
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/617df86b-9cc7-4caf-ab73-d26f39bcdfc8.roa
File: 617df86b-9cc7-4caf-ab73-d26f39bcdfc8.roa (raw, json)
Hash identifier: wQHqdzO8Qwh4Tsp7V/mNWtdNjpf3CR3tRvCi7NyNLy0=
Subject key identifier: C7:9B:6A:F3:AF:D3:D7:22:89:F8:77:D4:1E:E4:B6:12:B0:79:C7:9A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 40EDD4EBDF7F69B916BE098C00FE441BCDD94543
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/617df86b-9cc7-4caf-ab73-d26f39bcdfc8.roa
Signing time: Tue 18 Aug 2026 00:00:07 +0000
ROA not before: Tue 18 Aug 2026 00:00:07 +0000
ROA not after: Mon 16 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.234.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ed:d4:eb:df:7f:69:b9:16:be:09:8c:00:fe:44:1b:cd:d9:45:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 18 00:00:07 2026 GMT
Not After : Nov 16 23:59:59 2026 GMT
Subject: serialNumber=0c4372ef6268ef959a37c22100888986e0821b7eea054baaf413d3cf9afae47e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:db:2b:d7:c7:9e:86:af:14:f4:a2:68:5b:
12:79:26:47:8b:53:f4:72:43:bb:1c:26:23:93:bc:
25:1c:5f:8f:59:85:5c:b7:df:5f:0d:da:38:30:ba:
13:5b:4a:2f:93:4a:83:0a:f3:37:08:9b:97:a9:b8:
ae:19:66:59:50:bc:b0:2c:6e:f1:0b:48:d5:cd:46:
95:ba:77:74:30:b3:e0:8e:bc:f5:50:93:13:5a:d7:
0b:e6:6c:ba:55:d3:a8:96:fb:84:bd:4e:e6:8a:6f:
4f:32:63:75:89:c6:dc:16:5c:be:5b:20:65:22:0a:
d1:ef:53:b2:c2:56:02:73:8d:c5:52:1d:86:dd:27:
30:6b:b8:35:b4:07:e9:ef:37:01:e4:80:1c:02:b2:
d5:dd:f7:81:37:bb:38:65:61:19:09:a5:dd:29:36:
7c:51:ee:9e:34:2f:5e:a3:48:8c:c8:9a:97:ff:df:
23:43:64:ab:d1:5e:3c:2e:31:30:1a:f2:63:10:80:
4f:a3:48:07:1d:0e:b8:fa:4e:d2:32:60:8a:72:71:
f4:8c:23:71:ef:e0:e0:ad:30:9e:e3:14:e3:cc:29:
11:d4:0c:62:c0:07:3e:6f:8f:4a:46:6f:88:fe:29:
fe:1d:ff:7b:d7:d9:e2:2d:96:bb:27:e3:4d:e1:2d:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9B:6A:F3:AF:D3:D7:22:89:F8:77:D4:1E:E4:B6:12:B0:79:C7:9A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/617df86b-9cc7-4caf-ab73-d26f39bcdfc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.234.198.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:16:e9:91:10:70:77:f5:c2:67:07:bf:e8:57:ef:be:49:05:
73:e8:28:a4:00:90:05:e4:90:3a:f0:a8:fb:42:d2:a8:25:f3:
15:87:95:f9:0e:44:f1:2d:70:6f:de:27:a5:41:7c:55:79:64:
c9:44:01:38:05:06:87:1a:0b:77:0a:bb:4e:36:45:fa:a4:1a:
bb:28:87:e1:96:e2:86:72:c3:9a:61:51:8e:e2:d4:1b:77:95:
a8:6e:16:5d:17:7b:d4:11:6c:11:b1:14:cc:ea:34:47:88:c4:
d2:9c:b1:58:75:10:fc:39:52:e9:a1:21:cd:a3:e6:1d:b5:87:
b5:4b:cc:05:61:fa:18:98:18:f0:30:70:e0:9a:f4:a6:0d:03:
5c:a4:a4:cc:29:dd:46:41:b5:0e:f8:82:b1:06:be:ee:64:0c:
d6:52:70:41:7c:b0:6f:35:21:b6:3a:cc:e8:54:d9:71:08:8d:
b0:b9:7a:bc:ca:6d:cf:64:fb:2d:55:b2:f9:37:1b:a9:35:cf:
8f:fc:f3:76:71:34:c0:01:f3:fe:7c:4c:93:f5:84:8f:0b:3a:
cf:ab:3d:de:ff:0d:72:85:bf:d7:f2:b9:7a:22:2e:97:4f:cd:
e0:00:f4:e3:80:d9:3b:b4:96:b8:5a:e7:22:6d:f6:e7:f5:15:
51:41:5d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:13:57 2026 by rpki-client