
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f6a7b28-0aa8-467b-ab6a-29f98cfd52cc.roa
File: 4f6a7b28-0aa8-467b-ab6a-29f98cfd52cc.roa (raw, json)
Hash identifier: qm+8P8eQQJwHo8TL4dNJizZFXCH71MvQb8xipfhPj3U=
Subject key identifier: 89:B8:82:3F:4E:43:FB:6B:C8:4D:2C:59:BF:02:E4:EA:4C:15:A9:E8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 54904DF8AA88D08378E0AA6D6975ED3C6F6DED76
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f6a7b28-0aa8-467b-ab6a-29f98cfd52cc.roa
Signing time: Sat 24 Oct 2026 00:51:07 +0000
ROA not before: Sat 24 Oct 2026 00:51:07 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 151.150.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:90:4d:f8:aa:88:d0:83:78:e0:aa:6d:69:75:ed:3c:6f:6d:ed:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 24 00:51:07 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=d56751990150d3b52e472fbf05c7af63133a9954a935308d82c39a532d0e7380, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:00:22:dc:d2:b8:72:c4:81:e7:d3:08:65:
15:bf:c2:8f:5b:65:b9:81:fa:b4:4e:65:7e:e0:ba:
c8:05:b2:9c:65:0d:3e:11:83:dd:63:c6:af:fe:5a:
cb:0a:bd:38:5d:35:e7:41:ec:63:03:67:d6:ce:1d:
2d:ae:c9:c3:f1:a0:19:c3:f0:a7:50:c1:94:ad:5c:
8c:0d:53:13:7b:fa:b3:c9:31:af:e1:a9:c8:4d:cc:
b5:b3:d3:ee:5f:6e:68:fa:12:8b:88:5b:b7:20:36:
3e:03:6a:10:14:7b:4f:b4:0f:a1:29:20:cf:f7:37:
e0:4c:9e:78:48:f6:3e:33:07:15:a2:5a:f0:d7:e9:
32:78:91:9c:77:a6:9e:d5:46:33:d9:24:50:f8:cf:
80:eb:7d:a4:f3:1b:e8:b9:2f:0f:fa:02:5a:e6:14:
87:e1:19:be:f3:2e:9d:e7:99:82:3e:57:76:2a:5b:
78:4b:b2:da:2c:f1:b4:e8:66:83:a6:e9:43:04:89:
45:40:dd:2d:bf:d9:22:43:95:5b:09:b8:2d:7c:4b:
03:f1:11:24:ae:20:70:04:c8:1f:ac:cc:6d:ee:6b:
f2:89:63:66:19:82:ed:a9:21:07:c8:04:86:c8:1e:
d7:1c:5c:8b:86:83:76:dd:c6:94:59:3a:16:a5:7e:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B8:82:3F:4E:43:FB:6B:C8:4D:2C:59:BF:02:E4:EA:4C:15:A9:E8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f6a7b28-0aa8-467b-ab6a-29f98cfd52cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.150.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:f7:98:e3:0e:9d:0b:1b:e9:80:88:a3:ce:dc:5e:c6:9e:3c:
b5:90:2f:4a:6a:89:a6:a2:26:8d:35:eb:4b:5a:27:39:9c:de:
d4:6b:8b:30:12:99:ee:f0:1b:02:6f:44:9d:04:09:d7:cd:2e:
d3:16:71:22:7c:d7:74:a2:da:21:a4:06:f8:a0:68:79:4e:e0:
5b:59:55:e5:44:4d:df:0e:4e:16:69:1d:cb:ca:ac:f3:4f:6f:
d2:4c:76:9e:02:ae:4e:6c:37:b8:89:09:65:53:e6:f2:82:16:
30:65:0a:8f:85:c7:79:64:c7:8b:8d:b5:ee:67:bf:93:ba:32:
91:90:18:a5:64:13:cd:c3:b2:fd:46:cb:be:a0:9a:7f:5b:d4:
28:8a:8a:29:fd:a9:0a:d2:23:65:96:30:5c:6c:a7:4b:3b:51:
8e:4c:11:af:fc:81:25:91:55:33:74:89:16:0e:27:3c:bf:95:
03:1e:3f:2e:cc:3b:ec:fc:ee:79:04:de:f7:55:87:a7:bd:09:
bb:73:2d:49:c1:ca:d8:c6:2f:10:ad:1b:ca:c8:87:ed:12:3a:
db:96:25:0a:6f:75:a5:84:6d:b2:5a:a0:89:b5:96:14:4b:09:
6b:4d:e0:d7:2c:7e:15:12:fe:59:6d:e8:e3:14:2b:c0:cd:06:
bf:1d:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:37:09 2026 by rpki-client