
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa
File: 7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa (raw, json)
Hash identifier: x83vHckYa2DAsdbKrgbmhLj/9ilWmy673bl0/VNtz+Q=
Subject key identifier: 5A:1C:30:92:4A:0E:58:96:EA:60:32:20:AE:1A:0E:7D:DB:D6:AC:80
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 497B7B0522FA40A44A5E31B07FFABED5D4428A09
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa
Signing time: Sun 11 Oct 2026 00:21:05 +0000
ROA not before: Sun 11 Oct 2026 00:21:05 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:7b:7b:05:22:fa:40:a4:4a:5e:31:b0:7f:fa:be:d5:d4:42:8a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 00:21:05 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=34e05806badb244b0a1030379a48cbcd164d6d647e4694d4fb317017451deb1c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:41:a0:a6:54:8b:ad:15:a2:a3:2e:a4:87:69:
22:ff:b6:ac:23:d2:61:f4:c2:44:c6:4e:49:9b:30:
4b:cf:d6:c1:a1:5d:27:4b:e3:74:cb:f1:02:5a:cf:
2c:6c:6b:96:60:24:15:23:83:55:ce:ca:9d:9a:77:
2a:e1:c2:80:b3:90:db:1d:b2:29:06:62:a1:83:28:
37:55:fc:05:7c:0f:ce:02:0c:49:f0:e2:74:fb:26:
96:99:80:33:7c:bb:34:56:04:10:a0:4a:f2:93:95:
58:c1:e8:31:57:52:48:c9:ed:65:d2:f5:8a:6d:c8:
00:0d:0e:38:0c:95:0c:50:d3:35:29:33:8f:68:dd:
69:34:04:93:63:33:0a:14:6d:d4:eb:fc:51:f2:9c:
27:3b:be:04:4d:c2:ad:65:19:7e:aa:f5:ee:61:06:
14:47:6e:2a:a0:67:f9:67:e4:2e:03:40:88:4e:30:
fa:12:57:29:0a:76:7f:96:86:28:9d:26:4e:0c:d8:
3a:2b:0a:0a:21:08:72:81:88:4c:a4:8a:2e:f4:20:
a6:0d:5b:44:48:21:0f:ec:53:f6:0a:34:44:d0:99:
f9:da:e7:01:09:d7:8a:ab:04:e2:9e:79:09:ea:f0:
a7:cd:9c:7f:90:7b:c9:3c:9a:ac:a6:e5:53:d4:99:
c8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1C:30:92:4A:0E:58:96:EA:60:32:20:AE:1A:0E:7D:DB:D6:AC:80
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7457f14e-6dd1-4239-b2cf-efe09954cfe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.248.0/21
Signature Algorithm: sha256WithRSAEncryption
aa:20:bd:53:ce:33:8c:40:6c:d9:3c:36:b8:ae:07:35:89:ee:
60:4d:98:1c:b4:09:dd:0b:3e:d4:20:ac:c0:29:65:73:7d:55:
f0:2f:7c:13:62:2a:b5:01:0b:b9:23:2d:a1:9a:61:c8:a2:e1:
25:f5:f9:93:23:7a:c6:db:37:11:73:a0:a7:88:fe:15:49:2d:
54:0c:76:e4:18:b6:29:ce:4a:15:45:0b:98:a3:7c:5a:09:54:
0c:8f:b0:2e:37:39:bf:1f:58:04:fe:e8:34:6e:db:8b:2e:8f:
08:16:9f:d1:a5:12:b6:c0:14:30:b1:94:8a:4a:97:09:99:85:
30:46:6f:dd:a0:50:82:39:0f:64:ce:ec:92:95:76:c2:28:a6:
f1:a8:eb:00:6b:d5:b9:c0:b2:0b:f8:a3:af:19:99:93:e7:be:
95:e6:18:fb:bc:03:10:81:13:db:d6:85:44:77:2f:b0:be:fa:
9f:8d:dd:56:8c:9c:46:69:10:46:21:ef:94:18:a5:bd:09:da:
37:34:cf:42:2a:f2:7d:6c:7f:97:62:94:18:f1:12:6f:ac:7c:
fe:dd:cb:75:f4:ca:0a:62:fe:f9:f8:5c:ac:3f:40:c5:69:44:
dd:06:87:c0:77:ec:f5:53:7c:54:58:cd:e7:6b:e4:2d:eb:73:
e5:70:09:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:26:05 2026 by rpki-client