
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91a249fd-41bf-4450-a8bc-cec7195b3682.roa
File: 91a249fd-41bf-4450-a8bc-cec7195b3682.roa (raw, json)
Hash identifier: lPSbMKiPZWUNhe9rbD4Q1X0+6c79EswUk3N1RdXEsOE=
Subject key identifier: 05:68:70:BD:10:C7:0B:D8:3B:1C:C7:82:58:46:C9:B4:61:CF:9A:2D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 629D3F1B1DFD31EB0F4EFF5AF0769F778030C7A5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91a249fd-41bf-4450-a8bc-cec7195b3682.roa
Signing time: Fri 15 May 2026 01:11:54 +0000
ROA not before: Fri 15 May 2026 01:11:54 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:80a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:9d:3f:1b:1d:fd:31:eb:0f:4e:ff:5a:f0:76:9f:77:80:30:c7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 15 01:11:54 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=9da8847bcccdfe377d892a386ef40a2756fe9d3b2d7d02e6540fde54a62c344b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:c1:e7:1c:31:7f:1b:75:5b:e6:c1:65:3b:
65:2a:34:18:51:92:2c:03:80:b6:c9:ae:3f:3a:ed:
8e:d6:5a:a7:b3:da:07:0a:15:db:cc:df:a1:dc:f4:
77:f8:b5:b6:21:17:64:aa:43:92:ea:b9:05:96:fb:
92:15:3e:e1:0b:5b:5a:b7:19:71:97:84:01:2f:4c:
1d:dd:72:10:16:8d:5a:70:dc:de:b1:59:4c:f7:3b:
3c:b2:66:84:9d:2f:7f:c7:9a:9c:02:ba:0f:b2:0c:
ff:ac:9a:cc:93:ae:78:6f:f0:c5:79:eb:e0:f0:62:
a1:ce:e4:64:5d:e1:32:78:8c:38:1f:84:0a:b3:e4:
d8:84:e6:7c:18:ac:3e:67:72:db:9e:b7:96:d9:c1:
02:25:25:79:a1:a4:7c:55:da:c3:e8:46:b4:a7:47:
f9:4c:5d:fa:59:c5:26:df:43:ff:35:d2:e4:c7:24:
07:fe:a1:59:ea:0e:67:74:70:88:f1:1b:df:50:f3:
8c:29:ec:e6:6c:32:7a:40:93:8b:04:ec:f6:be:cf:
a7:1f:6a:4e:3b:ca:1f:5e:75:c0:33:3d:42:50:99:
6f:5c:fb:35:70:51:e8:af:ee:49:3f:07:9c:25:ba:
4e:57:2a:06:6e:9d:1b:41:fe:20:87:d9:8d:fa:bf:
cb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:68:70:BD:10:C7:0B:D8:3B:1C:C7:82:58:46:C9:B4:61:CF:9A:2D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91a249fd-41bf-4450-a8bc-cec7195b3682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:80a0::/48
Signature Algorithm: sha256WithRSAEncryption
a5:f0:69:9b:66:b0:ef:6c:8f:26:48:4d:16:5e:4c:98:41:6b:
56:7e:08:e1:87:22:db:2f:b6:8d:7d:be:e6:da:1c:bd:97:98:
69:cf:e7:f6:53:6c:46:de:a3:db:78:46:e0:dd:2e:80:b3:54:
b5:ec:5e:4c:69:13:7d:32:30:9b:31:69:6d:27:fe:a4:e7:6c:
0d:19:bd:3c:ce:0e:9c:40:96:4e:ce:55:0b:f5:e9:4f:bf:99:
0b:0b:58:66:cb:b6:20:cf:73:57:5c:b6:34:b1:fe:46:29:87:
0b:82:e1:3a:5d:b2:a9:2f:32:11:fc:bc:01:85:c7:ff:7d:fe:
11:c8:8f:c4:10:75:50:5a:01:7f:53:3f:55:1c:fc:97:5e:68:
bd:b1:48:f6:b6:a5:1a:71:27:19:07:79:14:b3:97:0f:28:30:
fb:64:e4:00:1e:f2:4a:43:39:98:f2:34:32:75:53:23:c6:f4:
e8:1b:dd:a9:c8:6b:df:1e:24:af:d5:b9:cd:7b:c2:69:29:d6:
18:90:4b:b0:9c:ea:36:fe:f2:ee:b2:39:88:98:1c:17:ce:40:
aa:ee:f8:bf:8f:c4:1e:cb:d4:34:7d:a8:06:81:52:fc:08:63:
eb:93:e4:4f:0e:12:d2:29:44:db:4a:27:93:ef:fe:ff:68:3b:
6b:d6:c9:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:33:07 2026 by rpki-client