
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d7700c4-2062-4b4c-8fc9-21c7cfb4c1cb.roa
File: 7d7700c4-2062-4b4c-8fc9-21c7cfb4c1cb.roa (raw, json)
Hash identifier: TP5OehAhAyFfTvheFXTSX/Mdw0VWmYK7p4dwi2mWN+U=
Subject key identifier: 64:45:EB:1C:41:A1:E6:37:73:C5:B3:D3:DD:2F:3F:5E:41:A1:F1:F0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6455CE0F6B6CFA5F69D0695F30ED8ABC231BBF02
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d7700c4-2062-4b4c-8fc9-21c7cfb4c1cb.roa
Signing time: Wed 09 Sep 2026 16:03:38 +0000
ROA not before: Wed 09 Sep 2026 16:03:38 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fe7:8000::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:55:ce:0f:6b:6c:fa:5f:69:d0:69:5f:30:ed:8a:bc:23:1b:bf:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 9 16:03:38 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=223d7de2ad528eae36834a7c7d83bd55c1e8856ca70789713e5682540dcd557c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bd:63:7b:63:32:64:1e:2b:f8:05:c1:8d:2c:
13:f6:74:63:4c:64:ce:3d:6f:63:cf:10:4e:2a:da:
74:04:1a:78:bd:74:fe:c1:55:b7:0f:f9:b2:72:3d:
4c:de:e9:76:54:19:0f:38:16:8a:ce:0b:7b:9f:56:
b1:24:b9:8c:cd:05:77:a8:aa:7f:3e:b7:4c:d9:82:
3c:a6:be:2a:62:85:ee:72:35:59:e7:23:cc:35:dd:
c7:f5:51:23:00:d6:c2:3f:bd:82:d5:e8:8c:61:67:
0a:65:90:d2:b8:cc:be:90:c1:94:03:d9:3f:95:4c:
86:21:90:70:13:0a:eb:80:54:e7:d7:72:a3:8c:7a:
7c:bd:99:c0:49:26:23:9f:0f:4e:b9:18:94:ef:98:
3b:02:1d:f7:64:b4:76:59:f9:de:06:94:da:b9:9d:
e4:4d:28:f4:9a:7e:f2:06:d8:72:9e:0a:fc:d7:04:
31:7e:5f:e9:72:7a:6d:57:2c:25:29:ec:34:6a:bf:
4c:e0:d7:29:47:43:bf:24:e9:53:3e:e3:de:55:02:
24:29:a4:75:cd:8a:eb:6d:c3:d8:05:af:90:ae:84:
fa:f4:48:86:a7:11:04:6f:d9:5f:b4:28:6d:eb:7f:
79:b5:21:53:eb:ab:9f:b5:f3:a2:d9:73:2a:0d:a4:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:45:EB:1C:41:A1:E6:37:73:C5:B3:D3:DD:2F:3F:5E:41:A1:F1:F0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7d7700c4-2062-4b4c-8fc9-21c7cfb4c1cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe7:8000::/39
Signature Algorithm: sha256WithRSAEncryption
12:d4:c0:d3:57:8f:ab:4a:88:db:88:f5:37:5e:b0:48:91:70:
24:95:2c:ca:c6:35:e0:f1:a6:07:7e:0b:d7:4c:61:94:3d:5a:
73:63:ad:93:74:58:bd:5d:1f:04:54:86:4c:ef:0d:a3:bb:3d:
ae:d9:c3:c4:be:d7:5d:6f:82:c0:79:44:61:00:74:e4:90:e4:
60:d8:be:6f:6f:95:c6:70:ea:36:27:91:ca:a8:52:cb:57:07:
26:c8:f4:b3:be:7d:dd:b2:36:50:d2:31:01:ee:62:3a:df:55:
b1:6d:89:14:57:84:c7:69:74:2c:fe:c2:d9:d8:8f:02:6a:a4:
38:c9:77:64:60:77:0c:e7:04:85:73:54:76:e6:85:47:90:e2:
cd:2b:c2:e0:5f:69:ef:40:53:62:36:23:92:4f:85:a9:98:e8:
04:0d:18:3f:98:53:ad:48:bd:4b:25:0d:50:a4:a2:a4:4b:c6:
88:57:11:1a:d3:be:2f:74:96:f3:da:d8:09:17:a0:1c:26:87:
97:ae:e6:34:12:de:77:62:17:06:0e:f2:2c:c5:62:bd:39:6b:
dc:45:d7:6f:93:94:4f:aa:39:ee:88:12:07:3c:8c:3a:20:71:
1b:1f:5f:fc:de:fe:b2:f3:b6:a0:21:4a:82:63:92:0f:03:9a:
cd:e7:43:a2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 17:38:07 2026 by rpki-client