
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/039a5967-2b5f-4316-9dd1-35af5965b5a7.roa
File: 039a5967-2b5f-4316-9dd1-35af5965b5a7.roa (raw, json)
Hash identifier: PnL3y4Z9azk+aJVRTxnp5KupmDZPBZbUkeL8ekJmndo=
Subject key identifier: 48:CA:73:CF:4B:EF:B5:CB:B4:CA:69:40:1F:C5:10:3F:63:F7:15:19
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2641C34AA7E68BC4F8E7A5F75C1F01E915FC7580
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/039a5967-2b5f-4316-9dd1-35af5965b5a7.roa
Signing time: Sun 11 Oct 2026 01:06:57 +0000
ROA not before: Sun 11 Oct 2026 01:06:57 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 192.157.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:41:c3:4a:a7:e6:8b:c4:f8:e7:a5:f7:5c:1f:01:e9:15:fc:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 01:06:57 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=8bc70f12b8f7e216ac9c3b34d88168e0efdf5eb818e5d92d07de2defca0645e2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:9f:81:54:66:7e:b5:a9:2b:10:ea:b7:4d:
f7:70:a7:72:2b:f6:76:5a:ea:2d:81:34:9a:da:8e:
33:99:41:6c:72:dd:85:69:a7:7e:21:7a:8d:dd:16:
b2:22:f2:fc:f0:f5:51:c4:4e:89:94:d3:58:bd:f6:
ad:05:d5:ac:57:c0:fb:7b:c7:3f:96:82:b0:57:ea:
69:9f:f0:cc:3a:26:f6:1f:86:c3:41:11:24:49:04:
ee:6e:fa:c4:f5:f9:42:cb:dd:7e:57:c9:0f:82:83:
eb:f2:0b:af:a3:c8:b2:af:96:a0:ca:3d:25:2b:55:
0f:de:fa:8b:34:79:49:84:45:8a:0e:19:ff:6f:a5:
43:58:9f:d3:6b:38:7b:31:71:fe:2f:0f:91:0f:69:
4c:4e:33:84:0b:01:92:e9:92:bd:d6:60:2c:c9:54:
00:da:aa:f5:5a:44:fa:b9:32:f1:32:cd:07:6c:05:
cd:41:c0:da:ae:4b:7e:d3:a4:31:8f:c1:db:b8:ec:
36:fb:0a:4f:56:24:13:b0:6f:2a:a4:1d:2b:37:eb:
dc:05:66:14:87:ec:72:4e:d7:3b:92:44:44:71:89:
db:2d:fb:95:cd:f9:87:eb:2c:a7:3a:0e:32:d4:57:
ef:35:f8:a8:78:dc:c4:57:53:57:13:7a:ca:66:f3:
ff:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:CA:73:CF:4B:EF:B5:CB:B4:CA:69:40:1F:C5:10:3F:63:F7:15:19
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/039a5967-2b5f-4316-9dd1-35af5965b5a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.157.32.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:b7:50:81:cc:22:85:de:40:41:55:87:93:61:98:92:2f:5d:
72:d2:be:d8:71:4c:eb:68:51:ec:31:fb:f7:61:c5:b0:87:c6:
03:ef:61:63:1c:3e:4e:eb:76:2f:fc:41:29:2f:b5:d2:e3:e3:
51:a6:80:97:03:fa:0c:16:3f:20:11:1a:be:f4:56:e2:a0:a1:
f3:95:39:b1:4f:23:ba:55:b0:13:33:86:8e:56:f7:cd:e6:69:
62:e0:b6:fc:0d:55:f0:d0:ba:75:43:97:6f:be:77:b8:f8:d6:
c5:44:d1:64:33:77:db:b6:c7:7b:7d:bf:ac:8c:30:86:4b:96:
fa:51:0c:b8:58:27:d5:36:3a:62:23:57:01:8d:54:be:f5:2e:
45:8a:99:83:1d:6c:16:cd:1a:0b:05:d6:fe:cc:cf:5b:b0:87:
26:f1:80:fe:95:c7:06:42:ee:95:74:a8:fd:f4:72:8f:3a:f4:
8a:e8:54:df:45:0f:24:01:cd:c0:e6:e8:d9:af:cf:f4:44:a3:
cd:d4:b2:c1:3a:ee:8d:b0:3e:4d:13:d5:f0:a1:7e:7b:51:a9:
63:9d:87:48:c8:4e:45:2b:25:ba:e0:39:9c:97:af:35:48:28:
cc:a9:c1:46:7c:f3:41:1c:0b:29:ef:34:99:d7:36:b0:05:6f:
64:9a:27:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:39:14 2026 by rpki-client