
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b3e57a1-ad34-48d3-89b1-a8ac175138a7.roa
File: 9b3e57a1-ad34-48d3-89b1-a8ac175138a7.roa (raw, json)
Hash identifier: VL7ABs99WVzTOSPncn6J0ZxgLAvY5+Zd9OBBArAVbSw=
Subject key identifier: CF:DD:C7:05:E0:D0:05:E9:B2:42:77:39:A7:4D:A4:D5:6A:43:89:61
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 11CF6D0683654087D7D6683BAD64A8E3F617F8A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b3e57a1-ad34-48d3-89b1-a8ac175138a7.roa
Signing time: Fri 31 Jul 2026 00:50:56 +0000
ROA not before: Fri 31 Jul 2026 00:50:56 +0000
ROA not after: Thu 29 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffb:8000::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:cf:6d:06:83:65:40:87:d7:d6:68:3b:ad:64:a8:e3:f6:17:f8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 31 00:50:56 2026 GMT
Not After : Oct 29 23:59:59 2026 GMT
Subject: serialNumber=16451d6d1f884a04c4a04c6b1282b3c3c953efcb9b2708ab3a66314fd734c166, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b8:50:8a:37:87:90:d0:68:05:2a:0d:7a:0d:
0f:68:71:40:5c:03:2b:c2:a5:54:28:75:73:a3:3e:
cd:20:73:52:8e:7a:4e:a9:46:6b:50:3f:ce:c0:30:
15:36:b5:c8:8d:9b:45:45:77:44:3f:0d:84:6f:5c:
5b:81:98:86:0d:41:24:25:fe:08:55:bd:b0:f0:3b:
65:f2:bb:f8:46:70:1a:67:c4:2b:84:49:e6:6a:89:
91:5e:bb:da:23:ae:ee:f2:af:07:28:91:0b:7c:09:
44:63:94:f9:da:1f:b8:d8:e6:be:f3:af:8c:6f:11:
06:32:1f:8e:45:e7:95:a8:79:7d:66:a5:b6:e3:88:
c5:0a:ef:14:a2:bb:c5:33:34:4d:59:6e:79:f3:c1:
67:b9:1d:45:83:da:30:71:33:43:eb:92:e8:a6:f3:
6d:52:ce:cc:cc:70:4b:56:b5:fc:52:a8:91:c1:4c:
63:fe:ff:61:73:81:c5:68:fa:8c:43:9e:35:13:1f:
e0:ee:b4:39:fe:1c:14:c8:ca:67:1f:af:62:b7:3a:
d9:c6:58:cd:b4:dc:50:bd:26:f0:7b:72:79:f8:02:
f7:e7:b9:ef:1a:48:cb:91:d2:a9:c5:2f:67:59:ab:
29:2e:af:6a:bf:44:69:73:ad:f4:ee:ed:28:fc:83:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DD:C7:05:E0:D0:05:E9:B2:42:77:39:A7:4D:A4:D5:6A:43:89:61
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b3e57a1-ad34-48d3-89b1-a8ac175138a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:8000::/39
Signature Algorithm: sha256WithRSAEncryption
4f:f1:02:ac:9d:1e:e6:b5:58:92:ba:30:65:a5:57:4f:70:0a:
fb:b8:27:a9:f3:d4:32:e0:e8:dc:81:9f:63:6a:fb:3d:a5:e4:
28:d9:c4:d3:79:9f:87:70:ac:c8:3c:e4:76:60:fe:a1:19:02:
8a:9b:ff:36:da:4b:83:9a:20:df:23:be:73:0d:6c:07:82:5c:
f0:d7:a4:3c:f8:8e:17:5a:29:b5:4e:ea:6f:e5:d1:f6:20:e3:
8c:8c:bf:53:a8:ea:1f:d3:8c:59:8e:3b:37:32:b3:73:50:ac:
99:40:68:5f:e8:f7:17:b8:ef:bf:60:a4:10:9e:3a:b9:d6:be:
2b:a5:8e:1a:02:be:66:ca:24:2b:32:11:d0:4e:89:20:08:30:
72:dd:6b:b4:99:19:82:d5:f4:76:75:27:22:da:b9:cf:e5:93:
f6:eb:36:29:a2:2d:64:12:2c:c3:01:40:41:e5:6e:a6:76:b0:
d4:62:99:af:19:24:8a:e0:46:1a:2b:33:2e:de:df:f5:9e:e4:
19:6a:98:61:4f:f2:37:9f:45:78:c9:06:07:09:f8:f3:5d:bc:
0f:14:dc:a8:14:49:c8:43:b3:14:d3:d1:db:77:15:0e:fb:74:
ce:de:d3:73:e5:ea:b4:d4:09:7f:40:6c:41:33:57:ed:49:84:
63:1b:6c:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:57 2026 by rpki-client