
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd60be6-3a38-465c-9ba3-85685b519a11.roa
File: acd60be6-3a38-465c-9ba3-85685b519a11.roa (raw, json)
Hash identifier: GMbF7JPQlobavEJa84HzS8qQbmw4WKVrNjMnrHgLANE=
Subject key identifier: B4:AC:0F:81:60:26:E5:B9:A2:E0:14:F4:F6:D4:14:EA:DA:7F:0D:39
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1B72E57809E00FEE6D0B3CFA7149CE74F0B0A6D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd60be6-3a38-465c-9ba3-85685b519a11.roa
Signing time: Sun 31 May 2026 01:00:05 +0000
ROA not before: Sun 31 May 2026 01:00:05 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe9:74c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:72:e5:78:09:e0:0f:ee:6d:0b:3c:fa:71:49:ce:74:f0:b0:a6:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 31 01:00:05 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=d69cf91968150239106bbc46f8c15381c1837000a370b53d230e72adec9ffc59, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:74:04:c7:fa:5f:3b:14:b3:4b:ef:aa:50:
d6:aa:4b:ae:66:8b:76:39:91:37:0d:61:41:4e:6c:
a4:fa:fe:0b:81:2f:c7:40:9a:2b:80:9d:49:b0:9e:
e9:45:5a:b5:03:a5:b1:0f:6a:44:8f:79:5c:d0:0b:
e6:44:2d:15:d5:33:c5:16:aa:f2:7e:83:3f:f9:f9:
c6:08:43:ea:a1:fa:cc:be:6e:ee:d5:12:62:ba:22:
9b:5d:75:20:e8:46:70:9a:7e:c9:f2:67:8c:37:c2:
0f:1f:fa:14:e9:50:88:4c:60:04:64:48:75:a5:fe:
26:00:11:11:76:f9:2c:ee:86:a8:6c:53:94:98:2b:
0e:d2:01:fc:d8:9c:02:ff:c8:57:0c:db:92:2a:fe:
db:d3:2d:92:eb:73:f4:d5:87:8e:c1:f3:59:21:05:
9b:3f:d4:71:da:ee:31:32:55:d5:8d:59:99:4c:9b:
8d:e5:0a:a9:81:61:9f:88:4f:19:b4:f0:58:bf:d6:
72:a2:bd:92:64:25:97:20:46:70:79:d4:01:2f:21:
a7:1f:e7:20:24:93:b5:0a:2a:c9:73:06:96:37:1b:
cc:6e:88:8f:8b:b7:32:91:81:b8:4d:28:8d:b3:2a:
03:12:86:3a:2d:09:61:4f:85:87:8e:a0:0b:16:03:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AC:0F:81:60:26:E5:B9:A2:E0:14:F4:F6:D4:14:EA:DA:7F:0D:39
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/acd60be6-3a38-465c-9ba3-85685b519a11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe9:74c0::/48
Signature Algorithm: sha256WithRSAEncryption
00:7d:46:b7:17:fb:2a:c1:43:8a:31:41:03:e9:a2:12:9c:e5:
4d:32:34:bd:ff:8d:af:0b:9f:78:f6:f6:6d:41:57:3f:a0:5c:
7e:f8:21:53:93:d2:42:53:41:44:b9:ed:2e:cf:68:f5:19:2e:
a4:a9:cc:7f:a3:e5:67:da:46:77:10:07:67:cc:e8:72:10:54:
3d:8b:93:5c:4d:34:6a:87:30:0a:36:41:d2:6e:63:57:66:7a:
99:64:35:93:6e:50:34:93:a7:1c:0b:6c:bb:e6:0c:18:a6:c4:
43:70:e5:a4:d7:ab:cc:43:8e:20:98:44:e4:0b:8e:96:4f:40:
77:66:9f:7d:1a:90:8e:14:4d:a2:53:04:c6:e7:0c:a7:2c:ac:
b3:b4:f6:81:e0:47:d5:ee:d9:19:d7:f8:93:1a:a1:ff:bf:44:
83:8d:b5:53:78:a5:33:56:01:eb:7c:f5:ea:6e:2b:40:58:2b:
7d:c3:07:e9:26:64:47:48:a2:f5:5a:a0:e0:0a:4e:b4:4b:21:
39:6c:89:8e:38:49:4d:65:fe:41:b8:35:3d:1e:3d:91:26:e5:
82:0d:e0:da:b2:19:32:d7:75:ac:ef:7b:56:7e:18:a8:18:9d:
e4:19:36:6f:1b:71:00:f2:a9:26:aa:5f:c5:15:f6:14:02:9a:
33:ee:61:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:22:10 2026 by rpki-client