
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b83b4456-b47a-4704-9a02-901de65eef8a.roa
File: b83b4456-b47a-4704-9a02-901de65eef8a.roa (raw, json)
Hash identifier: 2BaXr8U+YP1VWT1LUpdmxIS3VpozIzqVlolv8aAS69s=
Subject key identifier: 13:25:FF:9C:52:F1:F0:B1:57:5B:29:9C:D1:1D:B2:6B:CB:B6:CD:FB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 070D2C45B5CDEB21D7D266883275D4466BD3671B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b83b4456-b47a-4704-9a02-901de65eef8a.roa
Signing time: Mon 10 Aug 2026 00:50:09 +0000
ROA not before: Mon 10 Aug 2026 00:50:09 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1feb:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0d:2c:45:b5:cd:eb:21:d7:d2:66:88:32:75:d4:46:6b:d3:67:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 10 00:50:09 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=56e51da8af4feca1ed989a658c1795b469606346ffe25441e5024c3da1327565, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8e:61:55:9c:8b:5b:3b:e9:e7:b9:8e:da:92:
d2:df:a5:1c:05:80:8b:3c:b4:e3:0d:3a:59:b7:a0:
eb:68:a3:a5:30:81:29:7e:6d:34:36:63:64:6c:f7:
fc:28:24:4a:6e:1f:89:a2:55:5d:0b:57:31:95:a9:
a2:a5:a8:83:75:b4:83:63:e5:af:d0:67:66:fd:15:
80:52:1b:7a:59:21:75:0c:f2:ec:70:7d:7e:36:e9:
8c:09:a1:b5:5a:d3:36:47:fc:31:df:a7:8e:36:97:
0f:69:f1:87:36:fb:1c:29:c5:fb:e3:47:26:18:2f:
69:fd:cf:0d:3c:fb:fb:d9:30:75:6e:c0:b0:cb:40:
68:93:d5:ca:f8:ae:17:20:95:87:e7:95:d3:86:e9:
c1:46:4f:d0:3e:d9:c9:c9:1b:01:43:42:8e:89:74:
29:84:9c:e6:1f:4c:8e:75:22:e4:de:06:9d:9c:2a:
a9:e9:c7:fb:e9:50:28:4c:e2:26:b6:6c:8b:8c:83:
e4:3d:74:75:19:5a:55:c0:07:6c:22:71:ae:cb:23:
34:53:82:5a:7c:bc:53:13:47:b3:b8:fa:a2:ed:9b:
8e:9a:e7:4d:bb:74:b5:d8:3d:ea:0b:af:a9:4e:23:
ea:da:32:81:6e:6d:12:89:95:39:d4:eb:f7:50:9a:
a9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:25:FF:9C:52:F1:F0:B1:57:5B:29:9C:D1:1D:B2:6B:CB:B6:CD:FB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b83b4456-b47a-4704-9a02-901de65eef8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1feb:840::/48
Signature Algorithm: sha256WithRSAEncryption
83:27:af:9e:e1:34:28:d0:eb:2c:33:b1:49:9d:43:bf:5a:2d:
fc:09:e7:94:42:8d:37:1a:f0:e2:ca:67:44:23:2c:ff:d1:6c:
4c:d6:60:5c:98:4f:5c:b9:c9:65:95:92:82:c1:45:05:62:12:
35:7a:d4:51:0a:5c:39:84:f3:3e:b1:17:8d:13:a9:fe:e1:04:
9a:11:f9:86:23:24:a0:41:80:81:5f:57:b2:16:54:e1:07:2f:
11:2e:1c:69:bb:f8:5d:78:09:0f:7b:89:40:e2:69:c1:bf:f6:
c3:9d:43:e1:6f:ab:e6:31:e1:8f:d6:aa:0d:9d:0e:a1:5a:00:
dd:3b:bb:c2:5b:3a:28:a1:b6:97:f0:ea:5d:00:ea:c3:18:fa:
c3:1b:a2:a9:db:81:f4:86:ec:8f:df:cb:f6:e3:82:b5:2d:3e:
3d:5f:94:43:83:a1:ab:ad:d3:76:89:34:d2:6f:92:4f:a6:63:
23:2c:a4:f8:18:a6:49:2d:7c:21:7d:eb:22:63:07:8b:84:de:
6e:46:00:d7:a4:63:33:58:a5:d5:dd:83:2f:28:38:25:5f:4e:
d6:0d:63:26:1f:68:fa:a5:30:df:4d:22:34:d3:8c:38:a8:94:
aa:5c:bd:c0:43:4e:aa:79:44:d2:15:ff:70:1b:72:86:3f:88:
3f:e6:ca:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 17 17:53:22 2026 by rpki-client