
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f0c64f3-d6ed-40d5-b7fd-2e48cfdb68bd.roa
File: 0f0c64f3-d6ed-40d5-b7fd-2e48cfdb68bd.roa (raw, json)
Hash identifier: BDAw16jWgzGQFx8VZ/ceTikfjYmxSs/3tF1tEGElaYk=
Subject key identifier: F9:34:8A:0D:9D:3B:D3:6A:36:1B:3B:E9:AE:6A:88:AB:1D:6D:21:D4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7C0FAC6EC220CE231147B802164F01FD291D585F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f0c64f3-d6ed-40d5-b7fd-2e48cfdb68bd.roa
Signing time: Mon 04 May 2026 00:00:44 +0000
ROA not before: Mon 04 May 2026 00:00:44 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 166.117.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:0f:ac:6e:c2:20:ce:23:11:47:b8:02:16:4f:01:fd:29:1d:58:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 4 00:00:44 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=0be900c63cbee5d58c603828be7c0159dcf44c32d08c02d470323d98ca761be3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:60:4d:c5:17:f4:72:7c:4f:0d:7d:80:39:b7:
c5:42:db:2e:ab:17:b7:42:a9:43:3c:82:bf:9e:59:
9e:07:c2:8a:a5:0a:68:82:27:c3:66:ab:2b:c7:84:
ce:1b:a8:a7:69:d3:d9:d3:51:16:af:24:27:e0:f7:
aa:5c:c8:50:ae:d3:e7:9f:47:9a:ed:8f:23:08:5f:
93:fa:4f:c0:32:c5:da:e6:b9:09:db:b2:dc:60:44:
5f:78:d3:61:65:f3:3c:40:f8:1f:65:be:d1:4d:01:
65:3f:c9:69:63:17:1e:20:71:09:94:c9:44:af:a4:
28:d4:3a:44:c6:e0:e1:a0:1d:20:6c:39:1a:1d:8f:
84:f6:ec:88:94:03:85:f8:68:8c:ea:ba:fd:4d:c3:
c7:e6:a8:ba:67:83:02:14:f1:64:5c:a4:30:62:55:
b5:28:f3:46:cf:13:8d:05:d9:65:a1:ee:7c:34:bf:
f7:c2:86:8e:93:4b:72:13:a3:b1:c4:c1:23:56:70:
34:6a:66:ba:90:61:62:6e:84:f8:9c:02:65:2e:a1:
b7:0d:30:1d:04:b6:c3:64:76:e7:ec:59:70:2b:17:
94:3a:e9:69:20:cc:50:6e:0a:41:d2:0b:e9:56:0f:
0a:90:e6:23:d5:e7:b1:f9:94:aa:38:2c:92:3f:b2:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:34:8A:0D:9D:3B:D3:6A:36:1B:3B:E9:AE:6A:88:AB:1D:6D:21:D4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f0c64f3-d6ed-40d5-b7fd-2e48cfdb68bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.117.224.0/20
Signature Algorithm: sha256WithRSAEncryption
53:68:a3:9c:62:4b:88:0b:34:d7:1d:5c:42:f3:2d:90:54:13:
58:f4:b9:d3:30:83:da:8d:47:93:b1:22:b3:db:d2:d3:4e:39:
d8:c6:d4:ab:86:e6:a6:29:60:63:55:99:b3:74:74:3e:f9:eb:
16:04:ec:c0:81:5e:1e:c4:41:de:87:d7:33:0f:c4:72:52:bf:
42:38:16:98:04:30:87:92:7d:fd:bf:e3:dd:4d:c2:e7:b0:eb:
11:3b:82:1b:eb:98:f8:e8:82:87:21:a5:a5:f0:1d:66:22:3e:
1c:fb:d8:02:43:14:de:01:5e:d1:b6:44:a4:cb:ef:da:c2:ee:
f3:0c:83:30:ff:8f:01:a3:08:c0:5e:97:0a:3f:26:26:1c:49:
ac:75:68:f0:c6:00:5f:24:70:90:08:16:74:98:21:cc:f5:cc:
99:76:40:ee:96:6c:1d:04:9a:22:cd:b0:52:6d:0e:e1:bc:4f:
93:b2:b3:54:75:12:bc:07:74:4d:28:b5:83:2a:2f:e4:63:52:
d2:d2:37:23:94:f3:71:24:2b:dd:ce:d0:e5:1d:05:e2:7c:47:
63:4f:3c:a8:3a:7a:2d:03:a2:07:00:6b:4f:bf:3c:f8:33:5e:
29:a7:3a:73:cd:79:d4:c7:8b:4b:11:00:c4:a9:34:0e:da:4b:
27:5a:5c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:40:30 2026 by rpki-client