
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c8660c7-8f2a-4a62-a3a8-c5515fffe9c1.roa
File: 8c8660c7-8f2a-4a62-a3a8-c5515fffe9c1.roa (raw, json)
Hash identifier: pI/iDF7RU+3Ec8nLQOeqiWhJsnio5DjjvfYDWqTKiPk=
Subject key identifier: FB:E2:27:FB:F5:84:E7:85:5D:F6:AF:F6:77:EA:C7:1A:48:E3:33:E3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 28EB79FD61B6D4D5B53A1D8F7076A0916F0EDC3A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c8660c7-8f2a-4a62-a3a8-c5515fffe9c1.roa
Signing time: Thu 10 Sep 2026 00:21:32 +0000
ROA not before: Thu 10 Sep 2026 00:21:32 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1feb:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:eb:79:fd:61:b6:d4:d5:b5:3a:1d:8f:70:76:a0:91:6f:0e:dc:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 10 00:21:32 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=21537c53450ff2f126a33f7644e11760142b48401fe494a955ffd12f7abf0391, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:cd:7c:c9:2c:89:1c:3d:a6:49:e9:d8:be:
f0:78:3e:6d:1a:bd:4d:b5:6b:98:f7:b6:9d:5f:08:
2c:c1:2b:68:83:62:40:78:29:8d:0c:fe:38:b6:20:
3a:7b:1c:14:1f:c8:bb:b5:2a:48:ca:cf:b1:ed:ec:
d3:e0:04:c2:20:2e:14:74:9c:80:38:b4:28:d0:ce:
93:fd:ab:27:42:8f:31:47:0e:71:58:2a:07:53:ca:
59:07:95:74:18:b8:29:a2:99:67:6c:dc:27:17:30:
65:16:1f:63:c2:b4:4d:b6:37:05:3d:5c:14:97:ae:
99:87:cd:ba:f3:ba:6d:fc:b7:01:74:99:c7:1c:89:
c9:f3:48:0c:30:02:4e:e3:fe:f4:74:38:05:ba:5f:
d9:2d:c8:61:aa:19:e5:4a:26:da:d7:ab:c5:ac:eb:
77:f1:e2:fa:36:fa:9a:03:b7:b4:e6:61:ff:03:cc:
7e:6f:e6:60:e0:fa:9d:99:20:f7:b3:9b:13:35:e2:
b2:dc:a7:da:04:bf:81:69:6d:10:2f:3d:36:12:d4:
d0:b6:cc:e2:4f:25:02:6a:13:d3:95:f7:d8:56:a8:
2e:56:01:ac:63:cc:c3:aa:54:90:ce:36:27:f9:48:
8c:8d:e8:c5:1f:a1:fa:4e:07:b1:53:3b:37:c2:c5:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E2:27:FB:F5:84:E7:85:5D:F6:AF:F6:77:EA:C7:1A:48:E3:33:E3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c8660c7-8f2a-4a62-a3a8-c5515fffe9c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1feb:1040::/48
Signature Algorithm: sha256WithRSAEncryption
50:5d:4b:cc:cb:ae:d4:82:a7:33:3e:a2:7b:f6:e2:a2:45:59:
f4:b9:07:92:75:1a:5e:10:4e:3e:96:8a:ce:1b:12:64:d9:5f:
01:02:93:d9:b5:b7:c6:9b:19:9c:47:62:ae:cc:0b:58:7a:66:
d7:13:d9:16:09:d9:4b:31:82:83:47:5a:e0:d8:19:fc:e0:88:
a2:31:f1:4d:8a:f2:f3:ab:0b:f0:a7:10:58:37:df:f4:bd:af:
de:78:13:6b:2f:48:8a:c2:51:26:58:20:db:21:f5:3d:40:bc:
a7:3d:70:c9:29:d2:0d:78:3a:d0:5b:11:9d:83:c1:c2:8f:ec:
6c:f3:f6:e8:7e:ac:44:66:a2:7c:8a:9d:70:b0:04:b5:e1:16:
e9:95:51:64:ad:27:34:98:4f:ab:e7:1b:4d:55:fd:22:d0:63:
b6:d5:e9:2f:52:53:1d:94:c3:e0:09:da:4e:f8:fc:78:b0:e0:
fd:20:97:7c:93:47:c7:3f:ac:a0:5f:4b:03:2e:16:53:c1:9c:
f3:d6:f8:bb:87:04:f1:ea:77:aa:ff:05:8a:4a:b3:d2:22:48:
62:7a:07:a5:ba:f0:e0:fa:a1:74:30:74:9c:32:98:fa:ce:85:
be:0f:8a:c8:de:55:31:66:cb:fb:2e:62:26:50:b2:16:14:48:
d1:f2:e1:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:15:03 2026 by rpki-client