
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99cbe0c5-2f24-4875-8b2e-78f72a3732b7.roa
File: 99cbe0c5-2f24-4875-8b2e-78f72a3732b7.roa (raw, json)
Hash identifier: YVGNxQ5bdgAvMJXlf9qdbMukjlrGu15+ZsbKwXGuAIU=
Subject key identifier: 18:23:74:E6:93:34:1D:52:FB:AC:CF:9B:8C:55:C2:99:D4:F9:09:07
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 220E7E321D0D515CDDC81BAB1598467547489A7E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99cbe0c5-2f24-4875-8b2e-78f72a3732b7.roa
Signing time: Thu 10 Sep 2026 00:21:30 +0000
ROA not before: Thu 10 Sep 2026 00:21:30 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1feb:ecc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0e:7e:32:1d:0d:51:5c:dd:c8:1b:ab:15:98:46:75:47:48:9a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 10 00:21:30 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=47ae19e62ba03c7111bd9c5977f0d28f48b37eca609cf83b8d05714adec0fa8f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:b6:30:e1:17:41:de:17:a2:46:cd:a4:e0:
e4:f4:87:f5:f3:55:69:a4:c8:7f:ab:74:cd:f7:83:
a3:c5:18:94:c5:34:c4:72:41:4d:10:57:81:ec:0e:
9c:9b:91:1e:fd:b1:17:9c:f8:c9:a7:16:7f:94:f2:
de:21:7d:31:d4:88:59:58:cb:ce:54:55:31:b5:b1:
82:13:4e:b3:42:bf:31:8c:20:c4:18:33:62:26:41:
9c:b4:01:9a:33:1d:a5:23:c7:04:03:5c:87:a6:07:
fd:58:a9:c6:a8:10:8a:f9:65:0e:b8:8e:f0:02:18:
73:96:56:6a:e4:99:60:9f:35:35:6a:85:39:9f:8d:
9f:9d:8c:d4:34:7e:ed:9c:2e:a5:92:b5:f9:e2:8b:
6a:65:d9:8c:2d:c9:88:38:15:c5:b7:98:6c:b7:ca:
0d:33:f6:4a:18:bb:e2:72:0d:a0:3b:a3:a8:47:8f:
68:f8:75:b2:a8:c8:02:2c:f3:25:3b:1b:a9:2b:42:
9c:46:4d:df:f2:02:35:98:71:54:c7:d3:60:6d:97:
60:bf:67:d6:6b:22:be:02:d7:91:b1:85:8a:63:7f:
8a:9c:cf:f4:b0:dc:96:cb:dc:68:45:1b:ff:72:ed:
67:64:ad:47:f6:6d:1b:df:c4:2b:86:79:04:db:08:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:23:74:E6:93:34:1D:52:FB:AC:CF:9B:8C:55:C2:99:D4:F9:09:07
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99cbe0c5-2f24-4875-8b2e-78f72a3732b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1feb:ecc0::/48
Signature Algorithm: sha256WithRSAEncryption
63:1a:e5:9d:6f:ef:b6:74:b7:07:13:30:20:12:77:35:9c:85:
dc:a3:25:20:44:5c:4c:72:60:da:95:30:97:5b:0c:62:dd:a7:
fb:82:66:57:d4:b0:10:81:d4:17:11:8b:91:b0:db:6e:03:4d:
7c:db:63:96:3a:77:9f:99:9b:56:fb:61:be:9a:17:41:8f:fd:
1a:17:d3:74:aa:52:95:d1:82:90:93:ee:8e:97:f9:8f:38:d6:
ae:1f:6b:0b:22:0a:06:af:7a:71:1a:09:98:2f:5c:a5:02:b2:
2a:4c:5b:6b:2e:a6:6f:e4:85:be:5b:07:aa:ec:45:09:54:9f:
b0:6d:b3:a7:5c:c0:e3:dd:68:72:5e:c7:9b:dd:37:c2:36:d9:
cf:1e:45:73:17:46:27:f8:67:a5:84:db:45:e2:b6:51:38:a2:
22:bc:cc:23:f5:09:fd:db:11:32:6d:8c:c4:05:ad:d9:ef:2e:
63:39:a8:2e:30:4e:a6:32:03:29:29:d0:b7:db:d1:fa:a6:d3:
63:e8:33:4d:04:e9:84:46:a0:94:f3:6c:d1:34:9a:aa:c4:76:
b1:33:a7:33:89:6c:93:cc:67:61:a0:03:8c:ff:c5:1d:a6:9c:
c0:50:39:e0:87:2e:f6:5a:0b:87:95:a7:73:e8:6e:49:1d:c6:
de:89:38:b7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:14:32 2026 by rpki-client