
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/603d26d7-c121-42e1-817f-ef0a806e3d69.roa
File: 603d26d7-c121-42e1-817f-ef0a806e3d69.roa (raw, json)
Hash identifier: O3oWz2Dg8ngRlmaCMSTI2yD7nSyzvj18K6trB6UOqM4=
Subject key identifier: 70:12:F7:E0:F7:2E:D9:2C:57:03:0D:E1:CE:60:A1:F0:54:9C:E7:73
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E95C01C3E73D59FA0F4DE5A6FB1C40B07E25945
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/603d26d7-c121-42e1-817f-ef0a806e3d69.roa
Signing time: Mon 03 Aug 2026 02:20:03 +0000
ROA not before: Mon 03 Aug 2026 02:20:03 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 185.212.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:95:c0:1c:3e:73:d5:9f:a0:f4:de:5a:6f:b1:c4:0b:07:e2:59:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 02:20:03 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=a5f2d8c989a0fa6935b82fa05c1b28f6e87df4265e5799d8224f2b4981548f48, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:1c:ec:7a:81:f7:fa:17:2b:bb:0d:5b:b5:
6c:93:4f:48:70:4f:28:99:c4:8e:0f:c0:2e:52:5f:
87:be:4d:28:eb:8f:8e:d5:af:f5:e1:b7:65:07:20:
aa:7e:7d:3b:72:89:41:7f:e8:e1:b0:70:ed:7f:18:
79:01:e6:e3:83:6e:25:47:56:8c:4a:48:dc:2b:12:
5a:48:d6:f3:16:7e:41:89:7f:76:90:e4:59:89:e9:
24:b7:41:33:99:c9:ca:2a:0a:9d:38:1c:2f:0e:e7:
b3:20:95:0d:74:7b:39:c3:0d:a6:26:e0:c2:ee:08:
58:e7:b8:d1:7f:8e:8c:9b:f2:ad:98:61:de:3c:08:
5c:f9:81:7d:28:ac:52:40:88:d2:ae:5e:4a:c7:c0:
62:bf:69:54:72:06:3c:05:b3:a5:2e:84:03:7e:cd:
53:bf:a5:be:05:97:2c:2c:8d:05:17:0b:4e:9c:bb:
90:9c:56:3f:84:95:44:db:72:7a:76:1b:4d:e3:3b:
6e:57:c0:80:f4:cb:de:ce:cd:81:81:e5:e4:d5:0f:
99:5f:99:f0:09:bb:54:73:c1:bc:8b:cd:af:d9:72:
f6:77:1f:55:85:db:e0:25:fc:94:ec:bc:4c:6e:08:
e0:08:92:ca:f8:e3:52:31:83:5f:02:b4:6c:24:5f:
33:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:12:F7:E0:F7:2E:D9:2C:57:03:0D:E1:CE:60:A1:F0:54:9C:E7:73
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/603d26d7-c121-42e1-817f-ef0a806e3d69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.200.0/22
Signature Algorithm: sha256WithRSAEncryption
16:86:df:3b:14:fe:cc:e1:b8:12:e7:61:32:bb:ca:79:36:fa:
11:92:b6:ca:fa:ed:bb:f2:8b:84:35:52:b7:f3:ba:f7:a6:08:
12:a3:e8:13:94:e6:31:20:42:77:3c:2c:a9:60:e1:da:11:7b:
5c:af:89:c3:c1:3f:80:c6:8c:63:2e:a3:12:63:f0:eb:d8:ed:
a4:c3:d8:04:3c:0b:b6:93:41:e0:8c:c9:4c:f8:6a:96:a9:9c:
e4:9f:34:60:df:9d:ae:dd:cf:07:cc:7a:81:33:4e:21:40:ee:
bb:0c:dc:99:5b:7c:9d:34:0b:60:18:d4:06:68:3d:98:ab:0c:
e7:4f:6c:55:6b:8f:0d:2b:de:0e:3b:8d:42:7e:68:96:bf:ac:
25:a5:42:ee:8c:43:14:6a:92:a8:f2:1c:8e:c5:77:1d:dc:9d:
c6:6f:fd:3b:de:41:17:a7:2b:2c:ed:ae:f9:36:49:7f:e7:5d:
7d:cb:b5:ed:63:d4:4b:cc:ce:8b:0c:a6:79:8b:19:dc:19:1d:
02:ac:e5:8f:45:bc:dd:1d:9d:fd:9a:55:d9:15:e6:12:6c:18:
d0:7c:ba:b0:83:1c:50:19:01:92:fd:05:47:d9:88:15:4b:34:
24:5a:86:04:9a:a8:69:e1:65:14:a8:5f:d5:5d:29:0c:79:e2:
b2:8e:07:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 06:46:11 2026 by rpki-client