
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e472cb3-ec74-4631-bcae-1473aa47a379.roa
File: 1e472cb3-ec74-4631-bcae-1473aa47a379.roa (raw, json)
Hash identifier: X9h1jFbF2IPJ9f9bJ/GH+LclnNdHyK/+KbotRrWfuLc=
Subject key identifier: 5A:4F:0A:78:01:AC:F2:E9:85:40:B6:FE:03:A5:91:C7:0D:81:17:2D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 01F374FBC011B7286E4FA015F940C637D829B540
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e472cb3-ec74-4631-bcae-1473aa47a379.roa
Signing time: Sat 24 Oct 2026 00:10:55 +0000
ROA not before: Sat 24 Oct 2026 00:10:55 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff3:8040::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f3:74:fb:c0:11:b7:28:6e:4f:a0:15:f9:40:c6:37:d8:29:b5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 24 00:10:55 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=011cc5bf6c20e0aeed833e9bb6b3eb2c5b52b3a991a5c2f143bab939f192e69f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:0b:64:fe:bd:15:8f:8d:0e:0d:3d:06:c7:
fd:1c:aa:c6:5d:36:56:a6:d1:80:f1:c8:22:9e:66:
95:2c:4f:a4:41:89:32:62:61:6c:0d:89:86:9a:37:
5c:e8:89:51:87:9d:41:71:06:e9:13:44:61:cb:95:
70:b0:34:7a:9b:4f:44:d6:eb:4f:c0:d6:a9:67:7b:
90:45:1e:1b:6a:bb:39:48:ee:be:b1:ea:b4:a3:d4:
95:5b:5e:27:1a:20:1a:dc:d7:31:5d:5b:84:9d:5d:
bb:1e:85:76:55:c9:33:e9:f1:ae:e6:72:a8:08:f8:
fb:dd:e6:15:60:33:ae:b5:dd:7a:33:f7:44:8a:d9:
05:5c:23:f5:a5:1e:9a:62:57:63:e8:8c:cc:99:72:
0e:ef:d5:07:26:42:2f:89:dc:a1:6a:90:1d:27:e0:
c7:d9:5b:2e:2e:da:04:c2:fc:b9:d5:36:c4:2b:d6:
38:d6:32:99:97:96:bd:6a:9b:39:04:98:ae:12:c8:
a6:92:2c:79:d6:09:c4:9a:13:63:fd:4e:7d:94:bf:
de:e6:23:13:0f:e2:49:38:af:67:ed:ef:71:a1:d9:
83:25:8e:ff:ad:d7:ba:58:f5:f9:14:5e:1c:56:21:
fe:5f:be:03:dd:aa:b6:bc:b2:95:13:1e:42:0d:2c:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4F:0A:78:01:AC:F2:E9:85:40:B6:FE:03:A5:91:C7:0D:81:17:2D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e472cb3-ec74-4631-bcae-1473aa47a379.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:8040::/46
Signature Algorithm: sha256WithRSAEncryption
3e:e7:34:e2:0d:6d:69:23:e2:4c:8a:3c:d3:83:bb:d1:13:be:
b9:9e:f3:fe:ce:fc:d9:df:97:bd:69:41:e3:6e:b5:21:b8:d6:
a2:7e:13:4e:5c:4e:59:a6:a7:2e:dd:7f:50:f3:be:ee:f5:55:
3d:dc:ff:f5:f3:3c:24:6a:72:5f:b3:0b:c5:da:d9:8b:97:d5:
2c:cc:25:bf:6b:c4:76:5e:63:e5:97:d8:57:b1:14:0b:f8:f2:
5d:d3:94:4b:3d:3b:03:4a:f1:41:8e:cb:bf:5b:18:77:8e:b0:
10:8b:04:29:98:35:a5:8c:6c:77:27:25:78:cc:83:f2:07:32:
ea:2e:e3:21:2b:2d:71:4f:31:88:30:85:3c:29:5f:a5:62:93:
0d:ef:27:52:a6:2c:72:a9:7c:e0:98:61:b2:1f:22:32:b1:2a:
01:92:21:e6:ea:cf:0a:4a:1c:63:96:38:87:22:07:60:39:bc:
27:89:92:e2:43:b0:f0:56:0d:72:cd:cc:06:1e:1c:a7:ff:67:
73:17:f0:f9:5d:a0:6f:7f:d8:e8:a2:2c:80:17:f7:0d:df:02:
0d:76:b8:33:39:03:2a:98:e6:ff:5e:28:4a:8f:19:f5:43:b5:
0b:4d:12:8e:ee:ea:43:45:58:f4:65:be:39:ed:f6:2a:4d:72:
31:16:24:63
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 3 01:27:10 2026 by rpki-client