
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68ed3f89-8b1c-4d69-bf58-0b66f6b79705.roa
File: 68ed3f89-8b1c-4d69-bf58-0b66f6b79705.roa (raw, json)
Hash identifier: dC2hvmqaOefzgPMi+fMU2x5xL852jRvgys0+06RcSd8=
Subject key identifier: 08:FE:6F:F8:E6:DE:D2:BA:40:02:5C:58:B8:FC:F7:85:F5:D6:3D:E0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7CD3A57ACF24CA5F62BC9939898CC938232934F6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68ed3f89-8b1c-4d69-bf58-0b66f6b79705.roa
Signing time: Mon 10 Aug 2026 00:30:42 +0000
ROA not before: Mon 10 Aug 2026 00:30:42 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f61:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:d3:a5:7a:cf:24:ca:5f:62:bc:99:39:89:8c:c9:38:23:29:34:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 10 00:30:42 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=51e1f5e27757f2d569d0ee97abb66a0dfcb7032c9b7832e6fcc8b8620c50a49b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:05:52:3b:a6:ed:78:dc:8c:6d:9a:c9:24:35:
25:cb:7c:3e:cd:2c:24:9a:16:ba:5c:2a:69:9f:0d:
37:4b:3e:f4:a6:c1:d7:de:f8:02:ee:13:9b:0a:e8:
a6:f3:58:1e:54:c2:39:16:f5:75:04:9e:04:6e:ee:
e8:ef:36:72:c7:dd:dd:4e:08:ed:b5:8f:c2:7c:af:
8c:45:9e:46:37:f0:9e:ff:05:ce:63:1f:8c:95:5b:
26:4f:98:85:6f:7d:8b:eb:5c:52:9d:b3:02:39:5e:
8b:a6:51:3a:96:a5:42:21:87:83:1e:e8:0e:8e:e7:
33:3a:6d:51:9d:88:58:60:f0:30:db:30:9c:22:a8:
59:b1:c0:cc:2d:b8:95:b0:99:93:79:38:7b:52:33:
89:a2:93:ce:4a:bb:b5:f3:dd:c8:ee:9f:68:f4:8f:
90:dc:6b:39:eb:3c:d1:1d:96:9d:9a:ff:bc:b6:dc:
e0:69:52:88:bb:f4:3b:68:c0:a7:9d:04:0d:10:95:
1d:96:63:42:85:fd:5c:c5:2b:47:0e:11:86:c1:6c:
66:79:89:e2:5b:65:f1:1e:d2:60:b3:64:fa:98:df:
f2:e3:74:93:22:55:29:2a:ad:d2:1e:0b:60:0c:cd:
66:5d:13:5f:1f:4d:d0:80:96:10:34:b6:b9:f5:7f:
1c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FE:6F:F8:E6:DE:D2:BA:40:02:5C:58:B8:FC:F7:85:F5:D6:3D:E0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68ed3f89-8b1c-4d69-bf58-0b66f6b79705.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:5000::/40
Signature Algorithm: sha256WithRSAEncryption
b2:18:90:bf:da:27:9f:6c:3f:99:c2:74:78:db:78:20:a9:8e:
bd:cb:49:75:3e:3e:a2:a7:9d:93:5c:ea:0b:e8:8c:d7:c1:f0:
c9:63:5c:9d:7d:af:5b:58:d3:bb:fb:71:c6:ba:d5:cf:2f:a6:
45:96:16:93:9a:9e:11:0e:1a:15:fd:25:86:a8:39:0f:8b:63:
4f:78:0c:25:23:65:50:6a:47:fa:70:e8:5c:86:2a:43:d7:be:
01:59:ca:cc:c7:d5:fe:8b:5c:05:dd:05:a5:5a:09:4e:6e:94:
10:24:4b:e5:e4:4d:11:ad:db:f4:6e:a6:c7:8c:ae:77:1f:48:
25:d6:35:f3:75:63:c2:7e:df:ac:7e:a2:a9:59:2c:e2:b7:ec:
a7:6e:44:d5:12:e7:d7:12:6b:55:f0:fe:7b:fc:2a:1c:cc:cc:
5b:50:2f:bb:40:41:3b:fc:8d:12:13:11:87:b2:30:b4:d0:e8:
53:db:aa:07:7d:86:39:b8:56:7a:57:b5:b8:38:61:93:fd:0d:
03:21:5f:57:f4:0a:85:1e:b7:23:45:14:31:12:3d:30:32:49:
ad:bf:23:65:1b:ab:c6:4a:ea:2d:5a:89:43:e7:46:a1:58:24:
b5:bd:fb:80:9d:c4:58:d9:bf:2b:ce:27:ea:f9:39:50:4e:5d:
97:b0:78:07
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 17:08:19 2026 by rpki-client