
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/987ee270-8da2-44b1-b542-2a58beb5c981.roa
File: 987ee270-8da2-44b1-b542-2a58beb5c981.roa (raw, json)
Hash identifier: OD6VZUZKLy/CTDDZ/zrrNb+E2HEDl3Ls7HqBDSE0dR4=
Subject key identifier: 25:C6:DC:BA:F4:0F:C0:19:8F:EA:84:0C:72:59:22:73:AD:22:3F:B7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0730F714E42B4DAEA6EC9A17CE3351E992D29663
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/987ee270-8da2-44b1-b542-2a58beb5c981.roa
Signing time: Sun 11 Oct 2026 00:11:38 +0000
ROA not before: Sun 11 Oct 2026 00:11:38 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 13.128.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:30:f7:14:e4:2b:4d:ae:a6:ec:9a:17:ce:33:51:e9:92:d2:96:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 00:11:38 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=1c686642b3a51785f22a81c2fc96fff997fa3afe08968380f2023f40c7735241, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:f0:fd:48:3b:24:39:23:10:65:63:ec:d7:
87:82:d7:3d:41:27:d2:c4:85:3b:b6:3b:60:3e:ee:
29:9a:a2:f9:93:30:ef:84:84:6d:a7:a0:47:38:78:
1e:f7:26:69:4d:2a:16:0b:a1:85:a5:e4:d1:b5:15:
dc:ec:24:41:64:16:31:75:58:d2:bc:04:c3:85:03:
e9:c5:f5:9b:4e:e4:99:12:a7:3a:72:3e:22:fa:3d:
09:79:26:ce:70:da:85:92:9b:66:b7:49:8f:9f:0d:
c5:a6:c1:e0:52:ba:28:b4:34:bb:63:4b:c6:e9:8f:
3f:a4:11:86:3e:22:d7:7d:45:84:ff:0f:5d:a5:d2:
a8:fc:63:e2:fc:93:49:85:4b:fd:cb:84:6a:da:80:
10:53:46:a6:b4:12:12:4a:98:29:6d:ca:2f:2d:db:
f3:8b:73:cb:53:63:99:a5:a0:f7:4d:d4:bb:d8:5a:
15:44:a0:b3:d5:14:ce:52:b5:cb:b4:f4:6b:af:4d:
1e:e1:47:f1:dd:21:15:fe:59:30:84:58:31:63:c2:
f7:07:75:73:d1:1f:7b:b8:9e:ae:50:f4:cc:0b:da:
d6:18:57:40:38:55:98:86:c9:04:36:00:07:74:27:
d4:a4:ae:f0:9a:4c:92:38:f2:9c:37:f2:a3:7d:5b:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C6:DC:BA:F4:0F:C0:19:8F:EA:84:0C:72:59:22:73:AD:22:3F:B7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/987ee270-8da2-44b1-b542-2a58beb5c981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.128.96.0/20
Signature Algorithm: sha256WithRSAEncryption
65:19:61:b4:f3:f5:98:5b:5f:64:df:ec:7a:ca:fb:c2:ef:3f:
5c:1f:2d:bb:49:ec:bb:07:05:2b:e2:fb:10:57:43:d0:3b:a7:
23:f4:04:cd:85:fa:3f:09:92:c4:f8:3d:8c:97:b8:3c:e6:a6:
4f:94:54:95:3f:62:71:e9:99:9d:09:05:9c:3b:1e:5a:d3:19:
13:ac:8b:7b:3a:4c:0d:ca:10:f4:97:88:13:af:5b:c7:c1:7f:
4b:37:91:32:d8:d7:da:64:2a:45:46:65:47:0b:40:cc:b4:4c:
b5:1b:0f:56:92:0c:c9:5b:d2:4e:fc:e5:91:9b:54:35:43:aa:
7c:c5:75:9c:7e:27:b4:45:7c:0b:78:92:86:85:6f:ac:47:a0:
f9:b0:ea:bb:f4:02:8d:64:83:91:1a:11:0c:92:20:f5:28:ba:
c3:26:be:0d:87:9f:cc:aa:22:32:72:94:b9:25:8d:3d:4f:49:
dd:d1:3c:b0:87:b6:5d:04:37:78:99:7b:54:ae:35:a7:c6:73:
3a:49:bd:5c:8c:9d:46:55:bc:17:41:f1:d0:d2:3d:85:43:c4:
0c:0c:26:cf:50:95:27:a7:f9:4c:aa:a5:d5:8e:13:18:01:6e:
0a:21:02:f5:d4:89:57:76:ae:8e:9c:38:95:a2:3a:4c:75:e2:
f5:fe:93:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:01:19 2026 by rpki-client