
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f6be9ff-ec25-42f0-a6d3-52cca0ff8f59.roa
File: 3f6be9ff-ec25-42f0-a6d3-52cca0ff8f59.roa (raw, json)
Hash identifier: vCcyLu6V8IMwTUD7sW6NUzZSQigCeQIASJ/0q86whgg=
Subject key identifier: 2A:37:49:1E:7F:31:4D:D7:2F:2F:0C:AF:77:75:47:68:1E:C4:25:CE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 64BC8DA63974E29B86BDA1F1516FF57723853489
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f6be9ff-ec25-42f0-a6d3-52cca0ff8f59.roa
Signing time: Sat 24 Oct 2026 01:04:05 +0000
ROA not before: Sat 24 Oct 2026 01:04:05 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 56.248.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:bc:8d:a6:39:74:e2:9b:86:bd:a1:f1:51:6f:f5:77:23:85:34:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 24 01:04:05 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=745e26c1301b57d80b9621ddd8e56e814e92455c60a9d09516ab7b095617d922, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:26:49:e5:27:6e:40:2b:4f:24:77:03:a2:
a5:06:ba:11:7d:24:a8:49:1d:49:4d:10:c9:34:1b:
9c:80:a9:90:09:e4:c7:64:6d:8a:da:70:0a:2c:c5:
2c:aa:10:cc:ab:9a:f4:44:0a:88:89:bb:3e:6b:ec:
2b:c6:5a:a9:cd:a7:3a:4b:33:62:77:ec:e9:b9:3a:
6d:75:0e:d8:a3:2e:c3:a5:79:89:5b:5a:e0:36:de:
76:9a:53:99:e3:7d:93:98:5e:c4:81:c1:15:ce:da:
ce:da:6b:60:51:c6:d9:50:1e:43:61:aa:33:1a:d8:
c3:68:2f:5d:19:ca:da:8d:bc:b3:48:b5:19:50:a2:
c9:a9:b7:ab:e9:c2:0c:5f:e6:35:e3:a0:5b:22:2c:
d1:43:a8:cb:f4:e8:7b:45:aa:56:55:31:44:a2:a8:
3d:cf:a2:73:d2:07:42:4f:b9:fc:40:ef:b7:b6:b6:
5c:10:58:9e:40:2d:5f:ab:38:a2:aa:aa:ba:65:dd:
50:9f:9e:ed:24:ba:6b:82:3a:d3:c4:42:5f:9b:a5:
ba:e1:a1:4b:fc:91:a0:27:cc:18:bf:dd:59:ed:a1:
c7:74:60:d2:19:65:63:e5:fa:47:7e:5b:1d:6b:49:
e5:ee:8f:cf:83:ca:7a:1f:27:bf:20:10:e1:07:a0:
7e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:37:49:1E:7F:31:4D:D7:2F:2F:0C:AF:77:75:47:68:1E:C4:25:CE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3f6be9ff-ec25-42f0-a6d3-52cca0ff8f59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.248.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a1:2c:38:c4:24:7c:eb:ab:cc:92:6e:32:4e:4b:31:c4:ed:ed:
4a:52:a3:96:12:0b:b8:97:30:a1:cb:cf:8e:aa:dd:9c:1f:42:
a3:68:c2:b8:96:02:5e:6c:52:5e:b3:ff:08:43:ad:a9:8c:d8:
26:6e:01:4c:a2:df:03:a1:63:82:86:90:df:1b:61:fd:c7:3a:
75:3b:92:a5:c4:71:95:32:43:ae:83:85:71:64:52:78:a6:f7:
e7:7d:5f:80:82:60:32:09:0f:45:db:1b:6a:ca:cf:42:77:d8:
d0:96:dd:7c:58:6f:cf:cf:f2:68:af:e1:5e:b9:8d:0e:81:ac:
9c:59:73:ee:b7:30:a0:0f:e0:9f:38:14:22:e4:86:08:d1:57:
ff:eb:8a:6c:63:85:fc:22:b6:db:f2:ee:f3:87:a1:e0:13:3d:
cb:62:27:44:6a:7f:57:50:a9:b8:59:95:43:0c:49:bd:b7:e9:
a2:bb:0c:ea:8b:2a:7b:e5:0c:ff:32:58:21:2e:90:8c:d9:77:
d9:eb:9c:74:fb:4c:2e:6b:7c:3f:6a:af:67:69:49:07:c7:1c:
3c:7c:6c:8f:70:0a:b5:f8:78:3a:5c:7d:27:2e:bc:73:60:2c:
a5:f9:c3:f1:52:7a:b3:a4:3f:b2:f0:64:1b:8d:4a:fc:5f:c4:
18:22:64:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:52:57 2026 by rpki-client