
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e5c8f2-c974-43b5-8f46-5ca289b283ae.roa
File: 38e5c8f2-c974-43b5-8f46-5ca289b283ae.roa (raw, json)
Hash identifier: KwX3FhbxNDEH9CKo8CirGbxei+uK1ZLqWKUBY4Evi2A=
Subject key identifier: F0:C0:96:CB:FA:40:40:E9:9F:26:A3:23:5B:A1:74:03:66:83:B1:8C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 596668DB69E42B3370BC5C064994ECE06305BFBF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e5c8f2-c974-43b5-8f46-5ca289b283ae.roa
Signing time: Thu 30 Jul 2026 00:20:08 +0000
ROA not before: Thu 30 Jul 2026 00:20:08 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:66:68:db:69:e4:2b:33:70:bc:5c:06:49:94:ec:e0:63:05:bf:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 30 00:20:08 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=5ec60dfc8fdaf99866b5c7fb887b4ed0fda0097eacad19afcfc0a6e20f39a01c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:17:b5:73:17:d1:da:a7:f1:82:33:15:83:
db:3a:20:dd:f2:1f:c7:3a:f2:ed:c3:27:dd:1a:f0:
0b:dc:34:26:a2:96:38:13:1b:63:c7:cf:55:77:1f:
01:1d:05:92:79:94:07:33:7d:d8:f4:07:e3:86:e0:
b9:1e:12:f5:cf:9b:de:c8:9a:0f:58:f0:6d:6a:ca:
e1:79:11:c6:89:c9:98:be:92:41:e8:c3:39:a7:0b:
15:88:7e:1f:4f:0b:75:7d:eb:17:ae:af:8c:a4:1d:
82:c8:76:b3:68:15:f4:e1:9c:c8:82:4d:5a:c2:65:
40:45:1d:ee:00:34:67:15:7c:6d:28:95:5d:d3:7b:
1d:2f:fa:1a:6d:16:89:4a:0c:e1:a9:f1:23:6b:e2:
19:6f:dd:73:71:cb:a5:2d:df:86:6e:78:92:22:45:
c1:9e:03:15:5f:4c:70:50:d4:ef:52:c2:d4:54:79:
98:4e:2c:fe:55:75:96:29:7a:22:06:f2:32:f9:90:
e4:9a:01:11:92:04:ef:1a:74:8b:d3:be:77:b7:a4:
a8:25:90:3f:9f:9f:b2:00:2f:12:7f:fa:0a:14:df:
1d:64:ca:c8:df:15:6c:d2:a3:22:94:b9:ed:6e:43:
32:db:5b:87:4c:14:8c:8b:84:4d:2c:fb:3e:86:1a:
e5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C0:96:CB:FA:40:40:E9:9F:26:A3:23:5B:A1:74:03:66:83:B1:8C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38e5c8f2-c974-43b5-8f46-5ca289b283ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.15.0/24
Signature Algorithm: sha256WithRSAEncryption
21:0d:c2:df:43:ae:57:90:7b:b4:41:ef:1c:7c:de:01:a3:1e:
44:3b:a7:07:e6:8c:bc:7a:92:1b:c7:94:e5:99:16:e2:d3:35:
df:4c:74:9b:44:c2:94:88:87:b5:26:37:82:6c:e5:36:05:8e:
91:5d:43:6f:ef:42:e1:f3:af:51:6c:50:0d:41:21:be:8e:1e:
19:a3:21:c0:5d:69:9c:20:a2:84:7b:f3:67:5a:63:7e:21:b9:
80:b7:3b:c8:1c:e0:64:c7:04:f4:80:1f:5c:b6:76:37:30:d5:
0c:fb:c2:22:e1:8d:3b:a3:ee:7c:2c:1d:5c:95:ff:d8:7f:8b:
32:2f:6a:07:55:da:da:9a:ee:03:95:59:16:ea:f5:b3:8e:14:
12:a9:0b:13:56:a6:16:34:5d:20:39:72:b6:70:ad:2a:fe:86:
c2:6b:3b:e6:c5:a1:02:d9:54:84:bb:30:23:30:36:21:69:4f:
79:22:34:c8:36:a0:b9:dd:54:9e:d9:db:f7:e6:da:e9:aa:62:
8d:5c:d6:73:bd:65:c6:b6:6b:ea:f1:1d:e4:66:08:92:07:d7:
2f:21:a4:87:83:c3:f4:88:5d:6d:40:b7:db:a3:ad:ee:e6:11:
3b:e6:cb:d2:b7:26:46:00:8f:7c:b2:35:16:6c:5c:0e:2c:44:
35:b3:ee:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:40:38 2026 by rpki-client