
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b910dc24-298a-4ffe-8116-f76501994ad7.roa
File: b910dc24-298a-4ffe-8116-f76501994ad7.roa (raw, json)
Hash identifier: EBEM0kop2Ls93gAPb/Sq28A9oz7wJYAP7EDYwD122s0=
Subject key identifier: 5B:A0:13:BA:27:70:4C:33:5D:BE:DF:BC:23:DC:6A:67:B0:B6:7D:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 606542A343D20567A5229D7870BF791BF59F4492
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b910dc24-298a-4ffe-8116-f76501994ad7.roa
Signing time: Fri 23 Oct 2026 01:10:29 +0000
ROA not before: Fri 23 Oct 2026 01:10:29 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fa0:7400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:65:42:a3:43:d2:05:67:a5:22:9d:78:70:bf:79:1b:f5:9f:44:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 23 01:10:29 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=120c795ddbc1705478bc8ba30de6db877854c57c1b33388c26a9bea4153db28f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:76:df:0c:3a:80:71:20:f1:6a:57:d9:20:
61:08:7d:48:00:1c:e7:17:ba:f3:b2:2b:36:96:f1:
33:06:75:92:2a:17:00:14:4a:33:42:4c:3b:4e:03:
9a:40:f5:82:90:12:ae:2d:57:eb:b9:23:a2:ab:7b:
70:c9:20:76:a1:88:23:1c:e7:66:23:13:28:ef:f3:
d1:e1:ba:12:3b:bf:bb:35:cc:07:8a:f5:aa:fa:c2:
2b:75:97:c9:b2:5c:f5:07:e4:3e:45:d8:35:d0:91:
b7:13:23:23:5a:59:be:53:2f:cf:e7:ee:1e:fa:de:
56:67:9b:43:44:0a:3e:7f:11:15:b1:84:95:03:a8:
8f:63:e1:3e:e9:36:c8:fe:df:b3:36:df:72:f6:fe:
36:0a:5e:b9:62:55:ee:29:8f:6c:8e:7f:14:aa:1e:
58:48:b2:b7:69:ac:36:06:81:f2:0c:c9:eb:9b:49:
5f:c6:79:f7:62:72:be:98:5d:7a:50:67:c0:38:b5:
d9:59:fa:32:c0:a7:de:98:3f:6c:6b:01:5c:cd:3a:
6b:69:2e:ba:b7:f1:00:42:ce:f9:78:e5:c0:39:c0:
74:bb:c6:e1:b1:40:19:a9:28:6e:e4:cb:36:9f:24:
91:2a:95:f8:49:25:ae:a3:76:83:ee:9f:f5:5c:9d:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A0:13:BA:27:70:4C:33:5D:BE:DF:BC:23:DC:6A:67:B0:B6:7D:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b910dc24-298a-4ffe-8116-f76501994ad7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fa0:7400::/40
Signature Algorithm: sha256WithRSAEncryption
1e:82:18:15:51:df:ef:e5:58:11:99:cd:d9:f1:cd:ef:d6:d1:
0d:4c:d4:f2:4a:f9:78:2d:42:ae:de:8d:6a:2c:5b:7d:77:65:
20:64:5a:4c:d9:7e:2b:a8:f0:79:5f:44:16:e4:73:b9:bd:ce:
91:21:bb:f9:5f:20:5f:2b:ab:69:34:ff:7f:8a:55:aa:0a:1a:
d9:2d:62:53:6b:83:31:0c:6d:4a:21:bc:a7:22:18:f1:b7:a0:
b1:34:c5:1b:8b:29:42:e2:d0:9e:c1:5e:b6:d4:31:97:77:c0:
bb:28:31:5a:41:e1:7a:6a:ec:76:5d:e6:21:72:c9:fb:2a:41:
35:e3:5c:f2:7f:3f:d8:b5:e1:3f:cf:50:79:b2:0c:b2:c7:15:
45:b8:03:26:8c:31:91:73:ff:39:02:b3:ee:29:26:23:dc:8a:
93:ad:93:05:ed:15:23:81:33:83:97:c6:8e:90:e5:90:1f:fb:
5e:22:2a:2d:a2:e0:b1:0b:ef:2e:de:10:4b:85:02:b1:78:69:
21:cf:df:e5:b1:39:24:8f:01:d7:66:14:d2:b5:37:3a:d6:7f:
74:fc:bf:bd:a2:de:82:3d:20:75:7a:58:7b:b5:94:66:52:fc:
c6:7c:ff:c6:09:a4:62:0c:22:89:f2:f4:e1:54:5a:c1:50:4a:
fc:db:59:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 31 15:23:01 2026 by rpki-client