
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1165be7b-1545-4b66-8938-2321c07d5a67.roa
File: 1165be7b-1545-4b66-8938-2321c07d5a67.roa (raw, json)
Hash identifier: IbTERFzZCsLU7HrvuwYLTYkjEZXrmLRUB+XLHz629+k=
Subject key identifier: 7F:5D:8D:39:2B:18:14:10:B4:84:88:D9:7E:0F:AC:BA:AB:F4:F3:99
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 30F8E6F9C7C3D83A32BE5365F20AC10D3D8A785B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1165be7b-1545-4b66-8938-2321c07d5a67.roa
Signing time: Sat 25 Jul 2026 00:10:06 +0000
ROA not before: Sat 25 Jul 2026 00:10:06 +0000
ROA not after: Fri 23 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.247.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f8:e6:f9:c7:c3:d8:3a:32:be:53:65:f2:0a:c1:0d:3d:8a:78:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 25 00:10:06 2026 GMT
Not After : Oct 23 23:59:59 2026 GMT
Subject: serialNumber=bd0c689b439c2e1477ba5dd916935f1d98244e9b3fef1226b8b448cb69e99dbc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6f:97:46:68:b1:d3:ff:54:57:6c:40:0b:14:
4a:f6:3a:94:e8:ee:f0:6c:76:08:3a:d5:77:00:bf:
ec:b2:15:f2:63:a1:60:f8:fe:a0:af:8d:dc:a8:02:
e4:55:3c:1a:ca:4a:df:71:11:7e:fc:a3:f4:dd:e6:
08:f9:5f:ba:8c:ff:94:36:de:3b:5f:86:37:6c:07:
b3:cb:eb:f5:79:17:25:ad:e9:7b:f3:93:0e:df:14:
85:4b:ba:44:df:c5:c8:4e:28:d3:59:7c:bb:f7:d9:
b5:ed:10:1b:06:56:6f:de:d0:51:d7:87:f5:80:56:
45:a6:76:4b:c9:7a:c5:91:04:d4:3e:de:eb:cb:c6:
bc:80:21:f1:0d:a3:20:00:bf:d0:dd:49:fe:ae:47:
32:0d:dc:57:09:c2:7f:1b:f2:f8:34:c6:6c:b8:bd:
de:b0:31:d5:92:92:05:c9:2a:ad:34:c5:50:ef:b6:
95:d8:6e:60:04:6f:ea:b2:ad:e1:10:b6:81:ba:23:
2b:02:71:4a:e2:17:e5:c8:0b:60:da:b9:23:18:8e:
52:80:9e:1d:06:8e:f0:d9:56:9e:a8:97:60:cf:96:
3c:f1:2a:f5:72:22:18:eb:88:1a:7d:a0:4f:be:3b:
b1:24:12:6b:b5:14:47:3b:70:3d:33:74:db:5f:83:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5D:8D:39:2B:18:14:10:B4:84:88:D9:7E:0F:AC:BA:AB:F4:F3:99
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1165be7b-1545-4b66-8938-2321c07d5a67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.247.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:16:39:0c:90:5f:35:30:9c:0c:c8:14:08:6f:72:c2:c7:3e:
aa:aa:b8:9b:71:29:b4:b3:f2:bc:63:9a:b5:ff:1e:df:29:83:
cf:60:5e:e1:ce:9c:ae:0b:30:88:70:89:0f:30:c7:de:d3:cb:
b1:5a:ad:32:25:ae:14:75:59:46:9b:ce:45:02:40:aa:51:0a:
f7:73:b6:8c:98:64:50:ae:a0:cd:4d:8b:ef:76:f0:c3:70:81:
c4:fa:a9:19:32:c1:68:fb:68:a4:83:8f:ee:08:27:7a:22:9f:
d4:fd:29:60:9b:7a:56:65:a3:ea:09:bc:89:01:75:5a:8c:bf:
d9:56:12:ed:18:88:27:61:5d:80:a9:76:c9:b6:41:bb:cd:48:
61:e8:10:f8:7a:8e:47:73:6e:59:53:7f:58:46:1c:38:13:7c:
11:9f:21:39:a2:5d:e3:bf:e6:eb:12:32:df:4a:64:9e:ba:d2:
26:22:b9:5b:78:ac:c4:e0:c8:b9:49:ac:c7:ea:ad:3a:1e:fd:
c4:f2:9d:79:1f:a0:bb:4e:86:51:2d:eb:77:17:23:a7:d3:cd:
08:93:a1:97:ad:f1:3c:08:a0:64:7d:69:3e:32:10:e6:7d:7c:
d5:82:88:47:a9:be:af:d7:f6:c7:ba:ed:5b:52:16:14:e8:d7:
f0:e0:72:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:13:25 2026 by rpki-client