
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e80cfb-6694-44ed-8b7d-4f7bcc286fe7.roa
File: 42e80cfb-6694-44ed-8b7d-4f7bcc286fe7.roa (raw, json)
Hash identifier: hSDreCnW9G6YfzyFac7zazi/oa1TrPPjs1ejTfq5buk=
Subject key identifier: 62:0A:FA:91:CF:E9:31:FF:71:8D:A5:97:E1:79:74:AA:F4:90:3E:2E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6B3E254B04A439729599F5C7A8BAD64273140435
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e80cfb-6694-44ed-8b7d-4f7bcc286fe7.roa
Signing time: Wed 29 Apr 2026 00:01:24 +0000
ROA not before: Wed 29 Apr 2026 00:01:24 +0000
ROA not after: Tue 28 Jul 2026 23:59:59 +0000
asID: 14618
IP address blocks: 56.187.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:3e:25:4b:04:a4:39:72:95:99:f5:c7:a8:ba:d6:42:73:14:04:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 29 00:01:24 2026 GMT
Not After : Jul 28 23:59:59 2026 GMT
Subject: serialNumber=162826652cb46696ad6b6048d70e8c256d37a727207d39f308e990a204065a8f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:2d:89:57:c1:9d:5f:c2:3f:b4:70:da:ff:
c5:6b:ab:b8:c8:b8:db:66:7e:cc:f8:f8:13:5b:52:
9b:15:33:a1:29:b4:03:c1:2b:8c:4e:4c:fc:70:77:
91:1d:00:9d:89:20:b5:1f:9d:bf:1b:76:59:d7:c3:
32:d6:ef:30:a5:39:cd:87:b0:7d:09:62:2c:0d:af:
f8:d8:fe:00:30:5f:74:83:a6:08:ec:cc:9b:11:ff:
e5:07:17:b5:87:fd:4a:a4:c6:1c:16:07:86:ca:aa:
c0:1a:be:ae:ce:94:20:2c:34:de:c1:d1:6c:8f:0b:
b8:e7:9f:69:15:ab:d5:e0:8f:c5:fd:0b:d7:83:87:
71:e3:d9:70:9c:a3:3a:c3:16:5c:21:91:b7:4f:18:
f3:57:79:20:30:79:24:6c:9f:e8:d3:cb:66:c0:f0:
9e:b7:f9:f8:51:a0:b1:b4:70:89:3e:f9:23:05:17:
59:2a:c4:81:0f:96:02:90:04:66:19:f5:12:9f:e8:
e8:a1:55:40:9a:0d:a2:96:3b:02:f6:40:86:5d:78:
60:3f:77:51:2f:fb:52:ea:42:2f:1e:f4:b6:30:5f:
dd:00:79:80:ca:98:6a:f7:b7:95:4b:5c:78:46:34:
24:cd:16:5d:5f:9e:f2:80:33:0b:8d:d6:44:8c:b3:
5c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0A:FA:91:CF:E9:31:FF:71:8D:A5:97:E1:79:74:AA:F4:90:3E:2E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e80cfb-6694-44ed-8b7d-4f7bcc286fe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.187.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:e6:c4:24:cc:a2:1d:15:e6:4a:b8:9b:ce:27:8b:91:64:d3:
3c:d6:1a:c9:bf:74:ee:dc:a7:ef:8f:03:c3:05:4a:a4:a5:49:
7b:ac:e9:23:90:29:e5:08:13:25:d3:11:18:8d:1b:2d:9c:03:
c0:ca:65:13:d5:18:b7:42:e3:38:84:41:ca:dd:e7:de:9e:93:
62:54:bb:9b:4b:2d:fa:60:c3:bb:c9:2c:86:98:4f:3f:2b:19:
ad:a5:0c:b6:0f:11:02:00:41:09:93:2d:1a:22:74:6c:70:0a:
9e:17:3c:fa:da:d4:a3:61:3e:1b:5f:13:d3:a5:04:a0:02:55:
94:0d:fb:dd:59:39:83:54:ef:58:21:e6:d9:35:a4:b6:5f:76:
ce:74:4a:89:1b:2e:4e:1f:0d:03:db:04:94:1d:13:74:ab:f5:
20:0d:29:9e:34:a9:15:e4:03:d4:85:c1:31:7c:4c:0c:b6:a6:
98:77:41:8c:71:00:39:2f:ea:1e:a2:bf:2e:3a:5f:13:31:18:
ae:9f:70:d7:13:29:1e:cb:4b:66:7c:d4:ac:2b:fe:03:fe:cc:
b7:e9:de:ac:97:38:bb:9e:0d:08:70:07:c9:36:5f:73:0a:67:
30:4a:94:c6:01:56:9f:1e:db:c3:78:c6:48:5b:ea:29:e7:4a:
17:bd:db:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 21:37:19 2026 by rpki-client