
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d876c34-99ea-4495-ae8c-2d5e53b15a2d.roa
File: 2d876c34-99ea-4495-ae8c-2d5e53b15a2d.roa (raw, json)
Hash identifier: syYtNCFzGxMyAHhpaC+QzhRck1R+xAnsxH/sw/ByIvA=
Subject key identifier: 01:B5:46:4B:B9:DA:09:17:94:3E:AF:15:01:8D:2D:34:55:2B:83:EF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1412CC1C2DD0360E0F11C7EEA0EF76B04E527FA0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d876c34-99ea-4495-ae8c-2d5e53b15a2d.roa
Signing time: Mon 03 Aug 2026 00:41:07 +0000
ROA not before: Mon 03 Aug 2026 00:41:07 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 40.235.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:12:cc:1c:2d:d0:36:0e:0f:11:c7:ee:a0:ef:76:b0:4e:52:7f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 00:41:07 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=a1ced720921de6f4c55c886651808f1b6ef1f0ba9052880d050573f7136b9d87, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:31:dd:fe:86:92:97:02:be:ad:08:32:62:
81:d3:df:df:b8:0d:b9:53:72:d6:73:49:9e:c9:9e:
6d:cb:ae:4f:2d:dd:92:06:ec:ba:29:2d:e6:9f:12:
9f:f3:8d:9b:ac:31:56:76:e8:33:49:36:5c:90:cb:
82:1b:a2:46:94:de:d5:8b:b1:02:e3:ce:88:32:5f:
2f:15:9b:0c:ac:a9:e5:2b:95:2f:eb:91:15:5a:ac:
32:92:5c:ec:22:5c:96:ba:03:73:a4:6d:1f:bc:fb:
87:b8:74:3e:9e:31:3b:7a:ef:39:84:a5:d7:8c:84:
63:35:68:f0:bf:1f:6c:e7:28:59:96:41:47:c3:47:
3d:e5:a0:a8:24:2f:ae:8c:c2:10:63:c9:9d:36:1e:
66:84:5b:23:e8:9d:62:93:4c:92:0f:cd:30:dc:89:
9f:b4:ae:7b:8f:a6:41:ee:97:c4:e0:63:92:6e:9e:
75:21:30:da:04:28:97:d4:7b:51:fb:5c:60:75:af:
03:1b:76:5f:a8:28:30:67:ce:f9:e8:b3:02:97:bf:
85:68:c3:7d:14:4e:4d:2d:59:67:57:44:c3:22:96:
1b:6f:ba:32:3c:6e:22:81:57:15:54:46:14:35:48:
db:d9:26:2d:76:32:2d:36:fe:08:f7:d4:ab:44:d3:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B5:46:4B:B9:DA:09:17:94:3E:AF:15:01:8D:2D:34:55:2B:83:EF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d876c34-99ea-4495-ae8c-2d5e53b15a2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.235.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6d:8c:07:ae:a3:d3:91:73:eb:27:dc:66:12:e9:86:62:ab:4f:
95:dd:9f:64:40:f2:4a:22:75:80:6d:db:a1:51:4c:a5:ff:d4:
c4:5b:e8:2d:4e:6b:7d:93:b6:8d:c0:09:e4:2d:19:72:4f:3d:
24:3f:60:d6:eb:66:8a:c0:16:cc:9a:df:42:ef:1d:c2:f5:51:
fd:08:70:97:b2:cb:ec:70:20:8a:ca:2c:91:65:27:dd:70:c6:
bf:1a:ba:55:e9:12:00:d3:3a:58:ea:27:a2:10:7d:02:c5:cd:
a7:cd:37:b7:05:78:09:18:80:b1:75:08:5f:94:6e:0b:c2:8f:
84:34:a7:f1:c5:9e:c5:30:f7:6b:db:b8:ef:2e:1d:7e:24:8a:
fd:68:fa:af:6c:c8:d6:2b:9a:5a:56:11:b3:cb:4e:d2:f8:99:
0b:ac:82:30:98:c4:9a:af:88:cb:ad:90:bd:f9:10:ed:da:4d:
7c:96:af:36:b5:64:41:7a:64:d5:b3:ce:b6:64:e9:59:64:38:
86:f3:ac:fd:02:49:50:ea:1d:31:00:db:a3:90:cb:6c:77:02:
2e:50:e5:cc:4d:79:b8:8a:82:3e:56:d7:73:8a:84:9b:b1:4f:
de:fe:fa:65:98:50:1d:5f:be:48:75:f8:ac:75:49:ee:04:d5:
b3:7b:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:38:19 2026 by rpki-client