
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fb2a926-e7db-4748-9cc1-0146c8c72dd9.roa
File: 5fb2a926-e7db-4748-9cc1-0146c8c72dd9.roa (raw, json)
Hash identifier: XT2n+2eUtNs98lTzOhlfDfG7oPWP43KXocliiMg0Psk=
Subject key identifier: 4A:F0:7B:20:61:E3:AD:98:DC:2F:D7:12:F1:B5:5B:E6:86:FA:31:58
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 531CD45F8B46DBCC8EF3BE76FED7540E264B6753
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fb2a926-e7db-4748-9cc1-0146c8c72dd9.roa
Signing time: Fri 23 Oct 2026 02:10:32 +0000
ROA not before: Fri 23 Oct 2026 02:10:32 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 54.54.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:1c:d4:5f:8b:46:db:cc:8e:f3:be:76:fe:d7:54:0e:26:4b:67:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 23 02:10:32 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=01fb9d4a331e5beaf512e80c40078eac94ec1f95f078f4538a9a08d84c825219, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2e:84:5e:1b:52:cd:28:b8:85:60:7c:d8:d3:
d9:81:58:9c:5c:c9:a0:c2:be:f8:67:1b:98:35:7f:
93:6e:d6:79:8a:8f:51:f4:d8:c0:cd:bb:08:5d:96:
2a:92:b0:36:27:68:a8:8c:a8:77:09:19:9e:bb:4b:
64:98:b7:4d:8b:77:10:db:49:48:dd:dc:b4:84:37:
f8:0e:3c:e0:40:79:e7:24:1c:d6:78:a7:e9:79:3a:
3b:3f:4e:2d:7c:6d:7d:d4:60:a9:c0:cd:f8:18:7a:
06:80:a8:30:3f:fe:44:4f:78:de:54:4d:ff:9e:f6:
69:c8:c1:9b:5e:40:65:bd:c4:27:51:51:19:2e:be:
8a:51:69:71:7f:f8:0d:8e:ab:a6:15:f8:d6:1f:a1:
11:7f:2f:c1:45:29:c5:af:0d:83:e9:0e:c4:46:43:
13:03:a9:8b:50:c7:a5:e5:a0:25:87:66:67:ff:0f:
b2:2b:7d:f8:c8:06:49:d3:a5:8d:81:fa:da:0c:ff:
46:a5:87:71:e1:00:58:ef:0d:ab:1d:31:86:f5:4e:
ce:29:3c:58:7a:2e:21:03:34:fd:4f:48:9f:a6:6f:
6b:05:ed:79:b0:d1:ac:8c:b3:8f:c8:f9:2b:dc:8e:
21:ff:64:83:85:f6:77:84:44:02:a1:e9:aa:c4:f1:
e7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F0:7B:20:61:E3:AD:98:DC:2F:D7:12:F1:B5:5B:E6:86:FA:31:58
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fb2a926-e7db-4748-9cc1-0146c8c72dd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.54.0.0/16
Signature Algorithm: sha256WithRSAEncryption
95:2e:40:6a:e5:35:2b:b6:2e:ee:98:92:c6:c5:ce:36:be:f1:
11:5c:3e:51:c6:c0:ed:2e:ec:03:00:c0:1a:b9:c3:03:fb:67:
30:d0:e2:82:7e:99:0c:ea:9c:0b:f6:f8:5d:95:94:c2:20:c7:
56:30:d1:b1:5a:72:71:1f:5a:72:49:a0:e9:f5:36:90:a5:c8:
66:52:4d:91:3a:4a:de:e8:02:ba:21:f9:d6:ee:03:73:b0:df:
9e:29:ee:bd:a3:d4:be:18:ad:43:58:24:c2:cf:16:a2:79:82:
e0:ed:8a:69:d5:cd:8a:ee:12:45:1f:6e:79:b3:ef:2a:c9:40:
b8:61:41:3c:d0:5d:b7:c5:9d:05:be:30:82:c1:ee:73:a6:4e:
84:62:45:3a:f0:3b:72:e8:e2:f6:6e:b7:e1:df:4c:f3:a4:12:
00:82:53:b2:96:d0:94:be:87:e6:ca:a2:66:ef:5b:d2:bc:c9:
8c:60:a5:b8:19:72:5f:38:f2:23:07:7a:53:4e:f2:66:f2:8e:
06:e6:e6:76:db:bc:a6:03:00:81:01:cd:0a:04:0b:d4:7a:28:
b3:ae:89:57:30:0e:d5:65:ed:bc:70:3c:32:b9:ea:1a:46:4b:
97:05:c4:07:0b:61:f2:55:5f:70:e9:0c:90:ab:b5:15:91:7f:
14:b6:e8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:51:39 2026 by rpki-client