
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a55b9668-0898-4096-8bd0-529dad81c1b8.roa
File: a55b9668-0898-4096-8bd0-529dad81c1b8.roa (raw, json)
Hash identifier: 96rotR5MaEfiNbHKtr4trWJ+2Jqm8ut2qFXK5BwkgWY=
Subject key identifier: E5:F0:D7:08:92:5E:54:12:4A:CC:C7:4E:65:3A:24:70:D3:CF:90:C9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 34C2E64A63C519E7DB74F21559FF5CD4C4D4050B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a55b9668-0898-4096-8bd0-529dad81c1b8.roa
Signing time: Sat 24 Oct 2026 00:30:12 +0000
ROA not before: Sat 24 Oct 2026 00:30:12 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 57.180.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c2:e6:4a:63:c5:19:e7:db:74:f2:15:59:ff:5c:d4:c4:d4:05:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 24 00:30:12 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=fe4407b7265484d21b7f4ef94ea8c7709312ff0e33d0471b2257f7fe65391cb2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:35:52:6c:72:41:a9:67:9e:54:92:c3:e6:
3a:93:e4:2a:58:c6:c5:95:9c:08:bf:32:16:a3:30:
9c:f9:b5:31:ae:9b:82:5d:71:93:0c:73:cf:88:28:
f3:23:eb:22:30:f7:d9:0d:f0:ce:15:b7:0a:08:34:
6b:0e:b7:39:c4:7a:94:f3:ea:0f:9b:86:cd:b6:5f:
3d:7c:63:bc:2e:7f:bd:44:eb:c6:83:a9:ff:2a:2d:
5b:22:a4:bf:6e:97:8b:a7:48:3d:4d:f7:ea:d2:d1:
0f:75:af:46:58:f7:69:fb:63:61:c7:a6:cb:1e:92:
18:7d:02:bd:fb:8e:e2:d1:22:24:d1:a2:bc:d5:ac:
3d:3c:e3:a5:30:ea:ab:5a:94:1a:ed:c0:8a:bf:7f:
17:7f:a3:5f:64:2e:64:a4:80:1d:f9:29:5f:f1:52:
7e:7b:53:d4:9f:55:c0:8b:88:d2:ae:62:75:bf:ba:
24:67:3f:fd:46:39:58:a2:4e:7f:09:90:27:d8:9d:
12:87:7a:c7:a0:18:59:b8:aa:e1:22:b4:43:7a:ca:
71:bd:1b:2b:60:0d:fc:46:d7:0c:2b:de:42:33:bd:
a5:5d:a9:8b:2d:ae:fd:a2:6c:0f:31:9f:9a:5d:92:
86:7a:f4:57:16:f0:b3:a1:78:e4:83:99:24:99:01:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F0:D7:08:92:5E:54:12:4A:CC:C7:4E:65:3A:24:70:D3:CF:90:C9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a55b9668-0898-4096-8bd0-529dad81c1b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.180.0.0/14
Signature Algorithm: sha256WithRSAEncryption
4c:ac:c1:96:a2:c6:e0:44:fc:8f:15:f9:be:bc:fb:82:31:bb:
3d:7b:41:f4:fe:ea:7e:05:62:42:9b:a5:ab:2b:03:57:81:a0:
88:60:69:5a:cf:ef:51:2d:6d:2c:e3:eb:43:38:1d:d3:d2:02:
33:c5:3e:bd:e9:3a:73:53:94:9f:a2:80:b1:84:db:00:d0:77:
2c:56:0c:74:ba:1f:6e:fe:d9:e2:c6:d5:b8:12:93:be:7e:78:
8c:2f:3e:1b:92:f1:bc:39:8a:fe:63:10:bd:e0:62:81:19:f6:
0d:b7:69:ba:11:d0:ef:dd:8b:65:b1:67:e5:49:f5:25:0b:fb:
6c:9c:e7:cd:16:35:56:b4:83:e9:76:61:1c:6e:4b:4b:c1:07:
ad:b5:e7:34:ad:ad:7a:4b:63:29:d3:ec:1a:c6:3c:31:8f:53:
67:3e:77:b9:51:ea:af:e6:e4:1a:34:79:38:20:09:cf:4f:04:
b1:06:ac:5e:58:a5:54:57:3b:7b:c1:f2:97:5f:c9:5e:dd:97:
5a:8c:a6:13:78:3f:11:6d:3e:2f:67:bf:bf:ec:2c:b6:af:b5:
b6:ee:80:71:52:52:41:fb:58:1c:a9:2b:9c:49:b1:b1:e2:39:
8e:00:07:5e:78:31:b5:4f:34:c1:b2:e7:3d:01:1d:dd:96:88:
27:58:07:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:37:30 2026 by rpki-client