
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78055da-d21e-4985-bee2-fe5b70f3c493.roa
File: f78055da-d21e-4985-bee2-fe5b70f3c493.roa (raw, json)
Hash identifier: Wi11gE5jYmBdq3N9btWaepF9/RIlxpSJw4A3TXBhLmA=
Subject key identifier: 98:11:38:54:2B:CA:0D:95:9F:97:69:BA:C1:FA:D6:3C:B9:6D:8C:E1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7108C6A2A7BC210EFF64F851E890BFEA4B41FEC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78055da-d21e-4985-bee2-fe5b70f3c493.roa
Signing time: Sat 16 May 2026 01:41:22 +0000
ROA not before: Sat 16 May 2026 01:41:22 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f14:4000::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:08:c6:a2:a7:bc:21:0e:ff:64:f8:51:e8:90:bf:ea:4b:41:fe:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 01:41:22 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=efa728c9433a608ca3e10359bc2bb1c235a17d91f2b0e5b7d2dd62bd9e9312c9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1c:8c:d9:b6:32:ec:76:09:38:61:ef:ed:d4:
cb:e3:d2:48:c8:1c:ac:00:fe:dd:33:42:da:23:bc:
16:d7:70:23:04:db:95:3c:93:ef:ce:05:32:f0:53:
ff:60:23:05:4d:31:d9:87:49:9c:18:32:6a:78:f7:
21:37:0b:75:4e:8f:fa:58:c1:4e:c2:6f:e4:fb:3b:
22:9f:75:f6:28:b5:f5:5d:48:dd:f2:3c:a6:bc:e0:
22:e8:c5:4f:bd:9b:b6:57:72:e2:c9:16:f0:07:54:
c3:5f:63:04:41:70:8e:f6:8a:8f:0c:e6:9d:37:7e:
3d:4c:49:05:91:e6:11:be:93:12:0f:ee:13:c6:10:
65:3e:be:17:32:9c:59:98:6a:c5:e5:88:45:fc:25:
af:2e:3c:51:97:9e:d9:77:1f:f2:81:af:33:62:df:
90:80:14:72:e9:dd:d6:10:11:1a:2c:51:ae:ad:b8:
e7:c4:47:a1:2c:9e:60:60:47:f1:9a:ef:3b:6c:2a:
ec:92:56:eb:b0:41:8f:38:df:0a:d3:78:9d:f7:fc:
fb:04:60:23:d4:5e:20:bb:81:99:a7:18:5e:4a:dc:
cd:7b:01:5b:b9:19:8f:da:a2:ae:ab:09:28:af:3f:
f8:66:26:36:59:db:f7:99:33:13:a2:de:03:34:e1:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:11:38:54:2B:CA:0D:95:9F:97:69:BA:C1:FA:D6:3C:B9:6D:8C:E1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f78055da-d21e-4985-bee2-fe5b70f3c493.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f14:4000::/37
Signature Algorithm: sha256WithRSAEncryption
74:18:e1:dd:49:fa:a5:61:b0:de:ea:bd:b9:a8:fd:64:4f:fa:
2c:32:09:2f:13:ba:26:de:0d:6d:14:a1:1f:29:46:00:86:d1:
67:a0:46:cc:e4:d1:46:84:cb:9d:9c:87:ea:25:44:84:c3:87:
02:57:b0:d8:90:94:a0:c4:ac:7d:53:ea:ea:96:ef:4a:0d:f4:
b4:3a:ac:4c:be:e5:22:4a:76:fa:c7:7e:7a:0a:1f:9b:ad:90:
d8:1f:66:34:eb:9e:a5:7b:c5:75:e1:e6:b1:cc:d9:0d:c8:43:
29:b4:c6:da:d1:76:57:10:2b:c0:0d:40:01:e1:3f:8b:c0:e1:
7e:a9:85:d1:80:d3:f3:3f:ca:c9:9c:2c:ca:eb:54:d8:47:7a:
fa:60:b6:e2:31:60:8b:44:4d:84:46:7e:f2:7f:be:a1:1c:6e:
aa:ce:fc:4d:dc:db:f1:bf:36:50:69:b2:fd:a9:cb:3c:42:3e:
69:c6:b0:a8:45:4f:e4:1a:08:a2:c5:66:19:03:40:8e:19:d6:
eb:59:12:23:7c:59:12:ae:0f:f4:3c:13:0a:33:e9:cc:e8:0e:
ff:48:8e:6c:5a:de:67:9a:eb:ec:2c:4b:a6:bd:c3:37:89:b4:
f9:25:e7:6d:55:54:75:49:dd:b3:08:ab:b9:aa:61:49:3c:a3:
48:40:8e:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:29:55 2026 by rpki-client