
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6db61f29-bda6-440a-839a-9641601fcb3a.roa
File: 6db61f29-bda6-440a-839a-9641601fcb3a.roa (raw, json)
Hash identifier: 3GVjaM4Q49d1QAO+YflEeBpy4Y3y2lyAetZEIbaLJn4=
Subject key identifier: 40:DD:60:0F:B9:6D:A6:B6:CC:16:A6:43:AA:57:4A:74:80:27:12:51
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3525F23AC379DA2CD4DE84DC229CDF5D7CEC38B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6db61f29-bda6-440a-839a-9641601fcb3a.roa
Signing time: Sun 31 May 2026 00:51:55 +0000
ROA not before: Sun 31 May 2026 00:51:55 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f33:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:25:f2:3a:c3:79:da:2c:d4:de:84:dc:22:9c:df:5d:7c:ec:38:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 31 00:51:55 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=07efb22958d2b210a3869dff6c92bc7d72e354906657a1ace7e6a00e3ab99cc4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:42:18:d1:b2:9a:07:6c:7e:87:0d:2a:2f:
9e:7f:f0:24:ad:ec:e6:22:42:e3:ea:49:3d:80:b6:
79:00:b3:fd:dd:8d:da:b3:07:1d:3c:31:0a:8d:ba:
bd:c6:13:e3:20:bd:d8:bd:3c:a4:83:78:2c:b6:1b:
bd:bf:00:81:48:bc:5a:2b:00:43:6a:4b:fc:df:36:
b9:4c:80:90:0f:16:ea:3c:fe:0a:d1:43:48:b5:68:
ce:70:9f:bc:d0:23:28:53:3d:e6:cd:98:69:98:ec:
ce:84:75:16:d3:9c:2b:83:b9:da:43:2f:0f:65:71:
2a:56:2c:b3:95:ce:de:1d:a3:53:1e:05:e8:13:09:
36:30:d5:18:9b:2f:47:3d:8f:59:0c:92:bc:3f:16:
32:96:a0:0a:62:dd:1e:4d:f0:42:cc:40:e1:63:15:
50:29:8b:bc:9a:e9:d4:8d:05:90:d7:de:d8:27:f1:
8f:d1:82:79:9e:dc:f0:4b:cb:29:a6:21:b6:4c:3a:
a4:b7:91:8f:e5:91:bb:70:04:a6:ac:19:2c:52:38:
47:9f:98:87:7b:f8:c1:8b:fe:d9:e4:b8:d8:60:24:
e8:dd:01:6b:25:44:5b:7f:fa:66:7a:3c:dd:e7:36:
5b:cb:b3:41:34:0d:80:49:12:58:98:ba:9c:01:1b:
ef:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:DD:60:0F:B9:6D:A6:B6:CC:16:A6:43:AA:57:4A:74:80:27:12:51
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6db61f29-bda6-440a-839a-9641601fcb3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f33:5000::/40
Signature Algorithm: sha256WithRSAEncryption
05:df:4a:94:b4:06:96:16:93:f6:62:d1:7f:f6:bb:12:9a:be:
93:18:ee:ba:7f:d6:56:42:b6:61:19:56:6f:0b:33:6c:c9:c8:
b3:43:7d:c8:0c:1a:42:79:b2:14:0a:cb:22:dc:c2:3a:38:9d:
56:bc:4a:45:e2:5b:a2:df:88:07:66:65:f6:9d:01:19:bf:c4:
e0:63:14:ba:9e:cb:22:58:f7:a4:2b:aa:76:6f:97:2d:40:7f:
d5:d7:b4:fe:ea:b9:38:40:40:26:78:48:a1:76:23:bf:58:15:
a4:ed:89:ff:5c:67:ce:62:ba:ad:9d:bf:dc:95:9f:4e:b4:03:
9d:e7:18:d6:3b:e1:57:01:91:3f:a0:66:21:40:ef:b9:4b:74:
c1:89:ed:87:f0:63:e5:71:a4:9c:7d:f4:fe:59:c6:12:05:17:
ee:fb:ff:f4:d0:2e:85:d1:49:b6:4a:5f:69:7e:92:50:b0:fd:
13:29:99:3d:c9:c6:7a:9d:07:8e:d2:90:1b:38:d4:ec:13:20:
42:c1:44:a0:6c:f1:c6:2c:e5:95:f6:f1:63:1e:cc:e5:75:2a:
a8:a3:c2:9d:54:83:55:1b:ec:35:2d:97:bd:a3:19:28:8f:69:
8f:24:57:fe:b4:6f:a7:1b:77:23:55:4d:cd:ac:52:34:55:19:
48:8d:12:04
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:14:26 2026 by rpki-client