
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38ad6462-b456-4582-8efc-9aa941ff8e4f.roa
File: 38ad6462-b456-4582-8efc-9aa941ff8e4f.roa (raw, json)
Hash identifier: 0CDxMF4myDttoRTuH1NqC9TdAkPUz5n9p04jbLnajHU=
Subject key identifier: D2:D1:83:7B:33:53:DB:84:93:E2:7F:88:36:EA:9B:E9:19:2C:30:8F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 32A0BF77F55111BF127F8D65855D45C29F114AFF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38ad6462-b456-4582-8efc-9aa941ff8e4f.roa
Signing time: Sat 16 May 2026 01:31:00 +0000
ROA not before: Sat 16 May 2026 01:31:00 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f21:4000::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:a0:bf:77:f5:51:11:bf:12:7f:8d:65:85:5d:45:c2:9f:11:4a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 01:31:00 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=91923d424a18e07b8f96770d73b353bb2215da2aeff7815f850dece232d3ced7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a3:cd:4c:d6:38:50:23:17:bd:ca:df:bf:c5:
46:ca:47:ba:99:78:f1:c2:13:a3:60:67:dd:d0:50:
c2:2b:59:e1:9e:81:ae:c8:4b:5b:22:a2:9a:a0:7a:
43:98:d6:1a:ca:7d:d9:bd:77:af:0e:4a:ee:aa:c2:
a5:5d:dc:a3:13:36:fd:91:f9:60:5d:72:34:c2:f6:
35:69:2d:72:79:dc:51:c7:69:6b:02:09:36:0a:92:
3c:bb:04:9f:20:f5:4c:69:67:f1:2a:d5:e0:6c:81:
1e:36:98:e6:fa:43:5a:27:be:1c:11:08:d5:e0:89:
ed:db:92:d3:a9:1f:38:b7:38:4d:90:21:52:e5:85:
46:25:9f:06:f1:ba:b8:34:57:78:d2:e5:1e:8b:c7:
63:26:74:43:92:cd:d8:f5:f4:35:7f:dc:ad:54:75:
9c:35:ea:0b:98:0a:4b:ae:cb:65:28:b0:84:b3:bd:
d0:c6:bd:6a:4c:47:c9:4a:fc:52:7d:69:98:26:cf:
77:a4:41:d8:0a:ec:eb:1e:73:14:c1:f5:83:8d:0a:
b5:a4:c3:f1:4e:68:9a:50:e7:86:3e:08:c2:54:f7:
0d:9e:79:c6:f8:a2:00:7a:be:13:f4:de:67:af:ba:
61:31:ba:77:68:82:13:a6:43:23:5e:0d:21:bb:85:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D1:83:7B:33:53:DB:84:93:E2:7F:88:36:EA:9B:E9:19:2C:30:8F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38ad6462-b456-4582-8efc-9aa941ff8e4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f21:4000::/37
Signature Algorithm: sha256WithRSAEncryption
8c:78:2c:2d:5f:bd:a2:06:26:53:f1:70:82:23:05:77:87:70:
47:7a:5c:23:c6:1e:99:cf:29:cd:c2:34:6e:34:42:c8:57:bf:
2a:45:d7:c1:a0:49:df:42:29:35:7e:1c:81:cd:f0:97:1f:4f:
53:e4:40:e5:3e:e4:83:b9:61:6a:73:d6:c4:d5:ae:0f:6a:3c:
aa:f5:8c:fb:6f:0d:71:63:cb:17:92:72:3f:f8:93:e8:a1:7d:
b1:24:70:04:e4:02:6d:96:5c:6a:c5:a0:5d:c2:8c:bd:fd:89:
80:73:9c:44:25:2b:4e:d5:1f:75:d5:be:1b:3b:4b:b9:f0:7b:
7d:0f:71:c5:02:23:7f:95:08:51:20:c6:14:8b:24:93:89:08:
8a:8f:2d:00:13:63:01:3b:e2:4c:ff:0c:fe:d1:42:75:49:6f:
93:08:d3:99:63:8a:bb:c9:2a:c2:0a:30:c5:37:a5:c0:cd:41:
eb:f8:f0:cd:15:8f:68:88:9d:3e:68:ad:79:ca:1f:70:73:2c:
ff:32:4f:fc:ce:44:23:a7:79:a8:59:5a:63:b1:9f:82:c2:0d:
ea:8e:7d:f6:f2:46:b7:0d:07:05:63:db:e3:40:f5:a9:14:1a:
4d:50:c2:7b:0a:24:b7:a1:61:09:80:1c:f0:af:15:61:2c:ff:
df:2f:fa:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:49:33 2026 by rpki-client