
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/217379e1-3f0b-43c9-b963-bb79bf38c07b.roa
File: 217379e1-3f0b-43c9-b963-bb79bf38c07b.roa (raw, json)
Hash identifier: mmKwSMmPGt15WvPMB3VhhE7LPY238EdRoqGhY6O9RgU=
Subject key identifier: 7E:CF:F7:8D:A6:47:24:B7:90:62:57:33:82:21:F7:98:B7:E0:66:D8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6CE45A021DBCB83268EACCECD1F42EA64F204034
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/217379e1-3f0b-43c9-b963-bb79bf38c07b.roa
Signing time: Sat 24 Oct 2026 00:30:40 +0000
ROA not before: Sat 24 Oct 2026 00:30:40 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 16.125.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e4:5a:02:1d:bc:b8:32:68:ea:cc:ec:d1:f4:2e:a6:4f:20:40:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 24 00:30:40 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=3e672b5b3fcbc9e6f4e25e8794033fb622c38e6c075c45a117091015a658cea3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:72:68:e3:a9:05:4e:0c:18:b4:38:ce:5e:07:
9d:89:ac:22:d2:35:6e:89:da:d9:f3:46:36:17:fd:
1e:18:80:fd:7d:35:93:4c:37:af:55:64:23:26:4e:
ad:b7:56:d9:04:11:fc:78:3e:5a:c8:cd:a3:89:51:
89:99:ea:5a:a6:06:af:6c:93:c9:41:46:44:60:3a:
b2:27:30:76:15:51:06:fa:d7:e3:77:57:b4:dd:74:
97:ba:a4:6d:0d:21:c3:a3:70:19:4e:ca:94:6f:2c:
d5:ea:0b:7f:13:5a:e1:65:ba:d9:c2:0f:da:04:11:
36:70:3e:7c:9f:e0:47:e4:27:19:23:3f:c7:9d:bb:
e8:d6:3c:e0:51:7c:f6:b0:0a:07:27:8a:96:de:64:
e8:2f:ab:15:7e:75:d3:35:f8:67:c7:8b:7c:0c:77:
07:e4:cf:02:b6:66:b2:fd:18:c2:ff:9f:41:0b:9f:
59:6d:fe:3f:66:e9:56:94:c2:70:39:ce:cd:3c:fe:
7d:b8:5e:57:3b:97:35:4e:c0:1e:6b:7e:1d:52:d4:
bc:73:49:1b:3d:8d:a8:c1:e8:2f:6d:df:74:9a:3c:
6f:36:91:90:9a:f2:95:74:a1:0a:88:78:f9:83:11:
00:51:e0:8a:94:f5:0e:40:f5:9e:86:c6:f5:14:77:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CF:F7:8D:A6:47:24:B7:90:62:57:33:82:21:F7:98:B7:E0:66:D8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/217379e1-3f0b-43c9-b963-bb79bf38c07b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.125.0.0/16
Signature Algorithm: sha256WithRSAEncryption
29:f6:47:05:fc:86:a5:d5:97:f7:9b:84:05:45:96:62:b6:e9:
26:67:e9:79:53:16:b5:fa:9f:20:43:17:57:33:e9:07:5c:71:
2e:25:f2:42:bd:a4:e4:b7:0f:c1:19:e3:12:89:56:75:46:99:
63:84:b3:c5:7a:6d:26:1d:f6:38:32:37:35:09:e7:73:cf:fe:
a8:4c:3f:e6:a0:93:d7:fc:0a:6c:b1:e9:00:22:47:00:d4:90:
4a:4e:10:d7:a6:67:f5:81:0d:70:eb:24:53:32:0c:a7:a7:60:
24:41:66:42:4b:bb:e1:dc:49:21:59:46:fd:b3:6c:50:bc:0b:
63:92:bf:d8:a3:a4:f0:80:bd:ce:85:a3:a9:19:3d:eb:0b:a7:
d7:a9:ba:7c:76:a4:23:7f:ad:1d:97:1b:c4:bf:52:13:e4:2e:
b0:ef:f0:09:65:65:13:ee:1d:a4:6a:1c:51:c8:aa:67:cf:a9:
67:84:4a:b5:23:9e:3e:5b:ec:b3:d8:64:6f:54:c1:c7:15:50:
24:98:71:02:7d:96:47:c7:12:89:63:64:76:4d:d3:b8:08:29:
ab:f5:72:61:5a:bd:02:64:a2:ff:a3:87:cb:61:b5:80:3e:e8:
05:c3:b7:aa:6d:8c:b6:d5:44:47:28:42:8c:0c:76:26:78:20:
ba:6c:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:09:21 2026 by rpki-client