b6:de:14:19:56:95:e9:5b:96:dd:fc:0c:3d:4e:f2:
09:bd:66:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:55:32 2026 by rpki-client