
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/509bac1e-ead7-4b5e-ac74-2ef12dd6f590.roa
File: 509bac1e-ead7-4b5e-ac74-2ef12dd6f590.roa (raw, json)
Hash identifier: M4FA2pBrGVEjfgOXNqwIYnkPsUTKswWnmUBUQ0pJN6U=
Subject key identifier: F5:D7:83:DE:3A:5E:C3:22:A9:31:A9:5E:33:13:EF:AD:46:29:3C:D2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 09CFA33ED61DC78E7B4361A87FCA291A2B75C70C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/509bac1e-ead7-4b5e-ac74-2ef12dd6f590.roa
Signing time: Fri 31 Jul 2026 01:30:50 +0000
ROA not before: Fri 31 Jul 2026 01:30:50 +0000
ROA not after: Thu 29 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:cf:a3:3e:d6:1d:c7:8e:7b:43:61:a8:7f:ca:29:1a:2b:75:c7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 31 01:30:50 2026 GMT
Not After : Oct 29 23:59:59 2026 GMT
Subject: serialNumber=bd95ff8bb3280c584d837761411c8900a52def68d9f0630720872d044dc2642c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:ee:d1:4a:29:f0:90:01:30:64:b9:7a:60:
fe:78:84:56:49:af:22:66:e4:7f:7e:ec:71:cc:3e:
6a:3e:95:0f:4c:56:03:04:08:f6:eb:ea:ad:d6:ab:
32:7f:f3:ae:64:b9:d6:4f:f6:95:e5:43:f7:65:aa:
c6:89:c0:fa:38:6f:d9:60:2b:2e:d3:99:42:00:37:
86:c6:13:72:0a:70:0c:67:b2:6e:55:38:bd:05:3b:
13:94:4b:09:17:0a:de:13:17:20:a1:1d:ba:49:f9:
b1:e3:34:bf:f2:0d:93:b5:45:ea:b9:56:6f:e5:4d:
ae:df:40:a4:57:09:46:85:29:6d:da:95:67:de:59:
f6:f4:30:42:67:51:91:4e:d5:6e:3d:82:f7:48:2d:
30:de:79:54:af:ce:80:b4:a6:07:ef:a6:95:ab:5d:
a9:99:58:3a:45:dc:e1:a6:3c:a6:34:6c:15:08:bb:
e7:8c:d4:eb:d9:9e:3c:f0:6e:a2:74:a7:07:d7:8a:
f3:6c:26:3d:8f:2d:dc:92:03:47:2e:5f:d6:bb:8c:
8e:9d:e8:ab:fd:9e:72:63:2c:d4:d8:e0:fe:76:e8:
1e:14:55:f1:25:b7:5e:e7:37:6d:29:dc:52:00:e7:
14:cb:9b:e0:8b:45:e3:79:62:b2:b6:86:83:ba:fa:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D7:83:DE:3A:5E:C3:22:A9:31:A9:5E:33:13:EF:AD:46:29:3C:D2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/509bac1e-ead7-4b5e-ac74-2ef12dd6f590.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.7.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:8d:03:da:04:a9:f5:84:9e:c6:5d:29:3d:86:00:6d:0f:7f:
a9:b9:8e:dd:8b:a4:08:e7:67:d7:3f:de:f6:02:b7:a7:2e:df:
60:32:72:1a:92:9a:da:d9:c8:a4:f8:af:00:3e:b3:ac:59:c8:
cd:73:21:f0:09:ef:cf:95:6d:c1:ea:9d:a2:fd:63:b7:c6:57:
ee:00:06:ba:5b:df:d8:c2:6d:73:6a:d8:05:67:36:1b:00:c6:
c9:ee:e2:cf:0f:d4:bc:80:01:1a:80:42:77:f5:99:d0:ec:8e:
40:ae:60:b3:14:7d:58:51:7a:29:47:ae:b0:9f:c2:bd:76:a7:
41:59:74:d6:4a:fe:a0:fd:7b:b0:d3:1f:74:2a:34:e2:8f:a1:
73:44:3c:58:e0:de:93:c3:7f:c8:d0:dc:aa:74:c6:7e:ab:a3:
e2:59:a5:7d:3f:bf:d8:8f:d4:e5:27:d2:0f:1e:ff:9b:c0:de:
93:fe:ee:e8:9c:9a:17:4a:f9:c0:72:5c:f6:1b:de:f8:81:ac:
c9:0a:63:5e:cc:a6:b0:4f:1c:33:60:65:bc:5d:f7:05:de:bb:
63:98:73:71:77:1e:99:3b:b6:d0:cb:e2:68:a0:65:a7:0f:98:
46:b2:3b:46:fe:4f:9f:55:dc:47:af:96:d3:a0:ac:2a:a5:91:
09:cb:fe:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 12:12:04 2026 by rpki-client