
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d3e31a3-c440-4372-b5b1-2cea848fbeb0.roa
File: 5d3e31a3-c440-4372-b5b1-2cea848fbeb0.roa (raw, json)
Hash identifier: vsqnD+5TBf2bvUkp1psXJ5GxuYaDnMSALK/vlecJGto=
Subject key identifier: 29:93:91:7C:2D:91:69:EF:3E:F0:7B:8A:19:ED:7A:8B:F5:87:43:7C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 03EC383799DA7A20843C05566D484C9AC48BD17F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d3e31a3-c440-4372-b5b1-2cea848fbeb0.roa
Signing time: Wed 13 May 2026 21:04:10 +0000
ROA not before: Wed 13 May 2026 21:04:10 +0000
ROA not after: Tue 11 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f61:e0c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 18 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ec:38:37:99:da:7a:20:84:3c:05:56:6d:48:4c:9a:c4:8b:d1:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 13 21:04:10 2026 GMT
Not After : Aug 11 23:59:59 2026 GMT
Subject: serialNumber=6634d2d2d1a325324472697c7971d9d37e37266730197b09bec29cad419d9e75, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:eb:fc:c3:f7:df:36:c4:8a:10:85:76:d3:46:
18:9d:7c:f4:3f:5a:6a:06:a0:7d:44:31:c5:ce:f5:
6e:1a:3a:97:3d:28:84:fe:b8:20:da:d2:da:69:c6:
18:99:c0:e3:e6:b4:e6:0f:ab:e0:c5:f7:85:18:4e:
fd:9a:51:4c:af:c7:1e:41:79:5c:5c:80:5e:1b:13:
d4:f2:5b:04:4c:db:cd:c7:e6:31:e1:0a:ec:48:55:
12:71:97:86:92:a7:3d:4b:1b:bc:45:93:50:40:4c:
0f:57:0b:43:9f:72:c9:e0:84:c5:20:66:53:eb:3b:
98:35:75:58:70:47:34:8a:e7:7f:f4:6e:f8:51:6a:
e8:f1:1e:7e:5b:4d:50:ee:e9:cb:4f:82:ea:fc:38:
fe:1c:66:70:29:c0:50:ac:c6:14:af:61:91:1f:89:
3e:bb:d5:7e:a4:3d:fe:05:7a:a9:b3:49:bc:61:84:
24:ee:be:60:70:eb:d0:6c:a7:95:47:53:9b:4c:a2:
0b:9d:a3:28:13:00:7d:a1:82:13:0e:1b:d2:33:50:
fa:a5:ae:93:e2:91:34:54:25:1b:69:f8:fd:f8:45:
57:58:56:62:05:96:fe:95:bf:7a:ab:d9:59:88:99:
2a:de:7c:dd:21:61:d8:a6:84:b2:99:26:87:f6:d1:
4f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:93:91:7C:2D:91:69:EF:3E:F0:7B:8A:19:ED:7A:8B:F5:87:43:7C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5d3e31a3-c440-4372-b5b1-2cea848fbeb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:e0c0::/44
Signature Algorithm: sha256WithRSAEncryption
a1:69:03:5a:70:8e:9e:c3:c6:79:c8:25:3e:eb:df:19:ba:18:
a3:4a:a3:5b:f5:0f:2a:76:50:b4:ed:cd:00:91:76:45:7a:20:
c0:80:9e:a5:74:59:ad:ae:1b:2e:b9:90:c2:58:a4:93:d5:ed:
a9:a3:4f:25:e6:eb:b5:7c:2d:2c:f3:c4:a8:74:c3:c9:32:d4:
1b:ea:d3:20:83:64:5f:e1:bc:ab:c3:c5:f7:7d:60:ea:95:60:
87:94:f8:0c:6b:7d:4c:04:ce:60:8b:f0:2a:66:1a:2e:52:60:
59:37:a9:ec:5a:96:21:14:d5:ff:45:e1:eb:c4:80:53:3d:34:
f7:44:4c:56:fc:6b:4f:0b:02:e1:ac:e7:4e:f9:bb:da:a4:f8:
84:1b:47:66:04:1a:5f:c3:7b:37:ab:96:f7:a3:89:0d:2e:92:
09:00:33:db:32:30:ee:7d:82:22:3f:05:ff:3f:51:b2:d4:93:
b2:f9:ab:9d:72:eb:6b:d1:bc:3c:07:0c:b3:a8:1f:6e:58:53:
6d:94:42:c5:86:26:44:96:c3:8c:20:39:30:bf:c0:de:4c:93:
44:60:aa:e2:12:03:c1:c3:6b:9f:3e:86:48:70:48:a7:c9:48:
ca:5a:11:1e:5e:d0:77:01:78:c6:02:e7:9d:e7:b6:31:6f:a0:
cb:47:9c:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 17 05:02:26 2026 by rpki-client