
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f13d14a2-c781-4f14-97b1-44c231676d28.roa
File: f13d14a2-c781-4f14-97b1-44c231676d28.roa (raw, json)
Hash identifier: FuY7MNRhvrZoY0/8Mru/UO9/4tgkgNiUI2RxTVAA4JU=
Subject key identifier: E8:1B:FA:92:E5:73:C0:ED:43:FC:52:12:EC:C5:1E:E2:58:38:EE:86
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0CDB8D579C1A25886C833C7DC5938B65DCA7675E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f13d14a2-c781-4f14-97b1-44c231676d28.roa
Signing time: Fri 23 Oct 2026 01:30:49 +0000
ROA not before: Fri 23 Oct 2026 01:30:49 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 167.97.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:db:8d:57:9c:1a:25:88:6c:83:3c:7d:c5:93:8b:65:dc:a7:67:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 23 01:30:49 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=567211594901bf21783223714df55b61294f1748ee539eaa3221d234591dfc1d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:57:a7:8b:e1:aa:95:ef:e6:4e:3b:5f:23:f6:
04:e0:a5:eb:00:13:8d:2c:f9:68:ab:64:82:69:b4:
7b:da:9c:34:3b:64:fb:f3:df:b4:fb:cc:df:da:16:
38:76:a1:16:52:42:26:83:90:11:1a:02:04:29:23:
9f:ce:1d:5b:70:83:4e:39:74:a7:b2:66:75:41:20:
42:45:06:9a:1f:d7:03:37:66:a9:d3:94:19:d7:2e:
36:4c:52:76:34:30:b9:85:12:c7:51:2c:7b:a7:72:
9f:ff:0e:b7:f5:56:44:e7:f6:f0:3f:7a:85:fd:21:
c4:a0:57:74:88:9c:2d:4b:de:d3:0a:b0:31:55:ee:
e0:ac:4b:b7:20:8f:ec:2c:b5:48:24:68:7a:e3:94:
5c:42:24:50:f2:34:46:3a:c9:68:34:28:6e:00:df:
c8:52:53:ef:eb:b0:b4:fb:28:0c:54:ff:11:2f:b4:
b4:94:a1:e3:11:0d:3c:bf:ee:4d:31:58:b0:6c:03:
7a:96:09:c8:b7:43:96:38:b7:c3:f8:6a:7c:b7:1b:
09:57:d4:49:ed:17:d1:48:ff:2c:1e:a1:e1:7d:ff:
3e:4f:1e:77:49:e6:41:fc:d8:ea:78:45:c8:ff:87:
ca:22:b1:bf:65:4d:5c:c0:e1:da:41:02:a0:a6:b4:
fc:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1B:FA:92:E5:73:C0:ED:43:FC:52:12:EC:C5:1E:E2:58:38:EE:86
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f13d14a2-c781-4f14-97b1-44c231676d28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.97.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:1e:65:e7:a2:47:3f:39:7d:4b:fa:3e:5a:71:3e:9d:0f:14:
7c:98:20:23:40:54:cf:4d:18:f9:42:52:d5:c0:df:a0:1b:12:
f0:db:ae:bf:80:64:44:ac:b2:34:a0:cb:51:fb:2a:b2:dc:00:
4f:46:71:0b:dc:ad:10:f6:91:93:56:e8:e6:b7:2e:58:5c:3d:
34:b6:38:c7:30:66:be:77:3c:64:2c:b5:e2:12:ac:c2:d6:c4:
cf:92:71:6d:a6:c9:f7:91:79:71:84:53:48:3f:ea:44:7e:3a:
56:6b:2d:17:59:5f:db:17:59:d3:dd:5c:a0:84:54:fc:77:39:
d3:49:0e:c4:2d:45:45:b8:eb:25:b4:98:2f:b0:a0:7e:03:8f:
80:b9:bf:35:26:ad:b1:72:6e:ed:d6:7b:8f:64:ab:d7:3d:6d:
84:23:a3:00:3a:63:23:a3:dd:23:3b:48:f9:5f:b3:04:4d:17:
53:ad:78:cf:2e:96:2b:1f:2c:08:78:f5:8e:0f:21:62:4d:d1:
30:8a:6e:7a:62:64:97:ac:e6:34:e9:ef:23:10:ed:61:48:b9:
a7:e7:02:c7:a5:72:c0:a0:25:be:50:cb:22:9a:99:64:48:8c:
23:6c:ca:40:5a:d4:17:3c:ec:11:39:54:c9:9c:56:a6:f0:75:
41:30:6d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:14:22 2026 by rpki-client