
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d3018e-63fb-460a-b3c8-45fa3ef0298d.roa
File: 91d3018e-63fb-460a-b3c8-45fa3ef0298d.roa (raw, json)
Hash identifier: Ti4yWAoaR7z2xCGcSQ72bihzPoTA3W+4V4LH5YQsafQ=
Subject key identifier: D2:CB:19:7C:93:14:55:28:46:1A:9D:4B:AB:2B:08:C9:99:31:77:4F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4F00E007341B0ED10B6672C9B926189E6BFBD830
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d3018e-63fb-460a-b3c8-45fa3ef0298d.roa
Signing time: Sat 02 May 2026 01:01:29 +0000
ROA not before: Sat 02 May 2026 01:01:29 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.10.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:00:e0:07:34:1b:0e:d1:0b:66:72:c9:b9:26:18:9e:6b:fb:d8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 2 01:01:29 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=8a4594925a7fd26dda3b6046167e232374de5bce8a1ce57fdaacc285b849a413, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:09:91:35:94:3e:c7:3d:61:3a:ea:bf:20:
c7:1a:87:c5:e1:45:11:5a:82:94:1a:58:18:e9:ea:
85:02:12:00:8e:3a:df:0d:c6:be:58:19:0a:cd:c5:
7b:9a:e8:45:3e:90:24:21:c2:80:04:fe:2d:ea:55:
56:a4:ba:bd:1d:fb:76:5b:af:73:35:dc:16:2e:3f:
23:e7:73:8c:12:73:94:1c:6d:c6:37:93:a7:6e:ac:
c6:01:f5:af:29:f4:b7:7b:aa:6e:a4:e4:10:f8:d1:
7b:8a:50:02:99:67:fa:d8:43:71:ba:16:b2:dd:4b:
d6:fe:1f:63:55:57:e4:d5:70:c2:f6:16:df:2b:b9:
87:ab:e8:09:87:e3:64:c6:85:8b:27:0a:16:f6:cb:
82:92:65:00:4e:32:da:9e:2a:5c:25:7f:95:0c:d6:
dd:55:ea:30:2e:be:64:84:f4:bc:d1:d0:c2:66:bf:
f5:bc:b0:a3:94:b0:65:b8:ad:fe:92:07:69:cf:e9:
82:b9:55:3d:39:e3:0e:c1:79:36:89:50:c1:f8:dc:
d6:3c:ba:28:a5:ba:8b:9a:c2:aa:bc:1e:0b:b2:c0:
4a:f6:2c:72:ea:81:5b:61:b2:47:2d:77:bc:2b:fa:
80:62:9d:2e:cb:5e:d3:bb:a1:19:b6:ff:1c:96:4e:
a1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CB:19:7C:93:14:55:28:46:1A:9D:4B:AB:2B:08:C9:99:31:77:4F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91d3018e-63fb-460a-b3c8-45fa3ef0298d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.10.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6f:cd:c9:fc:e4:1d:b0:c0:a6:53:51:eb:cb:cb:3d:ef:0f:c3:
ab:92:de:3e:2a:f2:5a:21:78:c9:99:49:c7:d5:92:de:d9:12:
84:82:42:65:3d:35:e5:79:34:dd:b4:f8:f4:ec:f5:5f:09:01:
a5:af:a9:c7:33:c1:e1:1b:a2:f6:06:3e:33:eb:5c:80:0c:cb:
81:ca:4e:36:0e:ec:74:58:0f:7e:b6:e2:3f:cb:86:fa:6d:b6:
52:91:2a:ee:aa:f2:bd:b5:99:53:97:41:ff:de:7b:27:f7:0a:
63:7c:dd:eb:ce:fa:81:c9:da:23:68:ea:27:83:2d:20:59:94:
19:00:3f:35:63:85:8a:84:51:5a:cf:85:3d:7c:ad:07:3b:e8:
3e:e9:28:eb:11:0d:4d:13:e3:1e:d0:7d:82:fc:db:85:bb:a9:
d7:6d:62:2f:a2:96:29:be:f0:37:b1:e2:4f:8e:bf:84:42:bc:
96:67:8e:36:3e:fb:08:8c:57:61:08:b5:9b:2b:4d:a8:05:65:
da:2d:fc:fc:4b:58:70:fc:7c:40:fe:fa:00:bd:f8:5f:73:a8:
f2:71:61:23:95:9c:8e:ee:a1:b9:dc:e4:4f:28:e9:9e:0f:d3:
4b:c3:61:76:7e:c7:8f:70:7f:94:10:ab:1b:ff:12:7a:a2:0b:
06:7a:bf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:29:58 2026 by rpki-client