
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cffd447-f629-4f58-a3a0-78aeb42d2b74.roa
File: 8cffd447-f629-4f58-a3a0-78aeb42d2b74.roa (raw, json)
Hash identifier: WLQmtZTsyajU7h1HoWT1A+teo2k5Wis0Mct0EFkrOhM=
Subject key identifier: B7:A7:B3:6F:E2:4C:BD:10:11:9F:FA:03:10:AB:DC:E8:44:C6:35:AC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 73EF9B1EDB63E6D0FB2915DB2848010CD0CB90D8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cffd447-f629-4f58-a3a0-78aeb42d2b74.roa
Signing time: Wed 13 May 2026 21:04:18 +0000
ROA not before: Wed 13 May 2026 21:04:18 +0000
ROA not after: Tue 11 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f61:5000::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 18 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ef:9b:1e:db:63:e6:d0:fb:29:15:db:28:48:01:0c:d0:cb:90:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 13 21:04:18 2026 GMT
Not After : Aug 11 23:59:59 2026 GMT
Subject: serialNumber=ef2802b45bb21b7d34633579693d3dd8804582937dfe12146a2db7b88979ed93, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:88:94:77:88:6f:fc:e9:da:b8:eb:ff:44:
8c:cc:7a:a9:54:92:7a:4b:6d:45:13:53:e5:85:ab:
fc:db:6a:17:7d:52:8d:93:a6:29:81:9d:f6:02:f0:
bb:34:27:27:b8:85:50:bd:49:ab:39:1a:2c:61:52:
54:e0:c1:98:2a:59:18:12:38:e2:4f:5d:eb:b6:d0:
38:ba:0e:fe:91:c3:d8:ff:fd:f8:90:58:ba:ec:8e:
90:9a:c1:76:18:cb:2a:c3:2d:8e:8f:2c:ab:e3:92:
04:30:ca:36:22:54:0f:89:dd:36:d3:e0:35:58:72:
20:1e:e7:51:0d:99:dd:f6:33:22:12:00:73:a3:17:
6b:49:d6:99:9e:6b:38:7a:3b:40:70:e1:2e:95:04:
be:32:d8:13:12:69:6b:bc:60:ea:ed:66:98:6b:15:
28:71:fd:ae:f3:ec:a0:67:15:07:6c:38:e0:bf:aa:
35:a7:71:36:4c:41:4f:2d:45:40:55:b7:2f:35:3a:
0c:f4:42:fd:e1:ce:d2:0b:1b:a5:75:c7:bb:d9:df:
28:a9:1f:8d:e0:f1:21:6d:45:3c:de:fe:45:b8:3b:
7c:cb:15:fe:ac:58:56:8b:ab:8e:03:11:7f:b4:68:
23:b3:f2:73:6e:29:71:12:86:31:40:f1:2d:25:3f:
8c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A7:B3:6F:E2:4C:BD:10:11:9F:FA:03:10:AB:DC:E8:44:C6:35:AC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cffd447-f629-4f58-a3a0-78aeb42d2b74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:5000::/46
Signature Algorithm: sha256WithRSAEncryption
5b:08:9e:90:8a:a6:c0:07:04:fc:eb:b3:39:a3:01:1d:88:5a:
d1:4e:7d:59:21:a3:cf:15:66:37:f0:58:c5:07:2c:fd:68:87:
ce:36:94:08:2b:ce:78:05:d6:97:0a:4d:b0:58:12:3d:e7:10:
33:4e:65:6f:c6:19:05:7a:06:81:50:8f:79:a5:48:84:ef:62:
d6:52:50:77:39:04:b8:63:6e:c5:ff:ee:ac:8d:a2:05:71:96:
21:04:a2:ad:27:4f:cb:a0:b2:2f:72:41:92:b5:07:d0:e2:b0:
c2:6a:20:92:3d:e3:17:5f:83:ad:82:c1:f3:f5:fc:0c:bf:9d:
3a:d2:2f:e6:40:20:c0:46:60:92:fa:4b:87:02:aa:28:5d:6d:
b5:73:d4:7f:74:e3:53:c0:62:9d:0a:c1:1f:b0:21:5e:56:ad:
05:34:94:a9:c5:0b:45:dc:e5:b6:f5:69:39:46:91:a9:75:dc:
ec:82:ee:4a:9d:1e:63:57:2b:11:c0:83:c4:85:05:cb:50:4f:
dc:94:07:41:bd:20:f1:bd:42:e1:51:3b:7d:5a:fd:76:ed:dc:
0e:e8:03:d1:27:77:b7:cb:52:62:c0:63:27:10:66:3e:b9:b2:
44:e2:f6:70:27:13:c3:6b:7d:9d:4b:0d:84:c0:77:60:a7:9b:
f8:55:5f:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 17 05:02:32 2026 by rpki-client