
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1f85432-f5d6-46bf-839b-ed4e9037cb30.roa
File: e1f85432-f5d6-46bf-839b-ed4e9037cb30.roa (raw, json)
Hash identifier: HNnFyx8eH6LfbDWMNY29eJWwEi+OtjfHsxhzuhtTieo=
Subject key identifier: B4:47:A0:3D:98:BE:ED:7A:C5:DB:06:8C:56:A1:D0:57:20:2E:66:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1420191F3D0A29C8F71364D57A0195811930F3D9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1f85432-f5d6-46bf-839b-ed4e9037cb30.roa
Signing time: Tue 28 Jul 2026 00:20:10 +0000
ROA not before: Tue 28 Jul 2026 00:20:10 +0000
ROA not after: Mon 26 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 64.190.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:20:19:1f:3d:0a:29:c8:f7:13:64:d5:7a:01:95:81:19:30:f3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 28 00:20:10 2026 GMT
Not After : Oct 26 23:59:59 2026 GMT
Subject: serialNumber=0a4625177aa292a25a8acf68ef4c8e53cecc5f9afabfa78966ec82631306d94d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:d9:bd:9e:1e:e1:fd:9e:b3:02:73:63:55:
0e:b7:a6:87:c1:13:9c:98:ec:39:68:cf:f9:ea:0b:
6c:a1:5a:8c:40:2f:e9:29:3b:df:e4:04:df:16:a9:
32:12:42:38:b2:e2:94:9f:25:76:02:d7:8a:8e:90:
8d:6c:ef:de:23:86:17:ef:73:3b:55:cb:3f:6e:6e:
f7:1b:1c:e7:55:4b:01:10:c4:a9:39:47:08:98:3a:
a2:c3:d1:2c:77:44:bb:91:26:66:5d:cc:96:9d:22:
3e:64:e2:a6:49:6b:92:b7:3d:f7:e4:bc:0f:03:5a:
48:cd:a0:ea:b8:39:4f:59:4e:63:78:a5:0f:d3:da:
79:b0:87:e6:5c:f1:bf:cb:27:47:ab:59:94:cc:80:
09:b2:bb:75:49:5e:7e:fa:99:49:96:4a:46:20:52:
ac:8e:68:b5:8f:eb:f6:50:dc:da:05:30:2d:f2:03:
76:2f:4b:7d:9c:1c:05:5d:d9:6a:4c:b7:d3:69:d9:
ba:67:98:63:9c:c1:1f:8d:96:95:6c:4e:fb:6e:3a:
6f:33:6d:6d:b2:f9:be:de:be:87:42:2c:08:3d:b3:
9e:30:6e:ac:d2:83:86:38:51:0a:fa:c5:b7:d8:70:
55:84:45:ef:38:95:af:09:32:15:eb:34:a2:ee:22:
79:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:47:A0:3D:98:BE:ED:7A:C5:DB:06:8C:56:A1:D0:57:20:2E:66:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e1f85432-f5d6-46bf-839b-ed4e9037cb30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.190.148.0/24
Signature Algorithm: sha256WithRSAEncryption
41:35:b3:f0:b4:bd:36:a7:ae:34:17:a7:bc:4e:20:55:69:90:
19:b8:09:27:e9:d3:15:8c:f5:d2:2d:69:94:92:96:d5:9c:42:
77:68:29:1c:e4:0d:80:4f:76:17:96:b7:1f:0b:a3:ca:9e:15:
fd:46:76:b4:85:66:cc:5b:7b:d6:56:43:28:e3:a1:e1:c1:f4:
90:e5:04:cf:02:e0:f8:c7:f7:88:c3:eb:77:46:86:a0:5e:06:
38:9c:11:c1:9c:57:1a:a0:e8:c7:5d:b9:43:91:45:a3:e2:2c:
22:04:98:f9:ed:eb:c0:20:6e:4d:bb:68:5b:2f:f3:c3:77:f6:
88:c7:ad:4a:be:22:85:76:5b:03:1d:1a:9d:5a:6e:19:83:2a:
fb:58:be:13:b5:80:61:00:1e:af:dd:7a:88:4b:b6:4d:06:e5:
bc:da:4f:80:8e:9c:ff:fb:b0:96:7a:34:53:97:bb:88:94:29:
1f:2c:1a:0e:2b:2d:79:32:72:31:f2:95:eb:a3:9f:fd:14:62:
b6:da:ae:48:65:b4:79:28:44:08:9e:1a:3d:46:71:ce:14:04:
f5:37:3d:05:29:b8:c1:8c:df:27:e1:e7:ee:65:e5:8c:ea:7e:
5b:de:e8:f4:92:01:da:72:18:cb:89:78:ca:54:3b:6f:04:62:
7a:5f:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:24:40 2026 by rpki-client