
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8abeef96-6bb3-461d-ba23-da389d854132.roa
File: 8abeef96-6bb3-461d-ba23-da389d854132.roa (raw, json)
Hash identifier: arddkUwpTgCVqtm6E0sBDO/lkcRDiB4g2R4V1oLh2y8=
Subject key identifier: 9A:BE:28:7C:05:E9:27:E8:4E:0D:CE:F5:84:94:8C:08:77:25:CE:23
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5BB46511F8216400324435AA33BCF9AC5E5E3FDF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8abeef96-6bb3-461d-ba23-da389d854132.roa
Signing time: Thu 22 Oct 2026 01:11:07 +0000
ROA not before: Thu 22 Oct 2026 01:11:07 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff2:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b4:65:11:f8:21:64:00:32:44:35:aa:33:bc:f9:ac:5e:5e:3f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 01:11:07 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=9f59032b530aa98b47edd5577efe6319fc63ed43ec11e0a221c6d38608db0593, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dc:b6:10:4b:12:90:1b:73:97:81:7a:61:a2:
68:f7:c6:83:48:1f:9b:0e:80:0d:55:94:43:e6:c8:
64:cd:8b:a6:40:20:2e:71:6b:d4:d9:dd:05:f5:85:
5d:a0:e0:26:27:64:13:cb:c1:76:30:7d:ce:b2:b6:
29:30:f8:06:80:d3:d9:5c:f1:e5:d6:d1:f8:1e:44:
4b:15:2f:91:9d:e2:92:71:1f:b3:8d:fc:16:f6:8b:
47:ed:7f:ec:66:51:89:6e:c6:9a:66:fa:80:46:77:
b0:48:c3:ef:14:b6:89:b6:6a:53:e5:00:10:ba:38:
6c:69:58:3b:8d:14:31:e0:6e:83:01:2e:05:bd:c0:
82:53:77:52:14:b6:6a:7c:ea:0c:d3:14:7e:e3:85:
c7:7f:57:b5:72:3d:c7:ce:ae:bc:ac:ab:f8:a0:4b:
e3:ce:1c:48:b7:ea:b6:70:c3:ac:34:b7:0e:a8:f8:
3b:56:9a:85:79:86:58:95:28:af:e1:6d:d3:68:11:
4f:52:1e:63:34:40:05:91:ba:93:3d:81:fc:65:c2:
38:34:48:f9:84:29:0b:df:55:f9:93:2a:b7:d2:72:
00:b7:d5:ba:a0:16:a6:83:df:ea:a3:c7:52:2f:c5:
6e:13:c8:dc:fb:b0:f6:1e:6d:4d:84:ae:0e:d3:46:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BE:28:7C:05:E9:27:E8:4E:0D:CE:F5:84:94:8C:08:77:25:CE:23
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8abeef96-6bb3-461d-ba23-da389d854132.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:2040::/48
Signature Algorithm: sha256WithRSAEncryption
d3:f9:0a:03:46:ff:6a:b5:5b:d4:7e:e1:de:99:21:8a:23:11:
20:9e:e3:f3:9c:b6:61:b8:e0:f1:0f:09:f0:34:a9:e7:bb:6c:
dd:e8:36:8b:12:5d:f0:55:81:27:00:27:a3:73:04:9c:f7:24:
e1:2c:17:c5:f2:92:14:32:24:aa:d6:1c:d1:02:28:c5:8b:c7:
f0:0d:a1:98:d2:54:5d:d7:08:49:5b:72:74:ca:39:b5:01:88:
8c:fb:60:0a:3b:4d:eb:25:03:0d:23:78:0f:d5:7d:32:78:8d:
f1:5b:03:0b:55:88:53:af:07:12:85:9a:5e:b0:ee:90:a9:71:
10:71:06:c7:bf:85:93:d3:be:b7:fc:81:f7:74:50:c0:18:2b:
cc:b3:40:71:67:b2:79:46:09:9f:cd:b2:2c:5f:14:ef:21:65:
9c:cc:3c:fb:99:be:d1:78:af:0d:5e:67:6d:b2:9e:8e:f5:58:
f4:a4:32:95:2b:25:3e:60:59:16:fa:69:73:38:8e:16:74:99:
b3:dc:c6:4e:b3:ba:0c:54:d1:20:46:d7:47:dd:70:ec:52:30:
c8:42:5c:ba:54:d4:c0:7e:2a:5c:dc:70:89:4a:55:3f:60:6f:
68:3d:f7:63:66:d2:10:53:58:a7:8d:2a:68:53:3e:42:7b:23:
3c:6e:b4:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:55:09 2026 by rpki-client