
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/140a8b1c-7c91-4264-9029-072fd4c2db01.roa
File: 140a8b1c-7c91-4264-9029-072fd4c2db01.roa (raw, json)
Hash identifier: e5gLtgoXKD6M/iRA3ZaA+pbyrd5XYtZfMDZgtRL7s94=
Subject key identifier: 22:95:67:6F:36:DC:F4:FF:17:71:28:FD:02:D4:79:95:A4:8F:DA:0D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0E7467472441A8D88542D9321BD3D68BF4310000
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/140a8b1c-7c91-4264-9029-072fd4c2db01.roa
Signing time: Wed 09 Sep 2026 16:10:05 +0000
ROA not before: Wed 09 Sep 2026 16:10:05 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff6:e200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:74:67:47:24:41:a8:d8:85:42:d9:32:1b:d3:d6:8b:f4:31:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 9 16:10:05 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=a34aa53e5ca4103833ec2bb49f5ee5f9910c069b1707c18d8e4f3fa3abe961db, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:01:1c:dd:34:c2:f7:55:cc:22:99:52:7b:8d:
ee:27:22:b0:4e:1c:40:bd:42:3d:43:16:1c:ef:4a:
cf:76:27:49:0d:f3:b3:b2:5d:46:29:cb:10:63:39:
49:ad:14:1d:ed:98:44:01:61:b1:69:7f:9e:02:04:
46:76:8e:e9:84:7c:45:d3:46:1f:87:35:da:09:b0:
d6:53:ba:99:8b:1b:2c:7d:6f:63:5b:0c:0c:37:55:
d6:17:fc:c1:26:9a:b5:0e:76:85:65:14:e8:d8:74:
78:57:15:ae:d1:79:32:94:09:a6:1a:55:6a:db:ff:
60:83:48:66:c3:b5:67:64:e7:f5:54:a8:00:ff:05:
d6:c5:7a:23:19:af:0c:58:82:aa:56:f0:1d:d6:59:
6f:94:7b:b1:54:7c:24:6d:59:99:35:2b:62:0a:4b:
ec:ad:19:48:c4:62:a7:44:42:eb:be:a4:1a:68:76:
11:d2:76:b3:1d:fc:8e:c9:9c:92:10:9d:85:2c:d4:
f9:d9:12:3e:0f:ea:a9:e3:ce:ee:40:ca:c1:a8:7e:
98:c4:11:fb:32:e0:a3:95:97:17:36:49:97:7c:16:
d3:cf:87:9a:c9:14:95:e1:81:02:b4:15:ca:7d:6e:
58:af:cf:83:27:80:b2:46:69:d0:6c:16:95:aa:44:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:95:67:6F:36:DC:F4:FF:17:71:28:FD:02:D4:79:95:A4:8F:DA:0D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/140a8b1c-7c91-4264-9029-072fd4c2db01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff6:e200::/40
Signature Algorithm: sha256WithRSAEncryption
7b:9d:e6:9e:fd:9a:c9:79:01:bd:34:d9:d8:f0:2f:10:2c:a7:
f7:ed:ba:aa:3d:e4:26:42:10:4f:1c:c0:77:96:e5:df:95:d1:
23:b1:bb:9d:39:bd:36:e6:84:47:a5:92:d9:ab:16:00:91:fe:
ad:92:62:34:d1:bb:ff:71:4c:0d:a6:0d:78:fd:31:6d:a5:f2:
8d:df:27:98:76:30:ee:ae:d8:65:94:bf:eb:3c:ad:f5:59:03:
f6:bf:59:18:13:44:b1:a0:a2:8a:a1:c1:ee:a8:0b:b2:58:1d:
bc:58:54:98:d5:47:c6:ef:0a:6e:0c:88:df:f4:d3:fb:45:05:
55:89:b1:d3:e4:8d:84:1f:af:f9:1f:65:6a:ed:e2:00:6a:47:
5d:38:61:70:f0:5e:b0:ad:50:7c:25:11:08:9a:31:cf:30:63:
cf:17:8e:86:83:43:34:2d:4c:79:81:33:dd:9f:46:9a:9d:ea:
33:9b:b7:e1:13:56:dc:e9:8a:d1:45:fe:f1:6c:aa:c0:5d:b5:
7a:70:47:6c:36:98:09:a4:1f:21:7a:a3:f5:7f:a0:60:88:7a:
f1:74:16:c5:3b:98:e0:0f:cc:82:5c:38:05:46:e9:d9:b6:62:
63:47:31:70:69:ec:4d:33:65:4b:ab:3d:26:4f:51:8b:54:a6:
8c:70:ef:26
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:43:21 2026 by rpki-client