
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99e391b3-1064-47bc-9cab-3c4d2e04870b.roa
File: 99e391b3-1064-47bc-9cab-3c4d2e04870b.roa (raw, json)
Hash identifier: 3cvL6tzelhY4BoRZkTNn/vaDwNTYrW2ozMMM2uP7+Ls=
Subject key identifier: 8D:BE:65:63:50:A9:F9:C8:B3:FC:C9:1C:E8:90:5B:C7:F8:83:DB:EA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 298F021FCF0D5B7B7ED3548DC09F9E4D9C3AED96
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99e391b3-1064-47bc-9cab-3c4d2e04870b.roa
Signing time: Fri 15 May 2026 01:41:21 +0000
ROA not before: Fri 15 May 2026 01:41:21 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 16.56.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:8f:02:1f:cf:0d:5b:7b:7e:d3:54:8d:c0:9f:9e:4d:9c:3a:ed:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 15 01:41:21 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=4c996d48fab0385837ddc416b1347048870ca7ac7a2a4f3a38a49c330d981e91, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:ad:5b:ea:19:6e:fb:c5:ca:6e:00:56:87:
32:fd:48:c8:76:64:f9:28:fa:3e:f9:e1:16:58:08:
41:2b:8b:3d:ee:26:df:76:0f:ae:68:1c:4c:49:ac:
20:f1:e7:70:d4:ee:52:6b:91:6d:47:2e:8d:d4:03:
cc:6f:1b:99:c4:d7:20:15:ca:90:2a:8a:f2:72:27:
7e:c0:50:f3:a6:28:b4:68:82:60:96:e5:d0:e4:ef:
84:6c:37:ce:a3:c5:01:a9:eb:2a:03:3f:22:3b:a6:
83:3d:4c:8b:9b:97:ec:ff:c0:a0:27:78:35:e6:b6:
01:db:26:46:9a:ab:52:24:c7:c1:76:c7:7b:32:3e:
ad:d8:7e:1d:38:af:9a:40:d4:a6:db:7b:c1:0a:67:
3d:c1:0c:fd:a7:e5:fb:49:3a:ac:53:b4:a7:40:19:
0c:22:50:a7:b7:c1:9c:aa:92:cb:eb:db:b2:22:be:
f9:c8:d9:46:e5:99:43:6b:31:e4:6c:a8:73:ec:eb:
4c:4c:5f:2f:70:5d:3d:f8:bc:d2:b8:37:e1:c7:0b:
7a:a6:ba:4c:bb:c7:5c:53:2f:13:d5:95:36:77:79:
bb:c7:ab:07:0f:0d:45:e0:66:00:f3:40:69:22:c1:
b5:9e:54:e6:f2:c2:d2:cd:e8:67:91:f8:81:7b:50:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BE:65:63:50:A9:F9:C8:B3:FC:C9:1C:E8:90:5B:C7:F8:83:DB:EA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/99e391b3-1064-47bc-9cab-3c4d2e04870b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.56.128.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:3d:4d:aa:ba:af:ca:36:9f:fa:08:22:9d:48:12:2e:cf:95:
69:9c:40:17:b2:86:c0:a2:fd:e5:15:83:6e:87:1c:9f:b1:13:
ac:2f:85:80:aa:b4:c8:00:0e:16:6a:6e:38:8e:1c:5d:94:8a:
6e:c5:26:38:00:19:22:58:cd:fc:96:30:e1:bd:80:ca:96:61:
85:7b:77:ab:63:30:aa:09:74:44:0d:d2:15:48:c1:84:de:3d:
84:8f:c5:e7:b3:a6:96:e0:8d:e6:d9:87:1e:19:09:2f:b2:4f:
96:51:f1:fe:01:de:29:bb:8b:33:ff:14:69:aa:3c:13:25:fb:
ce:da:38:b9:eb:01:d6:87:21:01:db:b6:24:c2:26:05:3f:09:
a2:50:7c:fb:e3:03:d0:6a:4c:9e:dc:ec:c6:33:66:ab:9a:c4:
f7:56:b2:03:8c:9e:10:64:42:da:a4:32:57:55:92:85:76:f0:
07:b0:d4:c2:33:2e:17:01:4d:78:25:36:f6:cf:0e:7b:6f:d8:
8f:1c:b5:2c:29:e5:46:42:cd:6c:a6:0c:3a:3e:1a:63:74:8c:
d2:97:8c:0a:6c:3e:8b:be:cf:f4:56:17:bf:22:75:4d:13:ad:
99:9c:0b:28:43:33:5a:94:57:eb:9a:cd:93:a0:b9:7e:38:c6:
1b:cb:28:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:48:32 2026 by rpki-client