
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89bf0d24-c4a8-4cec-aaab-f602731068f9.roa
File: 89bf0d24-c4a8-4cec-aaab-f602731068f9.roa (raw, json)
Hash identifier: qMPcGd4jgqkBO8XZkxyp/rj/ojvTz/4v8B29NmqWHI8=
Subject key identifier: 3A:AB:8E:3D:F2:AB:A1:50:D7:BA:A2:A0:8F:17:AF:64:87:A7:45:7D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0BC8BB029E7ADDC92AFA70ACDE52FF5BB7F1085C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89bf0d24-c4a8-4cec-aaab-f602731068f9.roa
Signing time: Mon 03 Aug 2026 02:10:06 +0000
ROA not before: Mon 03 Aug 2026 02:10:06 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c8:bb:02:9e:7a:dd:c9:2a:fa:70:ac:de:52:ff:5b:b7:f1:08:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 02:10:06 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=c837675796b153b9626d72cd4e6592c1f2e0ddc13b126074eb00c37409127bcb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:80:ef:3a:98:c8:5c:6c:41:bc:17:7a:c7:
e1:55:25:6c:2f:8c:15:f1:5e:c4:00:c7:d9:b4:b4:
9f:f9:f1:70:07:f7:ab:83:a9:4e:58:67:6f:2e:d8:
d0:c8:7e:63:ad:ca:93:c2:6b:33:2f:c6:de:aa:77:
d2:c5:42:a6:d8:0e:4a:e7:56:32:57:5e:86:70:f8:
9d:44:6b:35:24:d0:80:09:d0:b3:d6:12:87:0c:13:
bb:78:15:c6:46:17:9a:f1:a3:ce:fb:ad:6f:c7:77:
c2:14:66:91:8a:dc:88:f4:d9:1a:ff:5f:6b:b7:8f:
34:8e:40:0e:62:19:37:ce:26:7e:27:42:96:23:de:
fd:2e:94:4d:f5:fc:a5:7d:5c:b7:74:90:ca:92:53:
bf:8c:c6:5c:3e:17:ad:80:0e:52:b9:c1:ce:e1:5b:
70:43:c0:da:9a:91:2a:78:31:7b:de:75:9b:fc:d8:
4e:f4:b7:c8:6a:64:02:02:f2:90:7d:57:73:18:5a:
ec:27:2a:51:c7:8d:33:a9:7a:db:ca:c2:ec:7b:de:
30:38:c7:e0:a2:ac:e6:d6:df:c4:7f:06:0b:05:6f:
9b:ab:76:ad:64:b5:45:79:d2:3c:c0:34:6e:2e:cf:
c2:06:0b:f6:2e:e1:8b:cb:1c:aa:42:6c:a8:9c:59:
2b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:AB:8E:3D:F2:AB:A1:50:D7:BA:A2:A0:8F:17:AF:64:87:A7:45:7D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89bf0d24-c4a8-4cec-aaab-f602731068f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:6000::/40
Signature Algorithm: sha256WithRSAEncryption
8b:c1:42:e6:fa:cc:7c:d4:4e:f3:10:c1:78:f1:8b:af:35:5a:
e7:15:9c:fc:d6:be:d4:41:82:fd:cc:9b:6f:eb:ad:62:88:6a:
38:12:ee:7f:35:6f:54:10:0a:4d:10:a8:b6:20:08:05:92:90:
9e:5b:a0:c3:97:a7:c3:1a:7e:ad:61:c9:85:38:22:1d:be:5e:
4d:ee:1f:69:43:25:5c:5c:49:e6:41:8b:5e:52:36:d4:82:9b:
2b:2f:0f:36:83:16:b2:24:53:ef:3f:a5:a9:52:8f:bc:89:21:
1b:0c:4e:17:51:2a:34:74:a7:3c:44:9d:38:c4:62:3b:74:a0:
5e:ea:7b:34:59:b9:ce:32:e1:6a:20:f2:b4:59:ac:e8:cb:a6:
82:ba:0b:a8:73:b6:e5:6a:f7:75:21:ef:a5:09:20:e0:d6:e0:
b5:85:7e:19:45:04:04:84:2e:bc:99:cd:e2:9d:89:33:06:4b:
bb:39:9a:7a:aa:c7:64:94:65:bf:fd:a8:8b:c6:ea:0c:2a:f8:
dd:22:38:50:a9:2b:b7:04:10:c0:e8:79:1a:06:0a:53:8a:70:
a7:d2:ca:22:fe:ec:e2:2c:28:2e:82:67:db:1a:c4:18:6f:1d:
4e:50:d4:58:52:e1:64:1f:1c:9e:17:aa:05:3a:9d:f9:1a:c1:
f6:c0:b9:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:25:48 2026 by rpki-client