
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/887f4922-2c97-4526-af9a-b67399553315.roa
File: 887f4922-2c97-4526-af9a-b67399553315.roa (raw, json)
Hash identifier: Qf9mt6FF7oCvH8fV+s7qvQCKZ76f2vGV/0eJo/wB7Gg=
Subject key identifier: 10:5B:BC:73:DF:55:2F:9A:44:EE:1D:ED:9F:2E:06:37:31:D3:25:71
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2308EE414320C29102B9F3C70E7D877DA3C12DBE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/887f4922-2c97-4526-af9a-b67399553315.roa
Signing time: Thu 08 Oct 2026 00:10:06 +0000
ROA not before: Thu 08 Oct 2026 00:10:06 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ffa:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:08:ee:41:43:20:c2:91:02:b9:f3:c7:0e:7d:87:7d:a3:c1:2d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 8 00:10:06 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=6c8cd7af11451c7236a5c914620afa549455f8b76123e0143fbf53d89a6027b2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ad:d9:40:eb:13:c3:88:e4:cd:dc:73:60:f1:
ce:b1:09:71:d9:17:5d:b4:8b:d1:4c:6a:3e:37:69:
82:9c:f9:8c:d3:1b:b1:5b:0e:f5:93:10:ec:16:4f:
d3:18:55:15:f5:e8:6c:62:bd:b8:18:7d:58:18:6c:
7e:db:a5:f1:c9:ce:b6:ff:2e:fb:8e:7c:be:21:a2:
fa:e1:75:8d:a7:d2:fe:60:08:cf:70:75:2e:73:dc:
53:14:3d:b7:4a:85:1a:b3:95:f3:2f:15:56:35:20:
66:e6:79:bf:c3:62:c4:bb:9b:1e:a0:bc:78:e7:2f:
73:17:db:c6:ec:fa:04:8a:99:98:9e:f1:b1:4b:b9:
f5:5b:e8:c3:48:0a:8b:b5:61:fa:03:c4:3c:f2:e4:
9f:8b:d3:24:bf:43:d4:4c:d0:a0:d5:0b:5d:e4:ba:
87:ec:b7:71:01:13:23:cf:63:22:7e:c1:2b:95:f7:
36:54:1b:3e:c0:ee:dc:f1:72:5e:de:da:a8:dd:ae:
c9:f9:8c:a5:5f:b1:1d:12:1f:cf:e7:2e:6a:9c:77:
6d:0e:cd:29:0b:b5:0a:43:57:c2:01:45:cc:ba:77:
31:95:74:c6:d0:8b:49:6a:6b:0a:fc:37:70:d9:97:
18:dc:4a:54:f1:6f:94:8d:d5:4b:cf:05:db:ce:49:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5B:BC:73:DF:55:2F:9A:44:EE:1D:ED:9F:2E:06:37:31:D3:25:71
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/887f4922-2c97-4526-af9a-b67399553315.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffa:8000::/40
Signature Algorithm: sha256WithRSAEncryption
16:d0:26:16:8a:59:8e:df:a2:a3:f1:77:65:e7:59:7b:51:79:
d7:ca:0f:2e:e3:dc:11:a3:ef:4f:e6:0a:db:ec:95:c3:99:78:
5e:c9:48:e2:5b:54:65:96:7c:1d:57:1c:eb:24:6a:de:41:9a:
87:3e:34:be:66:44:20:e6:e7:dd:dc:eb:96:02:cc:1d:37:45:
2d:91:e4:18:97:83:11:6c:8a:61:2b:15:76:e2:dc:f3:c0:01:
68:cd:2a:f2:5d:fa:cc:dd:4a:cb:2d:cb:d2:83:2a:f7:8d:59:
8e:34:8a:98:60:6a:c9:12:f1:92:da:12:86:71:6a:aa:91:02:
1b:56:2f:5b:4b:13:15:b3:41:49:5e:4f:53:3b:18:3c:85:35:
ea:43:07:f0:a5:62:34:d3:8e:a2:3c:da:85:b8:d3:e6:fa:4d:
61:c9:5d:2f:39:49:bb:7d:7d:fb:1e:90:07:e5:1a:c5:31:3c:
25:32:67:09:6b:54:af:71:91:9b:6c:28:72:57:93:f8:2a:99:
09:a3:87:69:00:c1:21:41:1b:91:b7:b3:f7:d1:4f:6f:96:24:
c0:71:fe:36:5f:40:21:d3:8e:b1:17:5c:63:8b:c8:56:ca:b6:
da:c0:78:bc:fc:c8:5c:7e:15:9d:ff:fe:e4:d5:8e:ba:6a:be:
82:e6:df:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 18:54:16 2026 by rpki-client