
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8948d3c-891f-4adf-9ab1-30923302cc28.roa
File: e8948d3c-891f-4adf-9ab1-30923302cc28.roa (raw, json)
Hash identifier: pPTlxcbZe7xebE9pmyWddA6zGByQSrmhgtfu3JhPs+8=
Subject key identifier: B0:56:8A:3A:BE:F6:A4:F3:1A:C1:FF:C1:10:7F:BC:41:20:33:E0:73
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0ADDD133A97402C05711B68F61768F26AEAEEB44
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8948d3c-891f-4adf-9ab1-30923302cc28.roa
Signing time: Mon 03 Aug 2026 02:10:08 +0000
ROA not before: Mon 03 Aug 2026 02:10:08 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:80e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:dd:d1:33:a9:74:02:c0:57:11:b6:8f:61:76:8f:26:ae:ae:eb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 02:10:08 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=f6ecf68cbf6c8e5718a8b99e7f3106149fbb29655bd01147a1ed9774bf14f587, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:21:2a:57:d8:a8:2a:f5:b7:ba:8e:c7:e6:
25:22:3b:7a:bd:2e:43:b3:9f:58:07:73:48:87:ab:
0b:59:c6:79:58:56:a2:13:ec:5c:bc:b4:d5:df:bb:
25:93:86:04:30:57:30:f5:d1:59:f5:f5:03:bc:5c:
0b:25:75:78:07:dc:72:05:e4:fd:9f:78:68:65:4f:
73:5f:46:9b:a7:76:e8:0c:9a:7c:9b:aa:9c:6d:fc:
ea:8d:6b:18:c7:39:1d:dc:25:1a:9f:f1:bf:86:d8:
fc:fe:86:dd:f5:85:d3:d1:ba:d3:ab:21:9c:e3:64:
b3:a6:95:53:e0:2d:51:45:ae:a7:58:f9:7f:ea:ff:
e5:6e:bd:e1:78:76:9d:70:71:46:0a:cb:24:c2:ad:
7e:ff:c0:6a:c2:c0:d0:69:6b:4c:68:fd:46:ec:03:
de:8f:e8:b9:99:48:d7:b9:f6:e4:9a:f4:92:43:0c:
6e:2e:2d:51:1d:f0:f1:e8:79:cd:d2:2d:5f:cd:a1:
00:19:61:14:e6:22:80:b3:d0:68:d9:6a:74:86:4b:
97:b6:b4:61:46:2f:a9:88:b2:f5:d6:44:1f:c5:97:
ea:46:23:c5:9b:76:03:38:f9:e5:b5:79:70:ad:bf:
17:1a:ed:3b:05:6b:8b:1e:28:7c:b4:6e:b2:05:13:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:56:8A:3A:BE:F6:A4:F3:1A:C1:FF:C1:10:7F:BC:41:20:33:E0:73
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8948d3c-891f-4adf-9ab1-30923302cc28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:80e0::/48
Signature Algorithm: sha256WithRSAEncryption
5f:cb:f5:6e:02:93:42:a6:3c:ff:4a:9a:c6:e7:50:66:ef:83:
09:f1:35:e8:b2:e6:38:d4:43:cc:ca:a9:07:d4:32:b9:59:98:
a8:1b:b7:1f:ee:f8:79:88:ec:76:0a:6f:2f:7d:5d:2d:28:02:
0a:91:41:ac:81:03:e8:61:8a:fb:16:80:8e:05:8f:fc:a5:36:
ff:18:17:d2:3b:93:6a:25:72:c6:99:c6:78:61:bd:7c:e4:68:
f6:05:c1:df:e8:5a:85:df:d2:38:aa:16:31:51:60:27:c0:ce:
e5:23:bf:5d:d0:28:b9:92:b1:2e:41:a7:28:ec:f3:33:ec:66:
64:94:47:5b:47:76:db:d5:9b:4e:c1:11:c4:4e:15:a3:f3:da:
36:d0:5f:69:42:21:21:29:a4:56:d6:57:57:79:ca:45:a3:9e:
e5:60:16:2b:33:05:f7:9f:3e:c1:6d:8b:d0:2c:ec:dc:17:9f:
03:37:74:63:ed:45:d0:73:17:04:3b:17:44:05:2c:38:2a:99:
34:6b:1c:4a:7f:d4:d8:33:79:ca:2b:3f:23:05:14:83:e8:53:
a4:fb:a7:e2:d3:22:90:36:78:b9:5a:0f:d5:b6:d7:95:45:1f:
82:46:73:72:13:46:f5:d2:f7:22:83:cf:a1:29:8c:13:da:76:
03:04:10:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 15 14:54:53 2026 by rpki-client