
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c74997ef-8413-4f48-a593-b4da86a0b518.roa
File: c74997ef-8413-4f48-a593-b4da86a0b518.roa (raw, json)
Hash identifier: fwH5nrcv6F7fMyiw4M+KViMl4OTAqFJlzLDeUxWsy0k=
Subject key identifier: BE:10:39:00:96:19:D9:8B:4E:FC:82:98:B3:62:82:01:DF:A9:C2:DF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63872338F7A5922026183DD0780362CDE5A0F686
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c74997ef-8413-4f48-a593-b4da86a0b518.roa
Signing time: Wed 09 Sep 2026 16:07:01 +0000
ROA not before: Wed 09 Sep 2026 16:07:01 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f6a:a800::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:87:23:38:f7:a5:92:20:26:18:3d:d0:78:03:62:cd:e5:a0:f6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 9 16:07:01 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=071dae9f61058480237257d738ef2e02969d08f45c6380afb7e4602808efcce5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:e1:84:50:1b:de:d4:8b:d2:ee:b9:bc:25:
fb:fc:2a:d2:bb:cb:f6:6b:5f:0a:dc:f2:68:70:6a:
be:33:cd:8c:5c:ac:ff:1f:a2:63:39:4a:d5:c3:42:
0a:a8:6d:f0:ae:2d:64:eb:49:e6:c9:b1:4a:62:a5:
6e:a1:b1:bc:2f:7c:f4:68:ef:a7:39:45:44:22:2e:
90:92:ad:46:d6:4e:ef:85:81:2e:f3:5f:55:1f:ac:
fe:78:60:db:b2:1f:8e:50:0f:cb:e9:fa:f5:4a:57:
9f:d6:84:ca:2c:cc:52:de:07:f3:4f:ce:8a:46:9c:
ea:c3:1a:16:ba:be:0f:d3:36:c1:4a:7a:e6:cb:b0:
92:ee:0b:43:4e:b8:46:cd:ad:34:8a:59:0e:1e:67:
09:2c:32:11:52:b9:7e:60:ef:2e:c6:bf:8a:cd:d1:
a7:43:5c:c2:37:61:97:38:0c:c8:ab:cb:98:b7:08:
b2:38:dd:2f:a7:7c:b9:8b:a6:69:54:f3:c0:c0:83:
bd:ba:4d:eb:71:59:58:82:4b:9e:5e:0e:af:3d:49:
61:c1:ae:41:28:ba:e5:0e:c8:7d:60:6f:7a:5b:a6:
c7:a8:c6:f0:a1:59:9b:8c:5d:9d:48:57:10:10:65:
f1:da:c6:ee:00:47:e1:8d:90:38:ce:46:b4:47:85:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:10:39:00:96:19:D9:8B:4E:FC:82:98:B3:62:82:01:DF:A9:C2:DF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c74997ef-8413-4f48-a593-b4da86a0b518.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f6a:a800::/46
Signature Algorithm: sha256WithRSAEncryption
02:eb:ab:36:49:77:e1:38:98:da:a3:b0:ae:c7:3c:41:e8:66:
e3:a4:eb:25:3b:48:2d:ae:f1:b4:72:55:8f:97:e0:a1:bf:4d:
06:09:af:89:13:ff:16:f6:64:76:a1:7d:40:1d:15:90:7d:fc:
a8:b8:4c:3f:fd:2e:8c:39:da:72:29:5a:0d:77:b2:9d:6d:71:
11:a2:6f:7a:04:bb:44:8b:6c:08:03:49:79:21:0c:0b:61:b7:
e2:c5:ee:b3:09:87:e0:97:92:f2:a8:7e:da:08:5f:5d:35:69:
74:75:e7:ad:60:78:56:34:d7:31:b9:69:f6:eb:e0:b1:bb:76:
36:ee:ac:33:ac:f2:79:60:f5:94:28:50:e6:92:32:de:3d:7f:
bc:38:f4:50:5d:77:3f:1d:a3:46:c9:3a:0b:1d:32:c1:ec:15:
d4:02:2e:3c:2d:4d:52:f2:eb:e0:57:06:5e:e6:8e:d9:81:b1:
dc:bc:4d:99:a5:07:5b:c0:fe:56:d6:95:4f:89:49:c0:63:46:
3e:fc:61:c9:4a:6a:e1:3b:92:87:28:f2:1f:af:24:ff:b6:71:
cf:f4:00:81:d3:6d:e9:9f:70:94:0f:97:85:46:ae:a7:8f:d1:
aa:fb:4b:62:df:82:f4:14:5e:e6:dc:f5:0f:16:ef:6f:10:73:
b3:50:57:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 15 11:37:08 2026 by rpki-client