
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a9120b4-97d7-47af-b9cb-3b2b365c7ddc.roa
File: 6a9120b4-97d7-47af-b9cb-3b2b365c7ddc.roa (raw, json)
Hash identifier: CmPdQ3JqvmJnyOXJDqNtehbCGGiGJ8mp1KGQ6K5dJEw=
Subject key identifier: 31:8E:F9:A2:2E:5E:27:89:ED:08:D2:D4:6C:D0:75:E6:50:1B:EE:09
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5695B6B3684A5760D691DDE31BF5410FDBFD9584
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a9120b4-97d7-47af-b9cb-3b2b365c7ddc.roa
Signing time: Wed 22 Jul 2026 00:10:43 +0000
ROA not before: Wed 22 Jul 2026 00:10:43 +0000
ROA not after: Tue 20 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.238.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:95:b6:b3:68:4a:57:60:d6:91:dd:e3:1b:f5:41:0f:db:fd:95:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 22 00:10:43 2026 GMT
Not After : Oct 20 23:59:59 2026 GMT
Subject: serialNumber=a37b4c18507a9e4cec1674400867074ce681951ab073831a7605439a5d81f268, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:68:30:53:c0:3e:b2:72:74:76:bc:10:be:70:
63:ee:3f:ea:85:10:c9:36:6b:27:da:17:f6:45:f8:
26:ad:73:4b:bc:96:21:41:54:1a:5b:ea:37:33:b3:
fd:6f:a7:bf:37:b4:96:5b:34:84:6c:cc:b0:df:60:
51:14:e6:8c:a9:ac:bf:a7:cc:2e:ce:de:63:b3:e4:
62:75:10:e0:56:47:35:26:4d:8a:ab:69:68:ce:4d:
a0:7e:74:24:51:fd:7b:e0:0d:f3:af:44:57:23:01:
7b:82:83:62:14:88:2e:af:b2:40:68:6f:76:c7:8e:
a4:96:fb:8a:e1:ca:c1:b7:1e:29:77:aa:b2:10:46:
62:c6:6c:78:5f:2c:9f:7b:05:70:00:35:23:f1:16:
4c:92:21:ba:b5:bb:28:fe:21:73:6e:43:f2:99:4b:
be:d9:26:d4:01:fd:be:01:dd:f6:6b:0c:da:ac:09:
71:64:3d:ab:55:bd:fa:ca:ff:19:05:ce:0a:20:d2:
75:f2:4d:76:9a:39:bc:68:58:be:5f:6c:88:0d:0e:
85:2d:99:98:14:f7:a9:17:44:4e:b1:ad:32:a4:ac:
52:00:1c:c9:1f:79:37:5f:d4:df:0f:e7:39:52:50:
93:a2:b6:f0:37:1f:ed:3f:d4:3a:6f:85:a7:e0:63:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8E:F9:A2:2E:5E:27:89:ED:08:D2:D4:6C:D0:75:E6:50:1B:EE:09
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a9120b4-97d7-47af-b9cb-3b2b365c7ddc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.238.213.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:1a:9c:3f:f5:26:70:7a:91:3d:41:b9:4a:bd:2a:b8:d5:d9:
a9:5e:c8:e3:4b:0e:a2:7f:bd:6d:c2:51:e3:10:44:6a:ae:d4:
ee:ba:af:d3:7a:c1:1b:5f:8c:ae:b9:79:53:7b:a0:3e:46:d4:
ab:ff:38:b3:43:6a:f2:2f:5d:10:45:7a:f1:02:28:58:2e:e7:
23:2b:90:3c:2f:38:7a:da:d4:4e:9b:0f:99:c3:08:7d:e6:f7:
5e:13:65:e3:03:48:d6:63:62:42:9f:e6:e2:39:f6:ab:47:1c:
66:80:ae:e2:be:1e:de:76:b4:59:b4:7d:3b:8f:83:23:54:2e:
6e:00:35:6c:ae:a4:87:0b:6c:4f:46:0c:f2:ab:75:e7:10:70:
85:b0:2a:5a:24:cc:eb:64:36:11:a6:dd:46:b7:c9:4d:43:6c:
7f:7a:f9:f4:ce:b6:83:09:6a:b3:dd:59:8c:c8:86:bc:52:a5:
9a:2c:5a:59:4d:a9:fc:e0:8c:13:34:f7:a4:26:60:21:ef:11:
80:cc:a5:1f:40:4c:f7:2e:7d:06:ba:c0:d5:97:10:d8:9b:a4:
47:81:e7:90:46:6f:06:c4:2e:ea:da:e8:82:cd:e7:ec:6a:43:
a8:e2:b8:87:aa:19:db:93:cc:7c:15:7b:40:ef:f5:3f:2a:7d:
3d:f9:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:43:42 2026 by rpki-client