
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/965e9a15-e7a7-4ff3-9f9f-747ffcbcda73.roa
File: 965e9a15-e7a7-4ff3-9f9f-747ffcbcda73.roa (raw, json)
Hash identifier: E5d0GWpMqO4lIpBobOcbA/zR1uvscVKh3NKAoHUmNjs=
Subject key identifier: 49:98:F5:02:B7:BD:74:42:79:CB:DF:49:71:89:32:49:0C:B7:F4:E7
Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial: 030220266225013189B5A924A332B6674FF3B875
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/965e9a15-e7a7-4ff3-9f9f-747ffcbcda73.roa
Signing time: Sun 02 Aug 2026 00:00:13 +0000
ROA not before: Sun 02 Aug 2026 00:00:13 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:8380:1900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:02:20:26:62:25:01:31:89:b5:a9:24:a3:32:b6:67:4f:f3:b8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Validity
Not Before: Aug 2 00:00:13 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=9f6a440469ac3243060d4fb6ff935354ba908bcc44e985f63e1d1145e4556b32, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:7c:38:35:21:98:5d:43:f5:df:97:37:7c:
b5:6c:54:35:b6:82:35:cb:34:fd:96:0f:7e:49:38:
fc:d3:a9:0e:a2:b6:d7:94:10:e8:04:1c:b1:ce:1a:
a4:c4:c6:62:78:36:a8:7f:08:b5:d8:37:ad:cd:5a:
ef:1e:b5:95:55:1a:7a:17:e7:3c:b0:84:dd:cb:3a:
a4:0f:a2:03:33:8e:cc:84:0e:d1:87:47:0b:c0:b5:
98:10:12:61:6f:ba:72:82:8c:f2:36:72:71:4a:d5:
c8:41:91:da:4a:74:22:58:8b:ca:cd:3d:c4:a6:e1:
c4:ba:46:42:b3:a8:6e:8a:2c:5f:0d:e5:86:7d:95:
16:89:90:13:41:14:c7:5a:06:26:36:f5:13:2e:75:
85:bf:26:8a:46:83:09:42:66:37:71:c6:21:ed:b2:
9c:df:91:ed:3a:ab:5f:bb:3d:f7:1d:2f:6b:17:5f:
86:21:71:95:3e:9a:03:14:44:8f:24:a6:85:77:f2:
9a:35:dc:4c:49:2c:11:2a:c8:43:ad:b5:84:bd:02:
3a:35:9f:47:11:2a:10:4c:14:ae:13:6b:bd:88:84:
53:c7:4d:48:0b:34:a6:f3:17:5d:5a:9d:08:f8:b4:
16:93:2e:4c:1b:b0:8e:64:b1:83:52:c2:ec:19:64:
0a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:98:F5:02:B7:BD:74:42:79:CB:DF:49:71:89:32:49:0C:B7:F4:E7
X509v3 Authority Key Identifier:
keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/965e9a15-e7a7-4ff3-9f9f-747ffcbcda73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:8380:1900::/40
Signature Algorithm: sha256WithRSAEncryption
8f:29:8d:41:3b:12:6f:db:da:e3:27:a8:52:e7:00:23:16:e5:
13:84:01:5f:51:f1:69:24:4e:e8:48:2f:2c:ff:5a:f7:5b:05:
7c:d7:f8:5b:ac:fa:6d:e1:07:fc:6d:23:50:aa:56:a1:60:bc:
f1:2f:97:69:df:98:c2:c6:3c:a0:27:e4:7e:ef:71:a5:98:0d:
68:9e:0c:b5:d6:13:23:89:89:74:b0:ef:e2:65:08:d0:ef:9b:
57:89:f9:27:b5:d9:57:ae:61:7e:bf:cb:5d:9e:6f:e9:a6:ca:
e3:b9:33:63:81:18:80:fa:3d:2c:36:16:01:37:bf:3d:ba:41:
92:1d:f2:05:fd:59:41:65:ad:e4:35:2f:35:ea:b9:dd:0e:1b:
8e:9f:62:d0:f6:97:8e:26:91:36:d0:b9:0c:de:2b:fd:88:a0:
97:c3:75:3c:fb:88:a1:26:ca:4f:09:85:1e:66:98:63:36:57:
2b:7e:42:47:3c:43:92:b4:bf:70:41:86:94:8c:97:2d:6a:92:
fd:2a:13:6e:e8:f4:f5:aa:aa:d0:e3:c3:f1:70:d7:f6:fa:70:
f8:2b:14:08:fd:55:40:00:7e:b5:fa:d1:71:78:06:0a:1e:a9:
96:09:a0:82:9f:5b:a9:96:5e:2d:9b:b4:1a:de:6a:e6:f2:eb:
60:32:5d:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:40 2026 by rpki-client