
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb904bd7-c5b9-4fb0-a66f-158ff7700b6b.roa
File: cb904bd7-c5b9-4fb0-a66f-158ff7700b6b.roa (raw, json)
Hash identifier: pwcgyaxFKNf9wkLva6ZepSblFzVEiQs1Cvpk8hPO8Jw=
Subject key identifier: 20:0D:72:63:70:1D:4A:1A:09:76:D4:77:B0:17:0A:5C:19:8F:CF:27
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 74ADA656F13337EE881B4B7EA099FBC5890BA209
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb904bd7-c5b9-4fb0-a66f-158ff7700b6b.roa
Signing time: Sat 16 May 2026 01:01:42 +0000
ROA not before: Sat 16 May 2026 01:01:42 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f12:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:ad:a6:56:f1:33:37:ee:88:1b:4b:7e:a0:99:fb:c5:89:0b:a2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 01:01:42 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=a892b20ace5559845b379bd2d0d521fe80d737948b7277df34ea2c9038ab1d20, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:61:35:30:3e:1d:1d:84:c2:e5:46:a4:fb:c6:
6a:02:59:24:a6:e0:78:9a:79:8d:e6:60:95:9a:5d:
b2:f8:55:87:ab:ce:b2:fd:92:7d:d8:3a:c9:d0:d2:
37:ca:d9:b9:4d:e5:85:a7:07:9f:69:78:14:38:ef:
97:89:a4:aa:03:80:2c:67:ec:52:81:b2:16:cc:49:
0e:97:24:a0:61:bd:f3:e0:ed:ea:a1:0b:99:f6:40:
f9:bf:33:85:15:e1:52:80:56:73:7a:42:fa:25:2f:
34:6f:87:4f:7d:7a:f9:f9:16:a9:11:6a:ce:d6:27:
ce:e7:61:e6:3c:a8:cc:52:c7:20:b7:e1:bc:40:01:
78:88:73:1b:09:ea:b2:45:91:59:8c:20:2e:01:1d:
00:05:35:bb:03:98:1c:b0:24:44:cd:1b:26:da:5d:
a2:eb:3e:1d:87:bb:f9:b6:2d:39:bc:80:e9:3d:be:
02:0b:1a:7b:27:87:e1:be:70:2b:80:ef:5b:f2:4f:
f3:d5:86:7a:d6:e7:38:c6:50:e6:07:88:f6:07:94:
61:78:d4:b1:51:6e:b4:55:45:96:0e:93:a1:04:1f:
88:02:08:75:74:5a:8b:77:b5:db:76:3a:54:8a:90:
8c:18:b7:4d:89:a8:49:8c:4b:9f:3c:42:79:12:07:
1a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0D:72:63:70:1D:4A:1A:09:76:D4:77:B0:17:0A:5C:19:8F:CF:27
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/cb904bd7-c5b9-4fb0-a66f-158ff7700b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f12:800::/38
Signature Algorithm: sha256WithRSAEncryption
42:c3:36:a4:dd:27:2d:c0:c7:4c:8b:e4:ab:70:9e:b2:55:61:
75:8c:8d:ed:cf:c8:8b:53:59:ae:82:0e:ad:ca:4e:26:ce:17:
16:bf:81:2e:59:76:9e:70:1c:45:cb:0d:f3:b4:21:aa:70:1a:
73:8d:cd:1c:bc:66:89:60:1a:5e:15:f8:8a:0e:28:45:d0:a7:
ca:02:c7:00:af:e0:ac:08:5a:a7:a6:37:28:d1:ef:20:58:43:
9a:72:e8:5b:9c:61:07:e4:73:61:18:9b:e0:e0:e9:92:7a:5e:
12:dd:93:82:67:43:a3:32:a9:e6:af:24:67:bc:f8:b8:14:72:
1f:33:6b:9f:7c:26:72:6a:04:b9:50:68:b6:8f:21:1c:1b:4a:
18:92:a0:af:a6:eb:af:8b:64:7b:2b:fc:3c:50:7f:ad:b8:ab:
4f:a0:52:0c:1f:2d:db:d5:a3:45:28:e2:40:4b:0e:de:72:18:
a4:b4:66:6e:da:03:3b:5f:b0:01:1d:85:4b:10:23:3e:99:53:
e0:a7:dd:b9:16:36:95:62:7c:1a:72:b2:00:d8:e2:31:0b:09:
30:68:b4:63:08:5e:2b:08:bc:1d:73:39:bb:1e:4e:d0:c1:f0:
21:3b:b9:e1:e5:d5:64:05:e6:60:b4:97:f8:e2:82:99:fc:ca:
54:22:2f:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:18:11 2026 by rpki-client