
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cec0ace-16d6-4c52-ba9f-db9965c46a5a.roa
File: 2cec0ace-16d6-4c52-ba9f-db9965c46a5a.roa (raw, json)
Hash identifier: vPwWwA+/1TDJYUSu+v+K/P07CFB71H8Q2vBZ3jOhEPA=
Subject key identifier: 91:B2:D4:AE:2C:33:3F:88:27:10:EB:75:2D:B2:9F:FB:CA:FF:F1:0D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 66ACC090E9B29ABA05537F15266DFC752D5C9A8B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cec0ace-16d6-4c52-ba9f-db9965c46a5a.roa
Signing time: Sat 16 May 2026 01:01:44 +0000
ROA not before: Sat 16 May 2026 01:01:44 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f23:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ac:c0:90:e9:b2:9a:ba:05:53:7f:15:26:6d:fc:75:2d:5c:9a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 01:01:44 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=d87acf3514d7559752d8081a0437d0625ea9d608d1ab567209fa3d992ec7472f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:5c:4b:39:1b:5c:96:8a:49:9e:69:52:7d:
f3:00:09:d7:e6:0f:54:4a:11:f7:77:c7:95:d8:c3:
99:0e:ce:2c:21:32:41:2c:48:56:0b:89:d9:07:a5:
10:30:f4:63:15:6a:9a:dc:b8:42:8b:ab:25:8c:75:
5d:bf:c1:b5:54:49:aa:8c:b9:f2:8d:6d:06:79:69:
06:ba:a1:6e:49:21:8e:fe:8c:95:d0:8d:a6:d4:3b:
ee:ef:18:dd:40:14:dd:7f:71:d3:97:56:66:f0:97:
8a:91:6b:a4:41:e9:5d:1f:66:9d:59:0e:f6:d2:f3:
06:13:c0:99:64:c3:c6:a2:ec:3a:bb:eb:f4:ab:21:
d2:00:3e:66:c4:25:bc:00:8d:ca:e9:f2:8f:a3:c9:
f8:7c:0a:d8:ad:d3:75:d8:26:9f:65:55:1b:55:3f:
9f:8a:21:ac:68:7f:da:f2:9b:8d:8c:ce:cf:aa:7d:
58:10:9d:c9:f4:74:25:7b:58:87:d2:24:00:3d:5f:
05:09:32:ab:4d:5d:70:46:6a:ed:f0:d6:15:59:83:
89:01:88:7a:8a:a5:3c:5e:47:67:a7:ab:30:77:91:
46:8a:e2:6b:f7:5d:59:c4:2f:a2:84:23:c4:cd:d5:
a5:df:c1:d5:e6:7b:2f:f9:91:d6:e0:d0:5e:7a:f6:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B2:D4:AE:2C:33:3F:88:27:10:EB:75:2D:B2:9F:FB:CA:FF:F1:0D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cec0ace-16d6-4c52-ba9f-db9965c46a5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f23:4000::/36
Signature Algorithm: sha256WithRSAEncryption
3a:db:f4:04:e7:6d:eb:9b:6a:be:9a:b3:24:c6:bc:e3:fe:25:
5c:0d:9d:3b:ed:47:b8:5b:89:9e:d6:30:62:cd:b1:50:f7:14:
02:70:a5:a4:6b:1b:78:45:1f:1e:cc:c8:5f:f6:bf:b9:db:85:
54:ae:93:4b:10:4c:c3:b8:4c:d4:1a:0a:9c:6d:17:3b:0e:46:
8f:5f:54:bb:8f:17:6b:09:af:d2:52:a9:9a:01:16:18:75:68:
6c:69:50:fd:a3:e7:f9:62:00:b7:9c:ac:d0:34:44:2f:99:b5:
1c:43:eb:90:4f:44:f5:fd:7e:9c:7e:80:ee:b2:3a:bf:a6:94:
af:cf:63:f0:8d:c5:77:1f:73:e0:24:bc:29:fb:87:0e:f0:ec:
af:f3:eb:9b:00:e7:3e:4f:3c:5d:a1:b4:b9:03:70:93:e1:19:
eb:37:bb:a1:dd:7d:38:db:82:eb:58:d2:ee:58:79:7c:ba:f9:
db:b4:f1:af:68:73:1f:bc:4e:3b:69:bd:4a:8a:e4:fc:74:15:
a3:02:ec:00:c0:1d:fe:94:b2:b0:52:02:10:06:e9:a6:88:7a:
ac:5b:bc:6b:6c:7c:f9:49:fc:cb:cf:9b:be:82:81:d8:1d:b5:
72:6b:ee:48:3d:5d:89:cf:33:bb:dc:42:9b:d6:ba:e0:5e:13:
69:38:6e:20
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:48:45 2026 by rpki-client