
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8f98ea5-2330-4edf-ba45-4555bb92ae5a.roa
File: f8f98ea5-2330-4edf-ba45-4555bb92ae5a.roa (raw, json)
Hash identifier: 0k694EYwjhHTmYtVGUUkodabap4JMe67SP3rvv5BdUM=
Subject key identifier: BE:8F:81:4D:D3:DD:23:FE:73:F9:58:3B:A1:3D:7A:EB:4D:2A:98:F6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5D904E946B7909DE2F0A323BBE7BB8752B0405AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8f98ea5-2330-4edf-ba45-4555bb92ae5a.roa
Signing time: Wed 05 Aug 2026 00:01:11 +0000
ROA not before: Wed 05 Aug 2026 00:01:11 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 56.230.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:90:4e:94:6b:79:09:de:2f:0a:32:3b:be:7b:b8:75:2b:04:05:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 5 00:01:11 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=b71590f6316b0161ebbf0d3c26e707e0b450e7ccaeeda81b19844ec93ababc12, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:a7:8b:c8:49:7f:ce:16:18:ae:0e:5a:b8:
a7:b6:ee:06:e4:80:db:17:bb:77:6c:93:20:95:45:
1d:07:23:d4:20:74:3b:3f:35:91:5f:fd:d3:41:a8:
c6:2e:73:23:e6:49:ce:4c:9f:3d:5e:49:88:38:1a:
4a:02:d9:52:91:93:ab:7e:da:99:d2:37:f9:c3:fe:
eb:f6:41:3b:53:a6:dd:18:7e:1c:26:0c:40:ba:1c:
98:be:aa:cc:77:bc:ff:e2:40:cd:fb:cc:fb:36:9a:
d3:e5:44:0f:5e:83:ac:22:27:e8:e9:f9:8f:e0:73:
23:a2:35:85:74:6d:51:ff:19:a1:11:16:fa:2a:e8:
88:54:72:3e:84:a6:ed:60:28:0a:62:81:da:3b:94:
c7:88:bf:26:33:19:18:82:21:a3:44:d5:6a:85:66:
7d:ff:38:6b:bd:d2:3c:30:4d:f4:31:6c:77:c3:4b:
d6:64:d4:1a:50:69:72:1d:e7:e2:09:13:f3:44:81:
89:53:0e:69:80:3d:bb:49:72:7e:b3:87:22:b7:0b:
43:be:ef:03:00:3f:fb:26:bd:ee:d3:dd:a0:01:50:
88:68:5b:67:8a:0d:5b:2a:c0:06:43:47:19:4c:b9:
1d:80:0b:50:94:c5:b8:9f:41:67:cf:d5:d0:73:65:
8f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:81:4D:D3:DD:23:FE:73:F9:58:3B:A1:3D:7A:EB:4D:2A:98:F6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8f98ea5-2330-4edf-ba45-4555bb92ae5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.230.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:fd:a5:90:5d:9b:76:9d:b4:67:1e:3e:17:1f:1c:3c:43:3a:
d8:20:14:3e:74:ef:20:4d:5a:cd:de:ec:4a:c4:c4:9e:8f:45:
31:68:65:0b:55:83:a0:54:fa:8f:85:ac:32:30:35:e0:8d:8d:
df:42:8b:8a:de:1f:c3:dc:d6:a6:04:09:77:13:1f:5f:bd:54:
ec:84:98:7a:8c:48:7a:46:fa:a8:6a:3d:dc:25:c1:7c:a3:c9:
91:2e:8e:cb:d8:ec:06:fb:75:70:98:2c:71:29:e8:51:97:28:
77:0b:41:3d:7f:0c:96:ef:ed:be:c7:ad:39:d4:3d:0a:df:60:
88:7e:63:6b:77:ad:ca:f4:a3:39:c7:13:ce:c8:4c:c3:2d:1c:
bc:55:d6:7e:80:48:39:2d:6f:21:ce:11:80:5c:2c:4c:e9:12:
ae:31:55:8a:c5:69:be:ec:25:cb:97:f5:77:6b:3c:c9:e0:59:
b2:a7:17:4b:b0:bd:99:87:0d:99:32:bd:2d:d4:0c:5e:10:2d:
50:7d:b6:2c:f5:6b:5e:7c:7d:b7:27:1c:7e:23:ad:b9:d0:87:
04:35:23:6d:2f:e5:7c:d2:86:95:07:ff:7a:09:e7:90:46:4d:
0f:83:dd:25:86:37:88:22:04:d7:df:5d:8c:3c:9d:9f:ac:0d:
a7:68:31:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:55:30 2026 by rpki-client