
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc03b0b8-dc48-442a-b40c-185ce689ee9e.roa
File: dc03b0b8-dc48-442a-b40c-185ce689ee9e.roa (raw, json)
Hash identifier: oC7JyTbQet3+ciLuABnpx2UgffiEbziwhSAHE/A2GiY=
Subject key identifier: 12:58:69:41:17:24:EB:72:BF:A2:76:28:AF:04:E7:8B:68:07:E0:EA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6794CC82B3829D743E20D26C7B4061128660191D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc03b0b8-dc48-442a-b40c-185ce689ee9e.roa
Signing time: Mon 03 Aug 2026 01:31:30 +0000
ROA not before: Mon 03 Aug 2026 01:31:30 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f38:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 03 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:94:cc:82:b3:82:9d:74:3e:20:d2:6c:7b:40:61:12:86:60:19:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 01:31:30 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=e08cc3354737db0825707534f6f3cf0a81f7a18766ea435490fb04b733651de8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:7e:d8:1e:74:45:ce:2b:56:c1:60:de:bb:
3d:68:02:da:d0:45:68:07:b4:70:35:52:1d:16:7f:
bb:0a:b8:14:64:08:e1:9b:b4:7a:46:d8:a0:49:58:
00:c1:e8:e4:34:d0:77:f5:de:e2:5e:3d:b8:97:a4:
06:3d:44:1e:68:4b:e8:05:63:13:b0:f1:b2:39:ea:
2b:0d:61:28:38:d1:76:54:70:dc:38:93:11:3a:09:
7e:63:8f:a0:44:3d:bf:43:bf:25:b0:e8:91:e8:88:
f9:c4:7c:38:be:18:74:cd:ad:c0:d9:f9:c1:32:99:
fb:d9:a9:7b:19:a7:f9:8e:a9:9e:98:1c:80:08:69:
16:60:d8:8c:be:2b:68:eb:a0:25:d2:73:7d:dc:b3:
ed:6c:66:19:2e:98:9d:d4:4f:48:28:d8:e2:66:1e:
d8:be:55:b7:39:c2:6b:fb:b7:3c:20:f3:14:9b:79:
c8:13:c4:12:6b:a0:e5:04:24:ca:ef:bc:70:8c:e2:
be:dd:0b:48:91:18:e6:4d:c7:06:ad:d9:5b:ef:18:
28:92:f5:fe:19:a1:a8:4b:15:6b:51:ae:16:d4:dc:
a0:e2:bd:03:76:4c:7e:15:a9:e8:81:99:1c:b8:b4:
ee:6e:d3:ce:a5:f2:de:ec:31:b4:05:d2:4a:ec:b1:
9f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:58:69:41:17:24:EB:72:BF:A2:76:28:AF:04:E7:8B:68:07:E0:EA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dc03b0b8-dc48-442a-b40c-185ce689ee9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f38:2000::/40
Signature Algorithm: sha256WithRSAEncryption
80:bf:67:43:2c:f7:53:04:05:2c:04:50:03:4d:b8:95:6d:25:
3d:f8:11:58:fb:97:29:75:3b:d3:25:37:95:66:c4:f8:04:06:
ff:2c:25:93:46:ef:8a:de:e6:76:0a:1d:06:1a:81:f5:45:96:
6e:1f:fc:fc:ac:7e:7d:5b:86:2e:79:ee:b3:a2:18:23:1f:17:
a3:59:04:ff:35:65:05:a9:76:f4:ab:78:72:e1:02:6b:02:a6:
cc:6e:fa:b8:7a:cf:11:42:58:9e:af:67:6b:94:b8:5c:ea:9d:
f9:f8:35:16:23:4d:92:2d:61:01:61:a0:79:60:84:b5:fc:76:
e0:38:25:56:51:11:ae:4d:9e:40:5d:be:f4:bb:4e:18:1c:28:
e3:e6:56:50:d3:94:8f:46:ad:f1:98:d5:e3:d5:9e:90:17:e7:
e8:11:e0:a6:bf:a5:93:36:0e:99:a5:7f:2e:86:30:5a:96:cd:
39:3f:8c:82:8f:06:1d:fc:02:74:50:de:bc:62:3e:19:f7:11:
dc:78:f2:10:13:4c:50:75:01:fa:c9:46:db:9f:b0:34:27:0f:
5b:fd:46:74:4e:01:99:dd:43:e5:69:c0:04:70:31:6c:aa:d4:
c3:03:00:fb:2c:5d:02:ba:46:44:2f:1c:e1:d0:98:23:65:10:
34:4b:f1:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Sep 2 04:53:29 2026 by rpki-client