
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa
File: 2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa (raw, json)
Hash identifier: PHuSLVOLhQzNSzzLApzurBHabovvNAsJtyDgvp5OjLI=
Subject key identifier: 8B:C3:09:34:3E:B2:11:25:DD:90:6E:F6:19:C5:A6:1E:00:F1:7E:32
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 655534B1DEF839AB4F1CAEB3205AB5D78B23DE80
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa
Signing time: Fri 07 Aug 2026 00:31:15 +0000
ROA not before: Fri 07 Aug 2026 00:31:15 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fef:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:55:34:b1:de:f8:39:ab:4f:1c:ae:b3:20:5a:b5:d7:8b:23:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 7 00:31:15 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=a6903dc51c7c23fe36e39f831990caaf094f67033efe8b8f85207c92e6f28081, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:24:8e:22:c3:02:d0:bf:e2:a2:3b:19:ce:0c:
d1:24:1d:9c:1d:eb:bc:f5:96:0e:6e:05:9d:04:d3:
2a:df:a5:19:b0:2f:10:47:59:ba:02:8d:49:f4:83:
20:7f:65:b9:4f:99:b2:b7:fd:61:ba:37:4b:3b:61:
63:b1:11:d9:ac:65:b8:32:aa:c0:33:00:de:28:4d:
0d:28:dc:07:de:94:d9:66:39:34:60:93:1c:18:34:
ac:41:81:5e:49:56:e6:e2:18:a7:24:d9:6d:aa:e0:
fe:f1:3f:e9:42:20:c5:ea:48:10:ae:4d:97:fe:8d:
7e:47:25:81:b1:fd:36:fc:c2:e9:3f:77:7c:73:d5:
e6:f0:26:0c:64:a9:16:8f:13:f2:cd:6a:14:8e:d1:
f0:15:78:ba:ee:82:ed:aa:25:0b:48:83:0e:6c:22:
c7:4c:1a:5f:2a:38:4b:da:03:9e:30:ec:b9:3b:f5:
68:3b:9f:29:55:09:1b:75:2d:9e:2d:31:5c:f9:1b:
1e:7e:7b:bb:4a:cf:c2:14:cd:fb:4d:39:5f:c5:ec:
6c:73:4f:bb:92:8d:32:cf:e1:fe:62:4c:cb:48:c1:
3b:39:64:5b:cf:b8:1f:ea:12:72:8c:fb:e9:cf:da:
dd:37:36:5b:0e:db:10:a2:cc:9c:c3:4b:30:ce:77:
d2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C3:09:34:3E:B2:11:25:DD:90:6E:F6:19:C5:A6:1E:00:F1:7E:32
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2bfd279d-53c3-47d9-a282-c1f249b2a5f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fef:5000::/40
Signature Algorithm: sha256WithRSAEncryption
07:c1:3d:b6:ad:d0:c5:44:3a:59:a0:9f:24:29:40:9c:17:3c:
49:bf:6f:a9:af:6e:a1:11:d7:a3:bf:d2:24:9e:e6:ae:95:e1:
44:b7:88:ec:83:62:74:6b:64:3e:4d:4f:e3:16:80:38:57:2f:
fb:98:12:e2:27:14:92:13:c8:15:2b:aa:20:7a:ce:fe:35:13:
a0:91:25:fa:9b:a7:cf:d5:08:0c:d8:cd:3e:36:bb:27:be:12:
31:58:61:35:4c:c7:55:37:75:8e:32:75:35:0c:98:39:a6:5c:
11:23:e5:60:14:a5:a6:57:14:1b:a6:12:b8:37:09:09:ee:6f:
29:8b:e5:f3:95:5e:fe:0d:95:ab:25:cc:0a:47:9b:bf:7f:d4:
19:dd:0a:b9:13:8f:60:a3:d5:a7:fc:4d:19:01:bb:0a:0b:7e:
33:76:90:89:83:f5:75:7e:3d:0a:76:0d:dd:d6:0e:5d:24:7b:
c8:39:9a:55:66:a5:5f:ee:74:c5:ce:61:11:e5:d5:2f:b6:21:
05:08:c1:bb:4b:54:4c:4b:e6:38:b4:4b:61:c4:9e:5f:fe:ec:
41:9e:49:de:02:93:0a:41:cf:92:a1:86:71:e4:12:b1:b9:2a:
0d:91:f2:ae:72:c5:6e:5b:80:e1:78:73:ab:3e:5e:5e:74:12:
be:a9:f2:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:48:33 2026 by rpki-client