
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/354dc003-92f9-4ed3-a2c3-832a175bc852.roa
File: 354dc003-92f9-4ed3-a2c3-832a175bc852.roa (raw, json)
Hash identifier: EldN3dBu/M4WUBYg0DPNMsaBY3bDjEhD+KVk4sihlbI=
Subject key identifier: BB:2C:4C:51:80:D2:3C:F0:DC:CE:D7:08:16:31:77:BC:50:F4:00:76
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6AC9E7915667B3D189C21F76D039A75C30D9A22E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/354dc003-92f9-4ed3-a2c3-832a175bc852.roa
Signing time: Mon 22 Jun 2026 00:10:33 +0000
ROA not before: Mon 22 Jun 2026 00:10:33 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1feb:a400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:c9:e7:91:56:67:b3:d1:89:c2:1f:76:d0:39:a7:5c:30:d9:a2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jun 22 00:10:33 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=5f0819e35d534a0f4828cad58f832bac3ba704a516c16f9b609e5d56213f6561, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:9e:f6:c9:b4:f4:dd:3d:ef:c7:7e:2c:1f:
4b:e0:3a:83:9d:f8:ec:95:a3:ba:bf:28:f1:6d:bc:
80:57:ee:50:18:a1:d3:df:69:a4:d0:18:37:52:94:
84:c0:27:fe:b7:f2:1e:d7:55:4a:ef:e0:41:cf:97:
07:11:54:b4:d6:44:34:11:43:d5:e5:86:38:fa:99:
ab:6c:6f:e9:e2:47:74:10:c9:04:c2:b6:f0:29:fd:
5c:7c:d8:31:7e:d6:fd:00:90:40:f8:7d:b4:cb:78:
d7:52:d8:14:eb:b3:68:8e:31:cf:fd:06:e7:50:ed:
b7:80:35:9f:8e:39:d0:62:94:fa:27:7a:4a:e9:3f:
cd:4b:45:12:87:1b:93:94:80:7f:48:08:13:50:ec:
a0:09:16:23:5e:34:ba:bb:17:bd:cd:50:74:1d:2e:
62:82:10:47:b8:e8:ce:77:6d:28:75:7d:1a:ca:6c:
79:51:37:21:c4:97:4d:84:b0:25:ce:2b:2b:86:9e:
2d:e5:ab:2d:42:4f:9d:0a:92:53:e7:2f:47:b7:2b:
71:66:93:85:40:3c:c8:e2:1b:ab:df:95:7d:17:0c:
32:f4:71:57:d7:0e:3c:97:17:11:01:f1:d1:b0:d6:
2a:f0:34:42:a1:34:89:34:78:03:55:92:c9:7a:2c:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2C:4C:51:80:D2:3C:F0:DC:CE:D7:08:16:31:77:BC:50:F4:00:76
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/354dc003-92f9-4ed3-a2c3-832a175bc852.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1feb:a400::/40
Signature Algorithm: sha256WithRSAEncryption
06:9e:84:c4:c2:a9:03:a0:23:0e:f0:10:14:25:87:ac:14:76:
f9:c9:6f:75:3e:76:02:c2:3b:b6:f1:98:90:c8:9a:b3:5e:39:
6b:33:be:3f:66:c4:c0:a4:8b:25:36:a9:c6:45:d1:8a:79:5d:
4d:65:fc:5f:48:35:89:c5:4c:30:3a:95:b2:01:8e:93:cf:90:
d9:90:96:5d:0d:d6:ce:c6:f7:09:6a:d6:8e:93:f2:5f:ef:5a:
91:64:0a:09:65:53:cd:8c:d8:64:76:43:4f:02:01:84:01:47:
00:e0:01:68:d8:30:43:2d:db:9f:7b:70:13:0f:56:35:34:56:
96:29:60:2f:e0:f6:17:c3:e3:49:3d:15:fb:33:89:d1:b9:e4:
76:8d:9d:7d:c2:99:53:00:3d:8a:92:64:e3:99:fc:91:62:dd:
37:f7:cb:75:2b:f0:e2:18:df:b8:fb:9a:eb:93:b7:58:d9:b2:
c5:ca:23:15:5e:15:c5:b1:fe:7d:25:29:88:06:c0:92:23:92:
53:c7:94:b2:98:cc:4d:6f:49:18:0c:ef:20:b0:8e:20:2c:7a:
17:a4:ba:7e:3b:95:bc:42:91:f9:ab:ea:02:f5:dd:ed:48:35:
9e:1d:9d:2a:b9:ce:6f:11:0e:c7:09:34:75:f8:cb:32:97:db:
31:eb:19:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:51 2026 by rpki-client