
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56df9d03-0d36-477f-ae34-13bb14573a5c.roa
File: 56df9d03-0d36-477f-ae34-13bb14573a5c.roa (raw, json)
Hash identifier: VJ5foiX4wXuywXvRMuFsH9rmAkbVq49INfKzO0aIpGY=
Subject key identifier: A5:67:D8:70:F7:10:C0:F2:38:05:50:49:79:7F:D3:B6:43:F8:FD:B9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 398179EB91F22472FF98A2834215DB7E60298AA5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56df9d03-0d36-477f-ae34-13bb14573a5c.roa
Signing time: Sat 16 May 2026 00:30:10 +0000
ROA not before: Sat 16 May 2026 00:30:10 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff6:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:81:79:eb:91:f2:24:72:ff:98:a2:83:42:15:db:7e:60:29:8a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 00:30:10 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=2adf82eed33364dd60da4ed8db4e1fdce67cbf176c8cf94aa6727f2114b1566c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9c:01:7e:c1:0b:fd:79:9d:a0:7b:95:b9:95:
76:89:5e:0e:68:e3:8b:17:c5:04:d6:4c:f9:41:f8:
a7:33:7e:91:38:ed:55:17:c9:06:4d:5b:e4:b9:74:
c9:43:6e:57:a8:53:df:17:c6:d8:85:ed:48:66:6f:
92:13:71:43:a6:32:99:f8:8d:24:14:29:81:41:76:
46:7f:5f:cb:f6:05:31:42:3a:e1:6f:ba:62:17:88:
1a:10:76:c3:27:6b:7f:5b:87:72:98:6b:ab:07:94:
cf:a4:a6:b1:6b:34:95:b5:ac:1f:38:00:59:c8:f5:
c0:f7:27:1e:8d:a2:b6:db:74:20:fa:7a:f5:12:63:
38:66:47:09:dd:20:9e:b0:84:b8:da:78:6d:eb:f5:
db:13:b5:68:2e:94:f0:7d:62:f5:2f:86:69:f0:05:
48:c7:82:85:11:89:45:5e:e3:d8:7f:b9:19:04:16:
6f:2a:19:6c:f8:9d:18:4b:e2:26:c4:99:d6:12:67:
c7:f5:0a:e8:2c:69:cc:ab:5e:46:76:cb:dd:c9:eb:
0f:9d:3d:1a:01:51:77:7f:c8:82:da:21:88:dd:5d:
2f:a5:6f:ec:89:98:4c:33:12:dd:3a:95:45:cc:60:
49:06:34:04:5a:10:da:f6:7c:3c:26:44:e7:e5:cd:
ba:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:67:D8:70:F7:10:C0:F2:38:05:50:49:79:7F:D3:B6:43:F8:FD:B9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/56df9d03-0d36-477f-ae34-13bb14573a5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff6:2000::/40
Signature Algorithm: sha256WithRSAEncryption
97:be:c8:b9:5f:19:5c:0f:c7:87:57:68:85:8a:1e:17:a9:22:
ac:38:be:a8:fa:b0:f1:02:54:ee:c3:2e:30:9a:b8:24:72:e5:
bc:4b:fd:d7:a5:69:df:33:e6:a9:ba:df:59:6e:70:c4:59:6b:
95:10:de:bc:77:79:85:45:d0:b7:48:9c:2b:6d:9c:d2:f6:7e:
2a:ff:56:df:32:56:d2:7f:18:bb:b2:df:84:f8:c3:a6:3c:67:
6a:fc:e0:43:87:ea:69:8c:f8:a4:ed:8e:4b:67:5d:72:be:63:
ec:c5:ea:97:fd:65:f5:9e:d4:28:26:a6:24:33:2a:ba:29:bd:
dc:98:c7:62:42:70:6f:ae:e1:e9:11:d7:55:bd:f2:75:47:0b:
7c:00:8e:1e:4b:3a:52:81:97:2b:52:ee:0b:87:9b:ad:09:51:
4a:00:32:9c:06:5e:4a:f1:8e:7a:2a:58:5d:59:9b:ca:f8:61:
59:4b:47:38:d8:61:df:5d:f0:d7:0b:51:56:9d:11:cc:bf:97:
6a:e3:72:13:9a:82:86:2f:ba:60:6b:ae:c4:31:bd:ad:e9:29:
bf:57:a5:07:2b:a7:1f:6b:5e:17:20:63:49:a7:fa:55:c1:6e:
08:3c:8d:bb:6c:07:1b:2e:58:cf:10:74:31:38:23:b3:bf:26:
c3:3f:a9:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:49:41 2026 by rpki-client