
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5b132a1-b63b-42e5-abb0-001c77098d3d.roa
File: b5b132a1-b63b-42e5-abb0-001c77098d3d.roa (raw, json)
Hash identifier: rP/r9ftrQQdgMrFv97X6WTDUqgTVoqz/uOU6AEs+3y8=
Subject key identifier: 7B:7D:88:EF:CA:A3:41:F8:66:6E:55:8D:2C:0C:4D:BD:53:8C:BF:9F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 081D8AD84997FE738FD59A040FC29174D76292C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5b132a1-b63b-42e5-abb0-001c77098d3d.roa
Signing time: Sun 06 Sep 2026 00:00:07 +0000
ROA not before: Sun 06 Sep 2026 00:00:07 +0000
ROA not after: Sat 05 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 32.236.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:1d:8a:d8:49:97:fe:73:8f:d5:9a:04:0f:c2:91:74:d7:62:92:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 6 00:00:07 2026 GMT
Not After : Dec 5 23:59:59 2026 GMT
Subject: serialNumber=3b0f000fc2e983eb4fc31729ed3a8967ee57503cd5772b315375730b19000442, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:36:1b:86:31:6f:35:0d:ff:59:a3:89:ea:78:
89:a4:34:f0:33:2a:11:5a:32:d3:86:0e:b7:cf:17:
d3:0d:8f:ff:e8:67:94:b8:24:7d:8a:1e:29:d8:17:
e9:a1:5b:e7:3e:2f:e8:8b:d8:50:21:3b:b3:82:27:
b9:7b:fa:87:c3:c3:c8:dd:19:43:19:c5:21:80:f2:
e9:63:13:bd:ea:03:19:63:d3:ef:e1:30:5a:b0:02:
e2:41:91:12:1a:9e:47:b0:30:55:6f:1d:da:77:9e:
0c:a6:b6:2e:8b:b8:c4:aa:ea:a6:bf:3f:6b:06:34:
d2:ae:11:08:6b:4f:a2:b0:29:41:1a:3a:0a:c7:7c:
d3:da:03:c9:4b:e2:af:57:c3:91:c6:f8:0b:57:45:
b5:eb:c4:59:a1:60:38:1e:d4:20:6c:75:89:b5:8c:
89:79:0e:63:69:92:82:e9:d8:75:87:40:3e:d9:4b:
f3:9d:9c:f7:10:9f:39:fe:c4:4d:6d:42:fe:f8:ad:
08:1f:5d:f1:0c:82:c9:4b:93:90:51:7c:a1:1c:40:
14:93:f0:d4:4f:b8:62:6b:c4:90:ac:d2:2c:ce:ca:
84:be:79:fe:00:17:ab:7e:a9:c8:8c:df:42:c2:76:
16:3c:e4:09:77:19:18:c2:19:25:86:b4:51:44:ed:
9d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7D:88:EF:CA:A3:41:F8:66:6E:55:8D:2C:0C:4D:BD:53:8C:BF:9F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5b132a1-b63b-42e5-abb0-001c77098d3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
32.236.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1d:76:b7:a9:77:fd:23:6b:0d:a6:24:0d:53:0e:d1:50:d4:5c:
3c:0b:20:82:db:79:31:f4:22:88:d8:c1:6d:03:3a:47:d7:3a:
11:21:79:d7:16:b2:b0:87:a0:1c:70:b9:1e:13:bf:5b:3e:97:
65:b2:9b:78:53:d5:be:3e:3d:2d:8a:47:03:b9:13:a5:26:51:
59:63:b9:da:4a:5c:83:9e:1f:cb:42:04:b9:a2:fb:58:72:f4:
aa:b8:87:f4:1f:16:41:c8:2b:23:dc:df:7d:32:53:7d:20:68:
81:e7:ff:0d:86:8c:df:92:63:50:80:da:45:16:ae:80:5e:6a:
8e:1f:df:a8:8b:09:17:12:e0:cc:e0:5c:5b:ca:9e:70:36:2e:
02:2d:4b:9e:5a:1e:5c:2a:48:c3:e8:af:51:d2:81:bd:03:ff:
a2:ed:17:58:5d:93:cc:65:ea:d7:3b:9b:1c:11:a3:a0:14:b4:
b6:4b:3d:c8:04:fb:4d:ae:51:4b:77:3e:52:a2:60:d3:22:f3:
18:48:29:06:9e:10:7b:be:17:a5:4f:a6:2c:64:dd:41:34:0b:
0c:f0:80:7c:03:64:26:15:0c:fa:b0:d2:43:c4:e5:dd:22:f5:
47:81:30:76:ed:0e:1b:ff:e1:42:93:34:27:a2:91:f5:3d:00:
ca:9d:a0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:49:26 2026 by rpki-client