
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/700505d3-bc8c-4adf-a1ed-402c0ee1fb7a.roa
File: 700505d3-bc8c-4adf-a1ed-402c0ee1fb7a.roa (raw, json)
Hash identifier: AjUlGo1HyuMp6ybcaZGrGHPV7XxW0bDRlIanWDXZtj4=
Subject key identifier: 35:4A:F4:D1:A2:85:C5:55:C1:53:80:F2:78:D0:C2:6A:F1:8B:E4:64
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 21CC959AEC05CFB735E5CF91EF9BBD884AB53BC4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/700505d3-bc8c-4adf-a1ed-402c0ee1fb7a.roa
Signing time: Fri 30 Oct 2026 00:02:45 +0000
ROA not before: Fri 30 Oct 2026 00:02:45 +0000
ROA not after: Thu 28 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 32.200.0.0/13 maxlen: 13
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:cc:95:9a:ec:05:cf:b7:35:e5:cf:91:ef:9b:bd:88:4a:b5:3b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 30 00:02:45 2026 GMT
Not After : Jan 28 23:59:59 2027 GMT
Subject: serialNumber=4b1e882a8674466e7cd1fe9a0c5066dc730a453d6d07aca9ee8bffc18512b2bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:ff:7d:4b:36:53:91:da:25:9a:ad:a4:9b:
4a:72:7a:82:ad:ca:6d:1a:b3:5f:15:b2:3d:5d:09:
f2:cd:19:54:8c:ac:13:20:dc:90:a7:4c:f0:bd:c0:
fb:ca:75:13:c7:88:11:42:65:ce:88:62:0a:2b:0d:
c4:38:db:07:14:54:46:ea:ee:68:4a:5d:06:3f:af:
49:34:90:e2:a3:5e:08:78:71:d7:dd:87:fa:4c:d2:
e4:12:0c:ac:ce:f0:e6:b5:b0:d0:08:16:c7:4a:9d:
e0:a1:79:14:84:06:cc:b5:52:6c:d5:e2:0a:1f:72:
e8:cf:03:b4:88:57:4f:42:54:87:50:4e:a6:84:ff:
86:74:14:81:b3:bf:2e:b9:c7:b4:6e:da:0e:44:55:
d8:16:f3:4e:e9:b2:3b:fb:48:46:cb:30:7d:8f:59:
a8:82:2c:51:38:8a:61:2c:d5:5b:51:ab:5d:1c:9e:
31:90:71:94:78:fd:52:01:de:75:ea:42:ec:1a:5a:
2d:f6:04:7f:54:db:f4:94:c2:73:ac:01:99:c0:bd:
2c:79:99:a0:42:d4:f1:4d:77:8c:e4:97:dd:5e:35:
99:85:25:f1:c6:b3:c2:92:20:8f:e1:8e:4c:4f:f6:
55:83:22:b1:da:3e:36:d4:fa:b2:f1:3e:4a:26:78:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4A:F4:D1:A2:85:C5:55:C1:53:80:F2:78:D0:C2:6A:F1:8B:E4:64
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/700505d3-bc8c-4adf-a1ed-402c0ee1fb7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
32.200.0.0/13
Signature Algorithm: sha256WithRSAEncryption
55:ad:5a:02:43:3f:86:b0:61:e0:cd:90:a6:95:f6:40:eb:1d:
21:c2:38:c3:46:30:15:88:b5:36:c8:31:46:fe:3e:c3:ae:5a:
25:53:01:28:64:20:fc:85:be:95:1f:d1:18:3f:ba:25:7f:6a:
e0:48:d2:5f:f5:3d:29:bc:e6:99:6a:ef:e0:06:24:62:50:1d:
68:1b:2e:42:06:60:b6:fe:4f:e6:71:e5:a8:68:ae:22:de:ab:
be:7c:72:56:9d:5a:f8:1e:5d:b3:25:af:9a:b5:85:f6:3b:5a:
ba:8f:c0:ae:0b:f9:f6:c5:f6:bc:72:9d:e2:4c:81:89:fb:54:
2b:de:39:4c:67:d7:32:da:87:5f:b7:77:9a:6c:74:9f:84:7b:
61:0e:ae:d4:21:5b:bd:54:8b:ed:16:bb:19:e9:23:77:f7:9a:
11:45:7c:93:f6:f6:26:59:d6:2e:43:52:72:6e:53:9f:8b:95:
86:79:c3:04:02:5d:9b:1e:60:89:3e:dd:af:ec:9b:74:ed:2b:
0b:9f:b3:98:1a:a5:c2:c6:0a:4f:d0:fc:a6:19:46:5c:23:2d:
0a:a3:45:ad:3d:3a:fc:dd:ef:69:f5:f5:a4:14:5a:2f:fb:15:
af:1f:a7:7e:df:11:f7:c3:dc:49:5b:a3:e8:03:f9:c6:a9:0d:
18:f9:19:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:32:45 2026 by rpki-client