
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4110e3a3-0f8c-4c51-83a7-e327c7d32a91.roa
File: 4110e3a3-0f8c-4c51-83a7-e327c7d32a91.roa (raw, json)
Hash identifier: scbUNeMSrsTtlZhJfvim2LgfBrUztPZb0m2aNQSuHTg=
Subject key identifier: 40:92:5A:97:E7:98:32:F0:26:6E:FE:47:54:2E:0A:BF:04:9E:39:CD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 264CEEF7791F4278CEB10B4FF730D22FACFFFDFC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4110e3a3-0f8c-4c51-83a7-e327c7d32a91.roa
Signing time: Mon 20 Jul 2026 00:30:48 +0000
ROA not before: Mon 20 Jul 2026 00:30:48 +0000
ROA not after: Sun 18 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 98.69.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:4c:ee:f7:79:1f:42:78:ce:b1:0b:4f:f7:30:d2:2f:ac:ff:fd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 20 00:30:48 2026 GMT
Not After : Oct 18 23:59:59 2026 GMT
Subject: serialNumber=6af368e2758d84bfc0b5f9e7e4968e3ca63820c73347b71a3cbe93b1e58b543f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:58:2b:42:d6:ff:03:85:09:4f:de:2a:53:
f3:17:ff:75:8f:36:a7:a0:89:c0:71:d3:2f:56:96:
0f:5e:f7:c7:1a:aa:b1:7f:da:e2:8a:75:5f:0e:a2:
f8:4d:15:7d:c9:74:9d:b6:91:c6:75:f9:0f:c7:c8:
2b:e3:3a:4a:4f:d0:37:20:a1:01:e2:db:06:63:f8:
eb:7a:53:5e:b3:82:f5:ab:d7:77:67:ca:ea:ec:92:
fd:7a:8d:99:46:c0:8e:1c:18:43:2c:9d:20:44:b6:
b8:99:c1:79:2d:c5:16:60:c4:90:bd:e6:6f:e9:5c:
73:92:c9:ab:c1:46:7b:df:af:2a:16:d8:51:b4:d5:
4e:35:bd:2b:e3:f6:e8:b0:d4:c7:6c:85:d7:14:ea:
10:f8:62:da:1c:69:c4:c2:c2:74:d3:d5:2b:57:27:
a8:14:53:b5:c8:87:56:c6:66:b0:04:eb:45:8c:ef:
b5:d0:76:11:0a:69:93:7f:b9:cc:37:d5:3d:30:d8:
53:16:66:be:91:fc:11:35:c1:d7:c6:91:bb:37:70:
50:e7:37:d5:ba:05:72:af:77:dc:a0:a1:b2:2e:a1:
77:92:a9:4f:2b:0c:04:92:03:00:3f:cc:47:d4:77:
32:a7:48:4a:55:7c:6c:de:28:79:4e:ef:d1:98:06:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:92:5A:97:E7:98:32:F0:26:6E:FE:47:54:2E:0A:BF:04:9E:39:CD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4110e3a3-0f8c-4c51-83a7-e327c7d32a91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:f9:54:a9:6d:8c:d2:7b:6a:db:f3:7f:f7:31:b1:50:85:d9:
8c:0d:62:64:6b:72:42:d1:1c:f9:11:50:40:ff:1d:c5:12:6c:
16:73:df:92:2e:d9:bb:c3:43:be:e7:bc:46:5c:47:d3:bc:b7:
fa:8d:0a:73:d4:6b:89:02:6e:19:7f:da:6e:75:44:87:a9:bd:
42:16:be:ff:c7:e0:18:44:7d:71:7a:1f:81:04:4d:7a:54:01:
dd:b0:b3:5d:cc:4f:21:0a:58:15:9b:8d:1c:31:21:9a:d9:91:
1c:ad:98:9a:d3:3f:0d:dd:a2:05:3d:15:dc:92:06:97:57:54:
bc:be:aa:38:6a:4f:8d:71:6f:c3:57:0c:31:90:58:79:56:99:
9b:0e:26:44:60:be:9c:b0:78:76:2e:45:9b:d9:06:4d:bf:84:
0e:38:5a:84:e9:74:2a:08:23:89:c8:c3:9d:f9:07:12:76:2f:
1b:90:1d:30:30:99:99:c9:48:6e:e5:62:67:b9:cc:7c:a6:28:
c6:49:1d:47:38:28:22:05:20:e0:e6:c8:b7:fe:79:44:dc:61:
39:90:eb:2d:48:09:19:1d:83:bb:be:7a:e8:9d:60:a7:cb:ee:
72:b3:47:26:65:b0:61:17:a2:68:25:42:62:63:7a:a9:6c:df:
3e:7c:57:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:47 2026 by rpki-client