
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc8097da-cca7-48f7-b057-46ee2d28e9a0.roa
File: fc8097da-cca7-48f7-b057-46ee2d28e9a0.roa (raw, json)
Hash identifier: BrbbDjRDwziMHp/m6lOjddllqO02erpwcN35bW3J42M=
Subject key identifier: 44:E2:EB:FA:86:54:A5:9D:63:A1:9E:BF:81:58:6C:F7:E1:4B:97:DF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 34CC961EBDC1C0A2BAAA5F6DD0F9BA02911E79A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc8097da-cca7-48f7-b057-46ee2d28e9a0.roa
Signing time: Mon 03 Aug 2026 01:01:31 +0000
ROA not before: Mon 03 Aug 2026 01:01:31 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:81e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:cc:96:1e:bd:c1:c0:a2:ba:aa:5f:6d:d0:f9:ba:02:91:1e:79:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 01:01:31 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=78ea48fdae37240d7ad02326867b565f19fbd0200f8c94e15db434aeb389b7c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:06:3b:d3:a8:3a:43:ce:14:67:9e:a0:5c:ae:
98:d2:a2:ed:7e:c9:ba:25:b5:08:64:21:d6:8e:06:
a9:f8:47:65:b6:cd:39:b9:55:61:45:65:3e:d2:fc:
fe:cf:eb:55:a9:0d:2e:07:b5:3a:3d:33:51:11:ec:
f4:7c:f8:19:28:5e:cb:6b:f8:5a:d2:f0:08:6d:4e:
05:2c:4e:f7:f5:0a:35:b9:70:44:31:2a:6e:a9:7d:
56:49:e3:c6:37:8f:09:38:33:2d:57:86:e7:7a:96:
a0:da:0d:1c:f8:f6:9a:86:e1:8a:18:50:cc:c4:7c:
c1:05:e3:c9:10:b5:b3:43:a6:f5:8e:01:09:a3:da:
b7:85:f9:0f:86:57:93:1e:bc:f4:75:1a:36:46:14:
3e:da:e9:b7:44:63:41:f7:c7:db:03:8e:48:40:82:
c2:bb:ac:42:49:e4:74:2a:7e:2f:72:a8:0e:97:80:
e3:8b:8c:fc:6e:51:9e:e7:bc:26:4b:39:ac:41:8a:
16:e9:94:d0:ba:71:d1:3d:c9:9a:8b:2a:db:cc:4b:
1e:40:53:46:14:f9:c1:c8:b9:57:d6:69:af:50:70:
a4:e4:56:32:3a:37:85:25:8c:ea:93:7b:3b:45:e2:
fa:7e:d6:cc:c3:43:6a:1d:d5:1b:a1:db:25:70:ef:
24:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E2:EB:FA:86:54:A5:9D:63:A1:9E:BF:81:58:6C:F7:E1:4B:97:DF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc8097da-cca7-48f7-b057-46ee2d28e9a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:81e0::/48
Signature Algorithm: sha256WithRSAEncryption
2d:26:0d:2d:36:04:46:41:47:f3:52:6a:b3:77:bf:a1:fe:49:
10:b9:d5:51:6b:98:4b:af:91:a0:5d:36:44:27:25:2d:4f:a5:
75:1d:9d:18:8b:e7:8d:01:35:88:63:3f:ad:62:25:82:7f:25:
27:3c:e2:ec:e2:89:75:ef:8d:57:1a:62:12:8b:7c:52:36:8a:
e3:a1:87:4b:e1:ab:a3:95:c4:99:a8:7c:7d:f2:87:01:6d:c3:
36:1c:08:19:73:9c:69:1d:d2:43:23:36:95:a1:55:19:a7:70:
d0:06:2b:65:6e:47:7c:77:40:1f:91:f7:95:a4:40:8f:8b:74:
5f:0d:49:7e:a2:97:3a:02:a4:3d:a8:be:63:83:9d:19:16:dd:
e6:ad:e1:1d:18:2b:d1:c4:ea:08:e7:f8:e7:2f:55:2d:4e:8c:
e3:5c:e6:12:a0:96:25:00:99:22:9a:7c:1f:f0:39:dc:6c:e4:
00:7a:8b:bb:62:32:55:3e:88:fe:b8:fc:3b:4a:3e:f1:28:3f:
bd:2f:c2:2e:cb:ce:6b:72:03:27:14:00:ec:35:c0:ea:31:77:
9f:9b:14:cc:34:2c:d9:4d:37:ec:f7:29:49:f3:2f:91:d3:2e:
0d:c2:54:4b:4a:a0:8b:a6:d2:a0:bc:8e:3c:41:71:dc:8c:fd:
e6:e6:99:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:20:35 2026 by rpki-client