
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a83f5a56-9f35-4d82-9ebc-eae61856282f.roa
File: a83f5a56-9f35-4d82-9ebc-eae61856282f.roa (raw, json)
Hash identifier: J2qwSXvEfVEiNfvkO4FAZp9+ltUfXuVLczm9zRjF6Lk=
Subject key identifier: BD:4B:66:0A:0B:84:3E:06:F5:9E:F0:76:51:14:E6:C0:48:4B:2B:25
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 532F9767E0141256E70AE7041EBDF7CF6B4B4DBC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a83f5a56-9f35-4d82-9ebc-eae61856282f.roa
Signing time: Fri 03 Apr 2026 00:10:08 +0000
ROA not before: Fri 03 Apr 2026 00:10:08 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1feb:7480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:2f:97:67:e0:14:12:56:e7:0a:e7:04:1e:bd:f7:cf:6b:4b:4d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 3 00:10:08 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=83e6abf21fbbacfd49fcb2c88170270d6cd836130ec1e337395d7e59f575cde5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:1c:27:0f:94:e5:0d:7b:f0:e7:ba:b5:6d:
28:75:2e:3e:71:02:f5:6d:c6:92:f0:ea:8c:2d:cd:
e9:f2:98:a3:03:79:ff:b2:81:05:1a:51:8f:c1:16:
46:63:12:cd:48:e0:65:57:45:67:25:6d:03:08:a1:
b9:4d:59:b6:35:93:15:6d:10:bb:5b:73:58:e0:8d:
4c:9c:11:f1:e5:90:57:a9:60:2a:ec:a7:a2:3a:a4:
ab:06:a2:c0:b4:2a:78:cb:46:44:b0:b0:74:2f:9d:
d7:97:6c:f6:ac:00:37:2a:81:ab:76:0f:3d:05:11:
92:2b:78:ca:80:0f:3f:1e:2f:de:21:8c:9b:bb:cd:
79:23:11:6c:85:ee:86:46:96:da:f8:66:29:a8:02:
a3:4a:00:bb:6f:7b:9c:ce:ad:3b:89:bb:90:f9:52:
16:5b:53:db:5d:11:63:91:83:bc:42:58:ac:75:6c:
2f:48:19:65:e0:c7:06:88:20:da:31:f8:07:f1:5d:
2d:63:b8:4a:1d:32:d2:8b:5e:e9:23:c8:e1:1c:6d:
f8:93:51:eb:89:71:a7:7f:80:59:f3:b0:c0:61:51:
ff:ee:6d:07:58:96:5e:0f:12:11:77:27:a0:eb:2a:
64:59:ef:7a:d1:44:a3:fb:2b:03:32:99:c8:47:8f:
d8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4B:66:0A:0B:84:3E:06:F5:9E:F0:76:51:14:E6:C0:48:4B:2B:25
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a83f5a56-9f35-4d82-9ebc-eae61856282f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1feb:7480::/48
Signature Algorithm: sha256WithRSAEncryption
48:07:f1:ec:5c:03:df:13:75:0a:ac:50:3a:c4:43:21:8c:34:
8c:8a:6f:4d:3d:99:1b:f8:20:65:71:8a:bd:da:78:ba:23:97:
a7:a1:15:2f:ae:f8:99:16:f0:22:97:20:8d:b5:1d:81:e1:a3:
6e:74:21:7d:69:f1:a2:0d:1e:2d:5c:2f:19:20:ae:e9:a1:ab:
a3:59:b3:24:56:70:03:7d:e2:ab:64:47:d4:3e:a7:98:ec:bd:
7e:89:dc:c3:49:a1:1d:4f:a2:d3:24:c2:5b:dc:e0:97:30:43:
44:bb:ac:d2:d6:81:45:b2:ed:da:94:77:63:ec:5c:ba:dd:de:
89:ec:c7:e0:ae:8c:df:72:7c:a8:80:f6:fb:e9:d5:1f:1f:92:
6e:c3:39:da:64:7b:6d:c3:a0:ad:9c:00:29:39:e6:99:1d:76:
be:ed:25:49:6c:2c:65:21:7d:df:ad:87:0c:e8:a2:f9:8f:a2:
47:4c:4b:86:db:29:5e:ee:8d:16:c7:a7:04:71:02:65:1f:10:
0f:8b:af:f8:f3:5a:15:75:1b:ab:a3:48:e7:2f:77:58:5b:63:
e7:74:25:01:59:41:b1:55:39:6a:11:49:ee:52:22:0d:7f:8b:
bb:2f:fc:85:77:c0:b9:1e:69:ea:1a:ed:2d:c3:66:58:ea:7d:
11:62:20:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:37:12 2026 by rpki-client