
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9966156b-f417-4a6b-bee2-368635ac93a8.roa
File: 9966156b-f417-4a6b-bee2-368635ac93a8.roa (raw, json)
Hash identifier: f4B2vH9SmWOT3PCXffuqQ7FZDK1HnGjLbtlXOI/qmIQ=
Subject key identifier: 0E:F5:99:6B:75:73:D8:CA:05:2D:DD:F6:34:28:14:2D:9A:82:D3:93
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 659CBF2BCE364BC79E128E9004862D308CE6FD6C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9966156b-f417-4a6b-bee2-368635ac93a8.roa
Signing time: Tue 04 Aug 2026 01:30:37 +0000
ROA not before: Tue 04 Aug 2026 01:30:37 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f2f:8000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:9c:bf:2b:ce:36:4b:c7:9e:12:8e:90:04:86:2d:30:8c:e6:fd:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 4 01:30:37 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=aded955bf698cb5f4cb926fc4027c90a7b941ffeffaa8d5b5b1cd53139f59ede, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:8c:f7:e9:7a:de:09:d7:0a:ae:88:51:8f:
f6:95:34:75:2a:09:51:8b:cf:83:fc:32:5b:99:00:
40:0e:38:1c:e8:0e:19:94:1b:c1:2b:7c:de:99:f2:
b5:51:bc:21:d4:ad:09:c5:33:75:e8:44:17:d9:5c:
55:f6:25:5a:5c:7b:6c:5f:95:f4:6b:25:9d:1b:c2:
46:29:71:0d:c8:6c:4e:77:53:60:da:8f:04:92:86:
82:63:92:0b:78:b0:89:ce:7b:70:46:5d:3c:26:0a:
c8:8d:f7:ef:4f:d0:ca:0a:33:37:ab:b5:ce:3f:3c:
5c:a0:52:d9:1d:6b:c7:da:73:5e:bd:1e:8c:c5:3e:
00:d3:74:1d:10:93:16:0a:d1:79:94:9a:d5:4f:5d:
1a:7c:40:d0:14:2e:fe:1a:b2:7c:2c:d1:27:98:60:
6c:3b:9a:4f:f5:2c:1b:14:0e:70:37:27:0a:42:6d:
ce:1a:79:3e:57:45:31:ba:de:f6:80:79:22:b6:e8:
96:63:b1:67:63:f1:e9:b5:67:34:f1:d5:1d:23:9a:
50:8c:08:db:41:a0:22:b3:61:5b:c5:2a:41:cf:ed:
6e:47:e3:e0:25:d2:0d:4e:1f:37:2c:8a:15:e9:c4:
61:fb:e4:9f:03:c4:b8:8d:ad:32:50:f6:b9:ce:79:
c9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F5:99:6B:75:73:D8:CA:05:2D:DD:F6:34:28:14:2D:9A:82:D3:93
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9966156b-f417-4a6b-bee2-368635ac93a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f2f:8000::/36
Signature Algorithm: sha256WithRSAEncryption
56:3e:c6:ca:76:5d:35:62:b8:7d:84:86:a6:0c:1b:16:1b:55:
e0:7e:d9:46:f8:a8:2f:98:c7:e8:f9:8c:55:20:22:91:ce:78:
87:45:87:1e:25:08:99:e4:3e:36:3f:7a:21:e5:95:36:37:f8:
95:9d:14:19:f3:8d:a0:54:5d:da:e1:bf:9f:71:f2:4d:b1:d6:
7a:19:2c:9a:fd:17:af:b1:66:51:6e:f1:ed:0f:83:a4:99:f7:
77:b3:50:06:75:08:87:42:06:7c:cd:05:c9:5b:95:57:0e:d9:
08:af:f2:84:f3:bd:4c:70:b8:2f:e8:4d:b1:a7:22:17:c2:9e:
fa:46:6f:15:32:3f:c6:52:cd:ed:17:ea:e7:51:91:db:38:02:
0c:98:3d:7f:52:9c:3f:24:25:13:43:73:01:63:bb:c0:74:b4:
9f:98:60:c3:26:3b:51:c3:6b:69:eb:02:cd:f8:8e:79:5d:98:
e9:98:59:ed:60:5b:58:ac:e3:e6:9b:e8:6f:65:ca:0f:e2:db:
e1:17:3b:c6:c0:ac:51:2a:1a:e9:62:ad:7a:18:97:42:77:6f:
f2:c7:3d:94:a8:af:d4:a0:b8:9d:32:e3:83:f1:61:30:bf:f6:
75:15:26:85:03:e0:7e:27:15:6c:81:3a:75:96:b3:f8:a8:c6:
a1:64:5b:c6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:42:53 2026 by rpki-client