
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20f6eba2-7f30-403f-8eab-896a1a22ce4f.roa
File: 20f6eba2-7f30-403f-8eab-896a1a22ce4f.roa (raw, json)
Hash identifier: diC14QwNV7L3fWE/lr++dxiBKOgpgJ96zzfLauIAi/M=
Subject key identifier: FB:57:BE:E0:17:F3:DB:5D:56:BA:51:41:26:CA:B9:9B:D9:8B:2E:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5F7F47392B4A2EF18EB976A502D6F7DF6F0F0F76
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20f6eba2-7f30-403f-8eab-896a1a22ce4f.roa
Signing time: Sat 18 Jul 2026 01:00:07 +0000
ROA not before: Sat 18 Jul 2026 01:00:07 +0000
ROA not after: Fri 16 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 141.231.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:7f:47:39:2b:4a:2e:f1:8e:b9:76:a5:02:d6:f7:df:6f:0f:0f:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 18 01:00:07 2026 GMT
Not After : Oct 16 23:59:59 2026 GMT
Subject: serialNumber=c1c90e9a5037314ad3edf3fbb0684f3d70c6e3368e3e6f495931573e526c422e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:c0:34:38:3f:b4:ec:8e:ba:90:4e:22:d7:
86:b7:d0:95:cc:7f:63:5c:cb:c2:f6:27:c7:af:df:
a6:5a:78:fa:92:5f:f5:9a:e3:11:9f:1e:59:e4:86:
20:1c:6f:11:8c:ac:51:87:e3:a8:44:09:75:41:69:
be:a7:e6:bd:87:a8:6e:86:4a:df:f0:84:0e:ed:ab:
e4:b4:a7:95:24:7b:42:77:64:48:68:62:a5:8a:cb:
be:c4:e3:60:90:d3:e4:7e:e5:af:90:95:89:cf:3a:
0e:96:bf:33:1c:73:ee:e9:52:c0:bf:8e:47:19:ed:
ed:10:a4:bb:b4:fb:3b:5c:2c:7b:c5:09:f6:69:47:
1f:d0:0e:78:50:42:39:b0:c9:e4:e2:fa:7b:54:67:
63:ad:38:57:c3:b1:9f:4f:87:19:61:92:a9:32:bd:
95:0b:33:f8:f3:30:9a:e8:56:c3:cd:c3:8f:10:c3:
85:21:a2:95:4b:5d:18:bb:4a:b9:69:87:02:44:60:
35:30:0e:27:95:3c:7b:a4:3b:3b:89:6a:ea:04:71:
13:fa:f8:bf:34:e6:f3:ab:2f:cc:2d:e7:0a:16:b0:
98:af:7d:e5:e5:b4:a6:e4:0f:09:7f:0f:4d:54:6c:
c3:bf:5b:a6:57:07:89:33:3d:43:da:88:4f:0c:9d:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:57:BE:E0:17:F3:DB:5D:56:BA:51:41:26:CA:B9:9B:D9:8B:2E:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20f6eba2-7f30-403f-8eab-896a1a22ce4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.231.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:87:b5:40:4d:61:4b:a0:78:ff:4e:4c:32:16:63:5a:b8:de:
77:91:94:cd:09:4d:b3:f4:6f:e4:0c:c3:dd:a6:da:d6:a1:5c:
2d:02:d5:b6:72:57:04:73:8f:50:bb:90:33:95:97:1a:12:bd:
e2:9f:16:20:12:72:08:b8:32:c5:0b:09:2c:71:b6:7a:70:75:
de:29:1e:c7:66:d1:a8:ef:20:38:4c:b9:8c:fa:36:5d:4c:de:
ca:a7:2c:dd:77:38:56:b6:66:4e:9d:4c:e1:db:3c:38:2c:e3:
80:13:a9:ff:a8:51:f6:26:7f:24:9a:0e:ee:76:b0:74:b6:ef:
a8:cc:60:0c:e1:e2:8b:fd:6d:93:8e:d4:fb:1c:28:02:d3:f6:
15:57:ef:14:76:1d:cc:fb:89:9b:b9:06:6b:03:9d:3b:50:4c:
7f:f6:29:29:cb:09:e7:53:55:57:a6:3e:71:0f:fe:f4:64:8c:
96:83:ac:2f:08:4b:35:ba:dd:32:93:60:ff:de:af:18:d6:7e:
c7:05:7e:9d:3b:c4:3d:1b:52:36:5d:88:2e:5b:70:88:8f:29:
8e:97:20:a1:14:b8:8f:cf:02:1c:86:a8:27:dc:36:ab:29:07:
e7:95:56:69:91:1f:d2:a3:d0:8b:7e:48:21:e1:e1:8b:97:3b:
dc:6f:d4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:26 2026 by rpki-client