
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ce5aa3d-8ebe-4ba4-b174-db51e75f03e1.roa
File: 1ce5aa3d-8ebe-4ba4-b174-db51e75f03e1.roa (raw, json)
Hash identifier: /ETXliwMElPtrw+X7wEqqUqOB5QsedfxqelM6FGabl4=
Subject key identifier: 0D:21:7D:32:DF:EC:2F:99:4D:8B:69:68:92:BE:D5:FD:13:1D:B8:CC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 551D76A1C2F0C6FEE85421AB9830702E5944D0CE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ce5aa3d-8ebe-4ba4-b174-db51e75f03e1.roa
Signing time: Sun 04 Oct 2026 00:10:03 +0000
ROA not before: Sun 04 Oct 2026 00:10:03 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 143.168.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:1d:76:a1:c2:f0:c6:fe:e8:54:21:ab:98:30:70:2e:59:44:d0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 4 00:10:03 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=f5170d0fab916419c2f155ee6003c85832315223f303cb308b7207b3146e9d74, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:aa:ab:ce:c7:f1:cc:23:6b:3e:64:b4:5a:
70:ef:e5:19:db:ed:9f:0c:07:47:ac:4b:a4:bc:da:
06:ee:16:41:71:ee:8d:8d:4b:b0:60:c8:f3:b1:2b:
e5:96:37:1e:70:bb:8d:db:93:1d:7b:b8:8e:6e:32:
2b:f5:bc:ba:23:f1:df:2e:fd:dc:23:36:fe:5c:34:
cf:14:91:97:82:a4:7d:cd:b6:c8:b6:dd:48:03:ae:
7c:6c:e4:a7:c8:b6:7a:c7:90:66:e6:c9:44:b1:75:
75:1a:07:72:52:13:c2:74:ba:12:88:fc:c5:c9:ff:
4b:9e:7a:e7:63:55:26:ea:57:ab:d0:d6:bb:47:3e:
82:d1:bc:9f:ed:40:a9:6c:b4:f8:dc:04:75:e6:2c:
30:97:4d:d7:86:c4:9e:91:d9:5b:2d:4e:9f:7e:e7:
44:25:57:c8:20:4f:09:9e:6c:e1:3d:26:97:1b:ee:
34:8f:01:d0:01:71:ea:d4:d9:e6:59:81:d5:37:26:
35:0e:fa:ac:ca:75:42:19:97:d7:cf:c9:d2:cd:2b:
08:30:4e:66:cd:71:7f:c5:b5:95:02:4f:2b:28:3a:
95:ae:1f:27:54:56:1a:ef:92:df:89:9f:d3:c1:b9:
c6:b9:24:29:74:dc:3d:49:0c:96:56:7e:7b:a6:07:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:21:7D:32:DF:EC:2F:99:4D:8B:69:68:92:BE:D5:FD:13:1D:B8:CC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ce5aa3d-8ebe-4ba4-b174-db51e75f03e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.168.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:86:2d:4c:d3:01:a2:94:4f:e9:bb:e1:b8:71:63:24:26:40:
c2:62:5c:de:78:a7:eb:1b:38:9e:88:93:e1:02:16:d7:56:e5:
38:59:79:c5:f9:66:1d:04:d0:13:c8:cc:26:74:63:d8:11:62:
71:50:ff:a1:60:64:35:79:03:b5:fb:0c:7e:40:23:ce:f7:38:
74:25:cd:c1:1c:4d:9b:ff:30:58:55:0d:bb:02:3c:35:97:9f:
5c:02:0f:95:66:81:73:5f:cd:5f:77:d4:d1:93:4b:19:3b:ac:
f4:cd:2a:7b:d5:e1:c8:68:2a:c8:8d:75:a1:a4:37:ba:db:70:
4f:00:d2:b3:f2:1f:ab:d4:af:65:af:90:cf:f3:0f:eb:63:25:
7c:44:b1:46:e5:8d:51:51:a6:0b:43:8c:71:bc:42:20:6e:c8:
4d:c9:05:2b:87:14:2f:93:93:16:d8:c9:3b:73:ed:c6:c8:f3:
28:2f:83:1a:c9:50:f9:b2:6d:54:24:57:49:7e:66:98:be:ec:
e9:ef:44:36:61:b9:71:fc:da:a3:70:ef:c1:32:8d:65:ae:d7:
a6:df:07:f5:0b:46:0b:ae:19:5e:77:61:0c:99:69:fa:d7:10:
8a:64:d9:2e:ea:bf:97:a7:65:5d:a6:7b:49:22:1b:82:dd:7b:
a9:5b:04:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 02:41:42 2026 by rpki-client