
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e937c6a-8e10-4e53-9373-621e5d8a7276.roa
File: 7e937c6a-8e10-4e53-9373-621e5d8a7276.roa (raw, json)
Hash identifier: aAU2XKT7fIkd7wIW2XqNG58s5GtKPynf+KR1JWUbK74=
Subject key identifier: 42:EE:53:A6:D2:2F:C9:E0:14:75:26:EF:4B:17:BA:4E:87:33:54:A8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1339FD842FE319CBFA5E0B973FC2970767150122
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e937c6a-8e10-4e53-9373-621e5d8a7276.roa
Signing time: Wed 05 Aug 2026 00:51:14 +0000
ROA not before: Wed 05 Aug 2026 00:51:14 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.216.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:39:fd:84:2f:e3:19:cb:fa:5e:0b:97:3f:c2:97:07:67:15:01:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 5 00:51:14 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=ea72b848ad528de7483016ed43c55dedaca5748242f751fbd5e40093d4f42c09, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:ea:73:d2:b0:f9:c0:6a:f9:fd:13:fb:c5:
08:b2:ff:75:2d:72:0a:55:9b:8b:3d:71:91:88:22:
7c:f2:80:72:4f:50:43:d4:ed:59:a9:12:81:62:a3:
ba:7f:95:99:62:f6:f6:0e:07:21:7b:7c:8a:98:33:
71:7f:dd:a7:f4:0d:8b:d6:8a:b9:70:01:3b:b7:40:
28:21:e4:af:dc:00:b8:46:61:97:c4:74:db:3a:a1:
9b:48:c5:62:a2:0e:33:aa:f9:08:ce:99:9a:c9:eb:
66:ce:e7:b7:30:08:cf:ee:78:c4:66:4e:cf:c9:d5:
7f:14:90:7d:0e:d7:a8:ed:3f:f0:6d:15:76:31:e3:
d7:f5:f3:45:c8:6a:5e:f1:97:f3:f3:f5:21:dc:ce:
7c:b0:30:7c:f0:ea:0e:31:dd:9a:7d:79:4f:77:a5:
cd:4e:43:2b:93:ef:c2:87:af:29:08:fc:85:c7:30:
39:b4:4c:61:d2:42:09:64:94:01:a1:09:34:85:df:
98:27:b3:81:7c:b7:18:d0:41:fa:88:c5:17:30:49:
0f:94:ec:2f:e3:e6:72:91:22:99:14:26:93:2a:b0:
f0:86:77:67:17:f5:79:24:af:cd:df:10:c7:f6:57:
8b:b7:7c:70:ac:a7:7d:04:33:ca:d1:72:a5:45:41:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EE:53:A6:D2:2F:C9:E0:14:75:26:EF:4B:17:BA:4E:87:33:54:A8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7e937c6a-8e10-4e53-9373-621e5d8a7276.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.216.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bf:b5:69:14:77:34:1b:f7:c8:f9:8e:9c:e1:eb:50:47:5e:19:
27:4a:12:56:fc:d6:cb:1d:81:4b:64:75:fb:00:5a:67:10:17:
9f:d2:78:3c:9f:ec:0e:40:c6:64:7f:48:5b:a7:69:d3:d6:b1:
7c:b8:ff:d2:31:81:4e:38:d9:de:98:b9:f0:65:fc:2e:35:e9:
10:39:c9:ce:72:f6:40:1a:89:b8:66:e3:d8:8c:52:5b:6b:bc:
c1:7b:ec:4b:dc:de:81:34:03:3e:af:41:0a:de:36:06:1e:57:
e7:0f:89:82:36:19:8a:38:bc:44:3c:c8:70:9d:e3:bc:c7:73:
f3:2f:c3:7f:99:f4:03:36:6c:73:25:c5:66:70:71:5d:a6:b6:
06:5e:e7:23:a8:4f:a7:1f:6f:ce:4c:f2:8b:e1:51:09:b4:cc:
25:73:ce:f0:14:cd:8c:92:57:8d:0a:27:9f:39:8e:3d:20:ad:
d8:c3:dd:1e:3a:bc:62:e1:fe:f3:0f:e6:82:32:65:a4:02:f8:
51:7a:9d:5f:8f:f6:20:3c:6f:d5:00:f0:ae:c2:91:cb:c4:96:
91:35:6a:72:a5:6b:be:38:ad:03:c2:38:2b:0c:06:cc:83:84:
a1:5a:08:b8:29:2c:25:2d:e2:0e:03:b6:33:15:34:ae:9d:94:
c2:9f:b9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:48:50 2026 by rpki-client