
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2f5e6c1-04f9-4253-a4d4-858892769e9e.roa
File: f2f5e6c1-04f9-4253-a4d4-858892769e9e.roa (raw, json)
Hash identifier: Om9i70BXZlvt2sUswZQXrFMGoLZhc9p42ydu2ZlLtcA=
Subject key identifier: 21:EE:6A:5C:61:DC:65:0E:B6:31:27:D8:B1:BD:29:93:4D:E3:FF:7B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 154C89FB3E8FAA9EAC089CF5A52ED3E8C4F2EBE8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2f5e6c1-04f9-4253-a4d4-858892769e9e.roa
Signing time: Sun 17 May 2026 00:10:33 +0000
ROA not before: Sun 17 May 2026 00:10:33 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 171.73.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:4c:89:fb:3e:8f:aa:9e:ac:08:9c:f5:a5:2e:d3:e8:c4:f2:eb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 17 00:10:33 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=7db484ab8b62c605945e9d549fdf93c80c975217c56c4e47b987b46e0eb34783, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:a1:ea:87:34:6e:ac:d9:c8:0d:3c:e4:0d:
6b:6b:57:63:bc:b6:12:76:0e:8b:98:e6:bc:25:6b:
9f:9b:3e:7a:66:a4:db:6b:bd:b9:4e:3d:f7:9d:6c:
be:00:f5:1e:89:22:fb:30:c5:0d:0e:40:60:85:ce:
c5:d9:d5:73:9f:e4:31:90:4c:f6:bd:73:a9:0f:a7:
22:9f:77:25:b3:33:2f:66:91:51:90:b0:47:19:7a:
81:80:10:1d:df:db:47:82:55:92:dc:c4:97:e1:70:
f6:59:79:77:d0:1e:07:db:aa:11:bd:5c:41:b4:f4:
58:77:9c:53:8d:e0:e2:cf:47:da:1c:e8:32:10:71:
09:54:19:42:d5:a2:6a:70:81:42:31:5f:80:88:e5:
2a:d2:ca:d0:65:e4:f1:f0:35:2a:c2:cc:ec:49:1e:
a7:7f:46:16:fb:7b:0a:40:97:ad:ee:d2:fa:3f:08:
2d:ab:27:ff:78:67:0a:24:f5:99:42:ea:f7:ac:67:
85:5b:15:cd:31:20:59:bb:ac:5a:66:33:79:f6:9c:
e9:8d:2a:46:2c:52:5e:33:a7:fd:09:7c:c0:a3:bb:
7e:98:0e:4c:51:23:b4:c2:5e:e9:b8:df:b7:25:9f:
64:98:4c:ca:76:0d:19:5d:be:57:d9:4d:84:05:6b:
ce:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EE:6A:5C:61:DC:65:0E:B6:31:27:D8:B1:BD:29:93:4D:E3:FF:7B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2f5e6c1-04f9-4253-a4d4-858892769e9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d3:86:b5:05:3d:d5:2a:49:7b:4a:5c:09:05:d9:29:cf:e8:11:
f8:7c:01:5e:c1:dd:f5:4f:39:b5:63:24:c8:b7:5b:ec:02:20:
ed:3a:1d:de:a2:b5:44:f5:66:d9:af:5d:07:11:a3:da:de:11:
e6:85:65:ac:c2:98:67:ec:3b:be:13:e6:c9:26:16:4f:1b:cf:
50:e9:8c:1e:cb:19:1d:06:f1:ec:4d:be:fa:5f:19:97:c8:e2:
be:6e:5f:d7:db:b8:a9:65:b9:df:66:6c:c8:fc:c9:58:70:1e:
d5:14:e6:c0:48:28:13:b0:97:41:03:2b:1a:e3:75:08:f8:92:
07:84:58:69:57:c0:30:3d:4d:b7:99:5c:c6:72:f1:63:b8:d9:
90:c7:64:55:08:0f:51:4b:68:f4:6b:e9:35:da:17:45:39:51:
a3:4f:70:61:be:bf:56:44:62:be:ab:48:10:87:9f:0a:07:3e:
dd:5f:7a:b9:b1:82:90:ee:26:23:33:56:df:e8:59:ec:17:68:
e0:ed:da:8f:9a:ce:f8:11:3b:10:0e:3a:1f:f2:9a:8c:d4:5f:
b6:82:e8:14:71:22:07:d6:d2:16:ed:d3:28:51:0d:fc:c9:28:
51:91:cd:53:8a:b9:68:62:5c:fe:77:44:b4:88:1d:48:36:da:
a5:79:64:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:49:22 2026 by rpki-client