
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaa3394f-58c7-4d02-b38c-01dcf9725a1d.roa
File: eaa3394f-58c7-4d02-b38c-01dcf9725a1d.roa (raw, json)
Hash identifier: gaOG17zV7dEOjpg3KvmxenOzpSI81I9tqA1gJDrGF94=
Subject key identifier: AA:34:B6:89:F4:71:69:23:0F:9E:DC:F3:EF:5F:14:53:30:EC:E8:05
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2C9D89D1ECEC1EA989381C510E57E63274D6DDB3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaa3394f-58c7-4d02-b38c-01dcf9725a1d.roa
Signing time: Wed 18 Feb 2026 21:36:50 +0000
ROA not before: Wed 18 Feb 2026 21:36:50 +0000
ROA not after: Tue 19 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 32.192.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:9d:89:d1:ec:ec:1e:a9:89:38:1c:51:0e:57:e6:32:74:d6:dd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 18 21:36:50 2026 GMT
Not After : May 19 23:59:59 2026 GMT
Subject: serialNumber=fccea7d2dc1ea51d1ef3a47116ea2fbc59d83e3be6c854167425fb959b95b806, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:ca:f6:b8:17:4f:70:f0:bb:f5:cf:1d:56:
c7:d1:d5:91:ab:14:aa:4b:e2:c6:06:44:b6:fd:f2:
48:d8:1e:5f:34:7a:1a:12:16:ff:c9:f7:7f:d7:99:
62:34:24:b9:43:ea:c4:0b:17:9b:18:0b:9f:27:fa:
6b:51:b9:ef:66:fe:e3:9a:3c:61:18:23:ce:9d:89:
61:39:99:26:ee:8d:d7:34:57:75:90:1f:62:d0:99:
41:d8:c2:70:1a:e3:e6:95:f5:9e:cd:52:3f:a3:4f:
fd:25:6d:43:4a:18:f3:ea:6b:f2:e0:ec:01:a3:34:
e6:7c:b8:f6:88:ad:f3:80:bb:32:30:d1:4e:b4:65:
cb:4a:07:9c:1f:05:f7:aa:ce:ac:3e:47:55:3c:b7:
7a:95:53:b6:dd:58:bc:5d:61:5d:58:b5:6d:f3:b7:
fd:8b:4e:39:c3:2c:7c:df:7a:a7:f8:4f:c3:3d:4e:
5d:2d:da:6a:b6:a0:8b:d4:94:c5:64:90:ec:3e:00:
a6:0e:b4:78:91:6a:1a:02:1d:a8:0d:fa:6b:ca:91:
dd:c3:eb:e7:9e:4b:dd:51:1b:f5:fe:73:7f:cf:78:
52:35:02:ce:27:f3:c8:6f:84:d4:18:01:de:d9:d9:
8d:a7:c2:f2:18:b2:aa:5b:ef:78:c6:14:61:88:cf:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:34:B6:89:F4:71:69:23:0F:9E:DC:F3:EF:5F:14:53:30:EC:E8:05
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaa3394f-58c7-4d02-b38c-01dcf9725a1d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
32.192.0.0/14
Signature Algorithm: sha256WithRSAEncryption
56:30:ea:00:26:d7:27:d5:ad:cd:f4:3f:d7:66:1e:fd:e2:92:
45:5d:34:ca:51:83:b0:59:1c:d2:7b:a6:47:fc:cf:33:81:5c:
db:39:4a:97:cd:19:70:52:fb:83:8b:f1:e1:9c:37:30:2f:b1:
6c:60:fb:b7:55:38:34:f4:a5:73:a4:a7:ea:5e:de:36:52:4c:
55:ea:95:ae:da:d8:b7:40:d5:7c:c4:e6:f5:ee:9f:ba:dd:65:
28:2b:5a:6a:84:fd:21:6b:ea:9f:3d:38:df:ec:4d:66:be:a0:
3d:b7:d8:fb:d3:69:e6:2a:ea:20:f7:a8:10:ab:bf:d4:99:95:
97:c0:d8:18:97:aa:cd:7c:83:03:f4:5c:73:98:a0:c0:58:ac:
07:33:c0:14:f4:c4:14:17:88:eb:27:e2:4c:c9:73:7b:ff:22:
ed:2a:4d:a9:ce:92:84:53:c7:7b:0c:aa:25:04:f5:b1:14:f9:
3a:42:71:24:f7:87:84:95:68:18:25:7d:5c:2c:66:dd:38:62:
f7:8c:18:df:0e:7b:b5:56:91:8d:7d:c8:d2:bf:8b:5e:9a:31:
d8:2f:67:5e:fd:ca:8f:b2:59:c4:21:1b:13:6c:96:66:2f:2c:
10:9d:ba:02:dd:13:aa:69:28:7c:41:3b:7b:bb:3e:de:5a:8d:
02:08:4a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:55:33 2026 by rpki-client