
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e4c4e2b-fe1d-4e28-be53-b19977d83728.roa
File: 4e4c4e2b-fe1d-4e28-be53-b19977d83728.roa (raw, json)
Hash identifier: GJq6xREZKUXN+0VfCcTZpWPNgYsjc7pM6lCOHbyO/6s=
Subject key identifier: 81:D7:5C:8D:3D:85:23:FE:FF:B7:A8:B5:27:F4:6E:C6:00:95:F6:07
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F587C7FF67A705454E2144F7D2A91A99C16A7C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e4c4e2b-fe1d-4e28-be53-b19977d83728.roa
Signing time: Fri 08 May 2026 00:30:44 +0000
ROA not before: Fri 08 May 2026 00:30:44 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff6:6000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:58:7c:7f:f6:7a:70:54:54:e2:14:4f:7d:2a:91:a9:9c:16:a7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 8 00:30:44 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=9d2bee2a5bf061cc5cfbac615364ddce4cc492bfa5b7acf5f0f03e82e4ed669b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:e8:93:18:77:17:62:31:a1:df:e7:3c:cb:
66:e9:11:71:88:5c:cf:e5:4d:02:e2:54:fa:e2:45:
b0:69:82:33:9b:c0:f8:2b:02:89:97:e2:f8:4d:58:
29:8c:3f:92:06:5e:9d:6c:c3:02:4d:58:72:19:bf:
bc:31:b5:10:b1:89:48:2b:d6:b5:08:e9:20:3d:cb:
ba:cc:d7:ca:0b:f7:19:99:69:26:0c:4d:fa:d3:4d:
d6:cd:bd:e6:57:74:8d:7c:d3:0f:00:39:c2:f8:22:
cb:be:e1:6f:cc:3a:55:3f:2c:61:3d:8c:ef:7c:4c:
40:45:4e:53:32:33:16:8b:e8:a2:b5:c0:2f:2f:04:
39:27:d9:f8:41:93:79:86:69:f3:e0:7d:5c:c3:60:
c4:9f:a1:fb:f2:34:b5:aa:ea:9a:98:42:3d:3e:a6:
76:2e:56:65:e8:18:8e:47:80:cc:00:51:a1:43:58:
8a:eb:57:76:e7:e4:e1:6b:ec:d6:24:16:46:ce:cb:
9d:ac:0d:f9:43:5b:bb:9f:e8:c6:6e:65:62:4d:6d:
bf:5f:1d:3a:03:90:5f:7c:c5:bd:ec:cc:90:cb:73:
c3:dd:fa:87:42:de:36:36:1b:53:40:87:f7:6d:0d:
a5:b3:d6:79:69:7f:d4:9f:0c:34:17:53:5f:46:77:
04:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D7:5C:8D:3D:85:23:FE:FF:B7:A8:B5:27:F4:6E:C6:00:95:F6:07
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4e4c4e2b-fe1d-4e28-be53-b19977d83728.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff6:6000::/48
Signature Algorithm: sha256WithRSAEncryption
5b:81:c7:18:7a:54:f3:b2:f3:3e:06:ee:27:4f:18:fc:28:15:
f1:0a:68:02:d5:f8:35:d7:71:a7:a0:1f:04:3b:2d:d0:b7:de:
7d:d4:46:1d:c8:a7:0e:a9:33:e8:9f:de:02:ba:86:8d:3f:f9:
eb:15:e3:1d:b8:f7:2c:db:cb:fb:30:64:dd:94:61:a8:1d:4d:
45:42:78:0c:da:2d:82:a4:df:91:cf:bb:2c:51:b2:d0:f0:12:
74:8b:63:2c:53:59:41:e0:40:62:66:43:0d:01:37:71:50:e9:
2a:52:3e:d3:84:2f:a1:c2:3f:a8:71:ca:3f:6d:34:94:c2:8c:
4d:4a:09:76:67:79:33:b1:e0:02:94:66:6d:5e:81:98:92:7a:
b7:44:65:7b:c3:21:5d:7a:0c:79:73:e0:ec:db:3b:c8:08:a2:
88:de:29:b3:8f:8a:1e:f2:2b:41:bd:c1:a3:bb:f7:55:2c:fc:
57:63:3a:bd:75:91:fa:ae:10:8f:2e:ba:a7:1c:2b:fa:19:3a:
fa:6b:f1:b9:aa:b5:1d:36:37:bc:1e:06:bf:6c:c3:e8:5e:a8:
ea:53:f6:e2:de:88:93:3a:56:57:57:16:67:65:c4:7b:7e:65:
e2:f6:f3:f2:ee:ad:b3:77:01:d9:6a:76:23:1c:bc:17:f5:35:
f0:55:72:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 22:22:44 2026 by rpki-client