
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5928830b-bdc0-40c2-82a8-029c15dbefb1.roa
File: 5928830b-bdc0-40c2-82a8-029c15dbefb1.roa (raw, json)
Hash identifier: FsVtK2Pm8t20+En5+YgPszpOS9q9YZKMXhQGemS5eOo=
Subject key identifier: 00:F8:1E:10:12:EE:45:1B:48:04:7B:73:F0:D1:71:74:7A:EA:56:E2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 235E1B715456DACCB01C8016509EF0D2C4F0580A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5928830b-bdc0-40c2-82a8-029c15dbefb1.roa
Signing time: Mon 27 Jul 2026 00:30:12 +0000
ROA not before: Mon 27 Jul 2026 00:30:12 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 93.76.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:5e:1b:71:54:56:da:cc:b0:1c:80:16:50:9e:f0:d2:c4:f0:58:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 27 00:30:12 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=383c0b949c4a512c7234cb695bd696545a949e3847afb2aa6af171599fe1b4b9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:01:db:41:50:9e:ce:62:7a:89:2a:b8:92:
45:96:8d:84:69:71:3b:20:07:b3:e7:58:e4:b8:5b:
d0:36:5d:c0:e0:c8:b9:4f:83:81:06:bf:45:c5:4e:
94:7e:20:3c:a1:d7:f8:32:47:18:15:30:0e:f2:39:
df:55:a2:ba:a1:71:12:6d:d3:4e:e8:d4:51:c1:7b:
41:8b:b4:91:4d:7b:36:ae:d4:25:f3:d2:2a:6b:84:
89:29:f2:64:ff:a3:28:ce:8b:30:9b:bc:aa:ec:40:
e3:7b:02:63:24:e3:3b:68:4a:a7:f8:59:c0:d6:9a:
d5:22:14:44:b6:95:a4:03:5e:df:27:7c:a7:f2:4f:
c5:35:aa:82:04:e3:fc:f7:63:c6:c2:0b:67:1f:28:
57:b3:39:ac:69:27:33:08:14:69:20:4f:5d:46:3f:
74:8e:56:4a:e5:2e:83:79:68:29:50:91:5b:6f:3f:
ef:50:e8:72:7a:dd:8e:9e:0d:4c:b1:35:a3:ad:8e:
01:7b:72:61:9a:92:aa:90:69:b7:bf:e9:04:87:47:
d4:e1:92:43:97:ef:3b:17:f3:fd:b2:52:f4:8e:72:
c6:21:02:ff:dd:a6:97:b5:90:2d:5d:8c:31:f3:88:
a9:b0:c4:cb:4e:cc:e2:11:57:e6:fc:37:d0:e4:aa:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F8:1E:10:12:EE:45:1B:48:04:7B:73:F0:D1:71:74:7A:EA:56:E2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5928830b-bdc0-40c2-82a8-029c15dbefb1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.76.128.0/17
Signature Algorithm: sha256WithRSAEncryption
6e:ea:6d:e0:9e:5f:14:e9:c2:7f:50:97:8f:21:e9:95:6a:3a:
02:b8:b1:31:a6:1a:07:f0:d5:6d:d0:db:8d:94:61:6b:86:ad:
90:76:3f:c9:c6:17:0f:c2:b4:ed:6e:4e:66:83:94:74:09:e4:
ef:4d:30:99:41:9a:6d:22:41:e5:2c:34:fa:a2:7e:30:5d:2a:
46:5d:59:04:0f:c0:70:12:7f:7b:ad:be:4b:32:3a:0e:4e:fd:
61:62:d5:e9:42:0c:aa:2d:dd:6c:b8:ff:78:ca:cd:8b:9f:34:
5c:a0:e3:69:7d:0d:2e:29:cc:5f:e1:27:60:58:ca:0d:7c:c3:
7b:f9:1d:88:cf:7c:6c:f0:06:8a:22:48:a8:05:55:1a:ce:f9:
6c:a6:2d:30:07:ce:cf:63:5a:58:19:50:43:fd:36:dd:29:3a:
45:21:f6:8f:fc:1a:7e:a0:6e:52:93:98:25:64:0a:29:fc:d2:
68:c9:25:99:23:52:6f:56:7a:2e:f9:a7:ad:28:3a:97:c1:d0:
9a:d2:74:50:4b:e0:e1:c3:ce:61:a1:bf:d4:da:3d:08:e1:de:
7d:05:1b:8f:4a:c8:a8:78:be:76:a9:da:0f:51:03:00:d9:84:
ce:18:84:c4:05:9a:b6:3b:b4:7e:21:74:b2:16:0a:86:c6:9a:
06:28:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:53:10 2026 by rpki-client