
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/761cd85e-a8f3-40d2-9207-e2cb83f306c8.roa
File: 761cd85e-a8f3-40d2-9207-e2cb83f306c8.roa (raw, json)
Hash identifier: R6TN2kv+7v40Ndsq9KQ2HNSjjYD1HU5C5C9U7BP1kp4=
Subject key identifier: 6F:C1:EE:2A:44:1B:8F:22:93:26:7D:36:B8:99:CA:BA:B7:17:13:1D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3AA517433B597899923431D90AAD13B18A46A167
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/761cd85e-a8f3-40d2-9207-e2cb83f306c8.roa
Signing time: Sat 02 May 2026 01:11:27 +0000
ROA not before: Sat 02 May 2026 01:11:27 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.10.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a5:17:43:3b:59:78:99:92:34:31:d9:0a:ad:13:b1:8a:46:a1:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 2 01:11:27 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=60e29dd033ee7e4f161792f522ca1cb879d2221a2c25e8ab27d4e5bb9acdd03f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:36:b8:a2:3a:6f:0c:e2:bc:cd:8e:c3:f7:
64:92:27:13:75:bb:89:de:c2:12:9c:7c:15:84:a4:
e2:cb:a6:ca:38:37:0f:01:16:24:d9:15:13:2c:c8:
93:dc:f7:b5:bb:8c:84:54:20:21:58:f9:88:77:d5:
6c:5a:f1:6e:d2:83:d1:9d:73:5b:77:de:09:89:dc:
69:7d:41:50:45:33:88:3f:9c:ed:a9:41:bf:b3:bd:
7f:5f:67:78:c9:8e:5c:3c:0f:2e:88:40:89:43:a2:
86:86:4c:54:a7:49:7a:22:87:bb:c6:1a:88:2c:a1:
39:eb:b1:94:cd:ef:02:75:0a:bf:3e:7b:87:83:c1:
d7:4e:67:6d:34:c0:dd:2c:e7:00:03:6b:d5:4c:31:
51:5e:25:4e:da:ed:32:58:53:11:d1:e1:92:32:ca:
92:47:da:c2:96:2a:7d:ca:a4:4f:19:fc:25:97:b6:
58:4f:f7:3e:8a:1c:d0:2a:b7:7c:cc:c8:b9:06:3e:
13:42:05:9d:02:b7:6a:7e:f9:1a:d5:21:d2:80:0c:
2d:97:52:d0:0e:6a:b9:88:55:86:9b:6f:44:89:67:
21:d4:e7:85:1f:3a:a1:a8:96:0d:8a:b8:43:50:75:
d7:c2:4f:29:8e:3a:a0:2a:56:b5:14:92:76:2c:d0:
43:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C1:EE:2A:44:1B:8F:22:93:26:7D:36:B8:99:CA:BA:B7:17:13:1D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/761cd85e-a8f3-40d2-9207-e2cb83f306c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.10.128.0/17
Signature Algorithm: sha256WithRSAEncryption
86:5c:4b:7d:7c:2c:c2:50:8c:12:46:31:00:b3:4a:21:41:a0:
bb:a6:cc:31:e3:64:1e:61:9e:38:0a:c1:82:f8:2c:3d:56:7a:
59:c1:7f:d4:b4:ab:5f:ea:4b:88:3c:ca:5c:0d:8d:b5:14:27:
77:53:1a:2d:8b:ec:14:84:1b:d7:05:8c:52:04:e3:8c:cf:ce:
20:41:9b:28:2c:a5:12:9f:8b:f0:f7:b0:dd:86:5e:43:6a:4e:
f2:ee:3c:40:fd:5d:a3:b0:8b:77:0c:4c:e4:4b:84:c6:c5:28:
48:24:a0:3c:cb:c2:4d:ad:80:13:c5:69:7b:31:5c:9a:a8:4c:
48:f8:62:c5:b3:67:a6:59:97:44:a5:4a:06:61:d6:e5:e3:a0:
a0:8a:19:4d:8d:98:15:e8:9f:9a:76:0b:20:07:82:54:bd:d7:
77:d6:e9:3f:68:e0:13:58:14:8c:58:41:16:a1:63:68:14:0c:
cb:e9:94:b9:97:8f:35:36:45:04:4d:3a:e3:34:01:2b:02:65:
c2:47:1b:be:ac:07:2c:45:4a:dc:3f:fa:fd:51:d4:f9:59:c1:
64:cd:10:70:5e:ef:5a:74:be:8b:58:fc:47:e7:c0:d6:c1:94:
29:b1:4e:ad:5d:37:fa:e6:c1:01:b4:5e:b4:e2:a2:31:6e:35:
95:a2:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 22:21:15 2026 by rpki-client