
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75348837-a3af-4496-a175-7de8cd226873.roa
File: 75348837-a3af-4496-a175-7de8cd226873.roa (raw, json)
Hash identifier: fDeYbEcetTaA2Y278AKqBjSI8E7cSQT4Wgu+B+wfCAo=
Subject key identifier: FD:4D:F6:B9:9E:82:E0:1C:55:3A:CC:28:57:7E:35:43:EA:DE:F5:77
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4CDB02C8227449FD96D777F67327308CDF2D1AC8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75348837-a3af-4496-a175-7de8cd226873.roa
Signing time: Fri 16 Oct 2026 00:21:13 +0000
ROA not before: Fri 16 Oct 2026 00:21:13 +0000
ROA not after: Thu 14 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 32.196.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:db:02:c8:22:74:49:fd:96:d7:77:f6:73:27:30:8c:df:2d:1a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 16 00:21:13 2026 GMT
Not After : Jan 14 23:59:59 2027 GMT
Subject: serialNumber=d8ab70cb594281cc3abee178c07a43045b34c143006cd2f18170fb0ce5ea53ef, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:16:03:4f:40:61:e9:85:76:42:09:f9:aa:
53:92:1c:6d:7a:0e:22:74:62:e5:ad:65:18:31:27:
2e:6f:a9:6b:fc:9a:36:90:a4:3f:c3:95:df:0e:e4:
be:21:37:ee:cc:e6:59:5e:5b:3f:3f:13:08:0c:77:
7a:81:5d:52:c8:23:55:80:1f:e4:fb:79:c0:39:ce:
c3:4e:67:13:cc:96:e4:02:d7:fe:eb:31:b2:dd:db:
ec:20:f6:03:f5:ad:28:d5:6c:22:72:4a:aa:70:d9:
63:b4:1e:bc:2e:82:8a:44:6e:02:7f:44:ec:b8:ac:
df:f8:99:42:98:38:ce:e2:1f:58:8f:bc:3d:9c:3d:
36:f2:4e:0f:10:65:03:d4:61:b4:ec:79:57:1b:98:
15:fc:d2:7f:ef:c9:83:12:07:22:43:a3:4a:bf:74:
f0:9e:b0:a9:34:ff:50:2c:09:50:48:03:2e:96:72:
aa:d3:92:9a:25:3e:da:3f:c7:a3:fb:f9:3a:24:58:
23:3e:2e:c6:ee:a9:2a:1d:4b:66:d3:8e:00:4a:56:
ab:ca:e6:87:8b:ac:66:31:a8:50:99:c6:76:2b:3f:
9f:de:10:c3:ce:de:f4:bd:75:62:43:66:12:58:b5:
5f:2f:cc:9b:ed:6e:e2:6e:65:b8:52:3f:d3:36:f1:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4D:F6:B9:9E:82:E0:1C:55:3A:CC:28:57:7E:35:43:EA:DE:F5:77
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75348837-a3af-4496-a175-7de8cd226873.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
32.196.0.0/14
Signature Algorithm: sha256WithRSAEncryption
c0:af:ec:ae:bc:61:94:db:2b:d6:72:c5:65:42:83:e3:3a:a5:
25:dc:ef:bc:08:0d:f5:66:de:fb:16:2e:7e:5e:a4:35:a8:3c:
dc:9c:80:ca:d2:c5:30:4d:f4:5f:3c:04:8b:8f:88:17:c4:b7:
44:9d:bd:6b:90:61:dd:db:df:38:4f:eb:a8:09:4e:2b:26:41:
c6:ab:f0:76:44:e7:3d:15:36:d6:08:8b:90:f3:92:ad:4a:a7:
0c:b9:bd:d7:e1:41:ed:7c:79:49:c2:2a:cc:2b:7d:30:46:cb:
c2:a6:dc:cb:d8:55:12:be:34:47:4d:10:6d:bb:16:e5:e6:7c:
fe:5d:3c:bd:23:36:ab:e6:7a:2d:f6:ae:a3:44:62:09:00:13:
c2:9f:f1:15:3f:3d:47:03:9c:14:50:24:66:f0:fb:e0:32:85:
37:e9:ca:b5:2a:b7:ab:9a:64:b4:fa:48:9d:09:26:5f:c9:a0:
cd:65:ec:89:1d:4c:94:d3:32:da:28:42:1a:f2:55:7c:ff:7c:
ec:ce:f4:c1:aa:ca:16:f0:1e:ed:cc:11:00:55:24:49:01:ec:
ad:23:b2:21:cd:a9:58:db:ca:46:9e:79:45:89:ea:1b:35:ad:
2e:65:43:05:b6:85:6b:27:8f:5c:46:0b:82:0c:35:cc:cb:ad:
25:5f:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 19:21:13 2026 by rpki-client