
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b158ed1-40d0-401c-8843-ced44c4d179e.roa
File: 0b158ed1-40d0-401c-8843-ced44c4d179e.roa (raw, json)
Hash identifier: Y3LhKcjBiCt+Ct15pRmU1la/lx98Zhe2EIutfRvwAjg=
Subject key identifier: 7E:35:31:55:CA:5B:2E:1A:8A:97:85:06:D6:4C:4E:AC:D7:6A:CA:25
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 66D4BF236292512BB739E9D7AF6FBB465EDB9797
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b158ed1-40d0-401c-8843-ced44c4d179e.roa
Signing time: Mon 22 Jun 2026 00:20:03 +0000
ROA not before: Mon 22 Jun 2026 00:20:03 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1feb:1080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d4:bf:23:62:92:51:2b:b7:39:e9:d7:af:6f:bb:46:5e:db:97:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jun 22 00:20:03 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=c2822fd889bdbecb9421693f7dd105ee83804a37b3057c71dce9f2e6e70ad3c8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:4d:c3:c9:6e:a7:49:8a:70:e4:c6:81:47:
a7:bb:e1:7a:2a:45:c9:e2:14:1f:30:41:b6:56:91:
1f:0f:81:74:2e:f0:6f:4b:f4:6b:02:0b:f9:41:04:
db:ea:f6:9d:bd:d2:f5:ef:d2:43:f1:4f:07:4c:dc:
42:29:e1:46:ae:8c:b6:a5:7a:25:ee:d2:43:7f:9e:
c2:a4:61:db:76:22:28:9b:25:01:ba:9f:35:3c:3c:
49:e6:53:48:0b:42:51:4a:57:c9:60:14:40:6e:6c:
b6:a5:11:e9:86:b6:cc:e4:52:c0:79:a4:2c:ea:9e:
e1:18:15:b7:53:7b:88:d2:7f:13:e0:44:86:7c:63:
39:2b:ef:3e:59:fd:6b:2c:d0:62:e5:4c:32:15:6a:
4d:a9:d7:06:2f:bc:21:5e:75:53:5c:97:f7:ec:59:
c2:42:1b:cb:58:fa:8d:9a:13:b9:84:66:f6:54:e7:
d5:78:ee:ca:70:8c:56:f6:06:b7:a1:dc:52:b1:a7:
20:21:0b:4c:e7:23:0d:ef:61:23:bd:50:d0:c1:44:
80:5b:66:61:3a:fa:bd:ed:3a:4f:fd:0c:24:97:d9:
3c:99:1e:30:cf:87:14:e9:0a:a8:35:e6:6e:03:73:
87:44:77:d3:4d:31:84:78:de:bf:7d:45:49:12:da:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:35:31:55:CA:5B:2E:1A:8A:97:85:06:D6:4C:4E:AC:D7:6A:CA:25
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b158ed1-40d0-401c-8843-ced44c4d179e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1feb:1080::/48
Signature Algorithm: sha256WithRSAEncryption
0f:30:11:c9:a5:3c:4b:89:0c:11:a1:6d:c3:40:c9:ef:41:04:
75:b7:4e:f0:ca:0b:2c:cb:79:f1:3e:4e:36:59:86:78:f7:b4:
09:9c:86:5e:d4:12:3a:ae:8d:6e:63:64:5b:71:ea:db:bf:44:
8a:4c:ed:4f:1a:3c:39:64:39:09:d3:fb:53:b3:44:5d:a9:07:
80:cf:e7:6b:7b:c6:88:ea:d0:70:51:69:73:e4:22:97:4f:00:
c2:9f:17:34:82:d7:b2:46:9d:91:f0:56:c7:be:1a:76:8c:f1:
cd:3b:97:42:50:09:39:8e:f5:be:a5:30:bc:ca:43:71:99:ba:
a5:15:81:5f:49:c0:84:07:e2:d8:34:a0:1e:ca:72:04:49:28:
6c:93:84:0c:88:60:a8:64:b3:9c:c1:0a:69:5a:12:f5:38:26:
b7:e8:90:25:34:8b:55:62:44:9f:26:a5:c9:af:73:df:7f:c1:
89:56:46:bf:7d:2d:ad:0c:d1:f0:46:9c:60:47:98:3a:c5:90:
45:eb:9e:45:47:47:55:85:5c:23:bc:5d:f6:56:6d:b9:cf:7a:
8d:73:86:c1:f0:3f:dc:6d:03:36:48:2d:d5:a2:58:c3:d0:92:
df:99:90:7c:e9:b4:f8:1c:a1:c3:db:20:65:a2:25:71:b3:61:
c2:c6:3b:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:33 2026 by rpki-client