
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bed47ff4-edd5-4ef0-b879-a2d8f1895c03.roa
File: bed47ff4-edd5-4ef0-b879-a2d8f1895c03.roa (raw, json)
Hash identifier: nBFzT2YUy8OY9xvziy7a0m5f2Tl6lcoVC8JjCImZTm4=
Subject key identifier: 3C:B8:70:CF:EB:17:5F:CC:88:D6:B5:89:D0:04:AE:59:5E:C5:B9:4C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 688E040B362C828F07F57B29D8BA0BD3B5B560D7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bed47ff4-edd5-4ef0-b879-a2d8f1895c03.roa
Signing time: Sun 31 May 2026 00:51:57 +0000
ROA not before: Sun 31 May 2026 00:51:57 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe9:ec00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8e:04:0b:36:2c:82:8f:07:f5:7b:29:d8:ba:0b:d3:b5:b5:60:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 31 00:51:57 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=4c618ae21b07c3ddda180dec6b61688dde861b53f896aa88e7b9360b22854d4f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1a:ea:db:ea:cb:bd:9d:72:d2:a1:64:4a:61:
92:cc:b4:c1:ce:d5:9a:91:a8:41:38:7c:2d:50:bc:
31:ba:7b:4d:b2:e4:4e:99:c5:e4:3a:78:3b:64:df:
82:ee:16:aa:4c:bd:75:0d:e7:c9:f7:0a:f3:84:d8:
f6:7c:1b:e6:f3:4a:86:af:7c:53:31:50:3e:98:71:
e8:9d:c9:a6:3d:50:36:df:a5:b9:96:de:6a:ab:3b:
c3:de:32:aa:85:27:99:d5:2d:5f:81:6f:66:a7:25:
af:76:0c:3e:0d:e5:c3:57:bb:0e:ae:9f:a9:97:c7:
0a:b7:fb:6d:f5:f7:56:94:73:1d:fa:a5:35:83:2f:
b8:7d:3f:54:3a:99:ae:2e:4f:5a:30:37:29:33:df:
ba:02:7e:20:f3:29:49:6c:26:a1:b2:f9:a5:6f:9c:
26:74:15:e6:99:9b:7f:d5:73:4d:c3:71:3a:8f:ec:
e9:21:8f:ef:1b:a0:b9:da:fb:7a:ae:ea:d9:18:8c:
bf:83:b2:e8:66:27:91:3d:b0:ab:67:6b:56:45:ec:
39:ca:f4:8d:4e:cf:78:74:d9:9b:52:bb:b1:67:bf:
d9:7a:b2:8a:5c:57:05:12:48:59:f7:f0:86:8f:58:
83:32:b7:c9:a9:c8:bc:02:fb:f4:7b:aa:0b:8e:fc:
dc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B8:70:CF:EB:17:5F:CC:88:D6:B5:89:D0:04:AE:59:5E:C5:B9:4C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bed47ff4-edd5-4ef0-b879-a2d8f1895c03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe9:ec00::/40
Signature Algorithm: sha256WithRSAEncryption
cd:5b:45:5a:4f:81:ef:c3:05:aa:20:89:a4:93:95:ef:a7:d7:
9e:86:bf:90:8d:43:60:ab:53:d7:45:af:6e:e2:4a:44:58:4e:
79:9a:cb:18:b3:0f:59:09:1e:8d:5c:44:0b:08:37:4d:31:fe:
83:ac:00:d8:a1:5f:93:50:96:b4:26:25:4b:26:71:e5:eb:3e:
80:99:10:d9:3f:fd:37:6e:2f:2a:7f:40:a5:6e:c1:61:24:77:
f4:70:9c:fb:72:dd:b8:f5:b4:11:d4:35:3c:e7:c5:61:fb:bb:
d6:f5:a2:55:cd:64:87:12:75:b5:42:69:56:10:33:a0:90:ab:
42:3c:c8:25:fd:dd:ba:2e:b0:df:d4:d6:c3:28:62:2e:35:bf:
a1:65:79:6b:14:0b:1a:b6:8e:7d:e9:23:80:ef:c4:df:ac:74:
4a:f1:19:18:69:74:a0:6e:b2:a4:4e:90:63:3e:69:0d:26:7f:
69:69:a2:68:f9:47:bf:e5:f3:f5:27:95:1c:3e:ba:b8:06:70:
6b:08:96:50:f9:b0:8a:84:42:fb:d3:37:39:ce:d3:54:01:05:
34:ba:c9:07:f9:18:3a:aa:00:60:c3:fc:b2:c1:94:9b:ba:ac:
c9:be:13:17:6e:02:a0:02:6b:3c:ae:7c:e8:3e:fd:02:29:ff:
bf:b3:c7:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:16:07 2026 by rpki-client