
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b4188873-f5f8-4ab9-a9fa-7b61a4860f25.roa
File: b4188873-f5f8-4ab9-a9fa-7b61a4860f25.roa (raw, json)
Hash identifier: 2EFxtl2BwaAdYADRG8O52e36e6FUmW9tUUrCKEfaFUg=
Subject key identifier: C4:6E:C8:42:DD:67:E2:9E:A0:43:83:BF:91:05:5E:A2:CB:7C:95:2E
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 701CFEAF1B09AD9B3106F64F11EB08C0E067D982
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b4188873-f5f8-4ab9-a9fa-7b61a4860f25.roa
Signing time: Mon 27 Jul 2026 03:00:11 +0000
ROA not before: Mon 27 Jul 2026 03:00:11 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:c07::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:1c:fe:af:1b:09:ad:9b:31:06:f6:4f:11:eb:08:c0:e0:67:d9:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jul 27 03:00:11 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=dfd81340547ad8a13e1e2d0c3918d59a1f71fedf75996df3923ca5b8d9705116, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c7:1e:b8:6d:a3:ee:e4:ad:17:00:76:37:77:
14:0d:bf:95:aa:dc:be:ef:52:95:e4:f9:85:44:16:
21:c8:aa:c8:d3:71:a7:1e:6c:0a:1b:42:6a:69:07:
cc:b0:44:1a:6f:93:9b:51:60:ec:9a:c1:a7:3b:37:
80:e5:5b:cf:9d:94:92:fd:16:ab:c4:17:f8:71:e0:
0a:fc:5a:19:9d:8c:32:31:68:28:de:3d:67:0d:8b:
33:0a:61:e4:a9:77:e4:d6:30:08:c1:9a:f9:d4:ea:
0a:6f:af:34:69:1e:28:23:db:4a:1f:48:c3:8d:fc:
b2:a2:07:22:f7:cf:67:a4:ec:64:dd:de:df:f6:c5:
42:74:ca:d0:1a:16:ed:0c:c9:55:6c:33:ec:a3:cf:
ff:30:ba:b4:9f:2a:b3:bd:6e:e3:4f:64:30:e8:15:
e6:de:28:9e:69:b6:4b:58:fb:a4:6a:56:71:a5:90:
b6:d2:b5:bf:9d:2e:fe:42:8f:97:6b:0e:e0:be:6c:
fb:55:b6:87:55:09:dc:0e:ff:4c:70:8c:dd:57:34:
50:ff:07:ad:60:e4:05:5c:aa:1c:98:1b:fe:37:38:
c9:70:4b:f3:60:cc:26:e0:ee:2c:8f:26:b6:75:62:
df:11:1c:3a:87:25:c6:9e:e3:6c:e7:a7:ea:36:b0:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6E:C8:42:DD:67:E2:9E:A0:43:83:BF:91:05:5E:A2:CB:7C:95:2E
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/b4188873-f5f8-4ab9-a9fa-7b61a4860f25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c07::/48
Signature Algorithm: sha256WithRSAEncryption
a2:7a:3e:9d:b4:91:43:f7:be:41:29:1e:80:73:16:e1:05:dd:
21:85:ca:44:af:17:f4:41:ca:b1:71:2e:d6:bc:a3:62:dc:e2:
be:38:dd:c1:af:dd:29:ca:1e:f3:aa:fa:b5:f6:c6:51:70:d1:
44:21:5c:60:32:48:b7:f0:36:81:81:94:e0:93:3d:06:7c:9a:
24:40:23:35:ad:09:ec:a9:53:15:ea:42:27:5e:0c:9f:9e:b3:
12:3f:de:4c:af:56:ed:c7:13:3a:ef:fc:64:f0:42:0a:ce:d7:
48:bf:2e:12:d8:35:a1:b3:0a:2b:66:ab:d7:63:4c:81:4e:73:
d6:e4:a2:b9:ce:0b:40:5e:24:4a:40:a5:fb:4b:86:79:15:03:
01:75:f9:10:f6:7d:4f:e6:10:82:6d:c1:3d:e4:e7:0f:69:11:
04:8d:85:75:6c:bc:47:f8:cb:8c:6c:04:76:5b:b9:ef:24:64:
4a:f9:a3:5f:fb:1e:df:d3:96:63:23:91:23:b1:11:3d:f0:66:
c9:86:71:d3:ae:33:87:da:a5:c3:4c:24:28:5c:3a:3d:7b:39:
84:69:50:40:1d:33:cb:b8:fc:6b:c4:e9:94:25:3f:99:7a:18:
38:37:3d:73:17:66:30:a0:ce:13:a7:db:e6:a3:9e:96:49:24:
06:27:de:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:43:55 2026 by rpki-client