
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a54e08ef-1fcd-4574-a6f8-c93267fadce1.roa
File: a54e08ef-1fcd-4574-a6f8-c93267fadce1.roa (raw, json)
Hash identifier: L3jYy335AAL9oSMRrf0HCRWX+lxsZ2TxkpxFXzDreMo=
Subject key identifier: 70:50:90:E8:CE:EF:CC:DE:52:4D:FB:11:EC:1B:8D:60:DA:B9:1D:B9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 189304CE3E764DB1F7D9829FD5930D9EB7A98CDD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a54e08ef-1fcd-4574-a6f8-c93267fadce1.roa
Signing time: Mon 22 Jun 2026 00:20:06 +0000
ROA not before: Mon 22 Jun 2026 00:20:06 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1feb:7440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:93:04:ce:3e:76:4d:b1:f7:d9:82:9f:d5:93:0d:9e:b7:a9:8c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jun 22 00:20:06 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=fb15c68b24bfed7c6acc2d87ba76f5e7919f5c0c93fd7761ad628ae6df35759b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:90:77:3c:a1:9c:e2:7e:81:f3:41:3a:e0:7e:
5b:f0:1d:c4:83:65:1f:69:5c:e8:0d:b3:51:ab:a6:
7d:b4:d1:16:a8:9d:e1:d2:93:1d:80:93:58:60:ad:
0c:67:f7:1f:40:df:e5:dc:35:01:ac:ee:6f:e3:c2:
f8:ed:d4:2d:4b:38:0f:58:1c:52:df:4e:1f:e6:34:
1d:ed:6d:b0:cb:37:f2:17:a9:49:6b:b4:48:7e:24:
b2:18:43:a8:f0:85:67:86:cc:84:68:26:2c:29:c2:
9a:e7:55:7a:eb:49:48:a9:fb:24:99:58:af:89:f6:
fe:4a:7a:0c:84:06:ce:7c:04:9b:dd:db:8f:45:a9:
72:bf:71:ad:29:b1:86:21:04:dd:ed:b6:e5:73:b6:
9d:42:7e:b1:67:ef:6f:8d:fa:06:15:6d:a5:76:e6:
4c:fa:01:dd:3e:56:84:b4:44:95:3a:a7:5c:3e:f7:
66:ba:c1:ed:ec:f9:21:47:35:61:21:56:1c:54:a1:
ca:31:02:4f:9e:06:c6:ff:17:4c:3e:ee:20:e0:cd:
cd:1a:55:c3:27:06:70:cf:43:4b:ac:e1:e6:0c:1d:
54:68:f2:01:96:d1:16:45:b2:42:7a:c6:45:92:6a:
86:53:67:be:3e:0a:99:0e:6a:a8:6f:2d:a3:b8:20:
8f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:50:90:E8:CE:EF:CC:DE:52:4D:FB:11:EC:1B:8D:60:DA:B9:1D:B9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a54e08ef-1fcd-4574-a6f8-c93267fadce1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1feb:7440::/48
Signature Algorithm: sha256WithRSAEncryption
1d:4d:bd:6e:f3:05:2c:a0:55:c0:b6:30:c9:53:c4:9b:31:60:
5d:be:a3:0d:32:32:6f:c0:e3:c6:65:ab:36:33:d0:a5:6d:65:
40:cd:82:b8:59:c1:8a:86:c2:ec:5b:69:f1:e0:85:c1:d7:ff:
11:a9:d4:8f:cd:0f:98:fb:34:58:a3:1f:f6:d9:6d:fd:d8:a7:
b3:3d:cf:1f:28:b7:80:ca:2f:60:9b:73:44:56:1a:a6:4f:43:
00:d0:b0:59:c0:ae:a1:f0:f3:44:55:a6:ad:30:78:bd:4a:43:
71:31:3e:dc:1d:35:2d:2a:1a:47:50:09:5c:cf:e9:e3:f1:7f:
6c:cb:83:c0:c8:ca:ac:46:f1:33:4b:35:b1:79:3d:9c:c3:f0:
9f:7b:68:89:e9:27:f1:47:3d:0d:e2:59:db:fb:cf:c7:dd:52:
23:42:c5:21:30:40:6a:af:5d:70:75:55:dd:ab:f2:28:31:59:
e9:62:43:5a:c9:8a:c5:4e:88:84:45:f5:eb:ed:f4:06:7b:e6:
6e:e0:60:0f:eb:6c:8f:02:89:31:42:ac:df:0a:02:34:a5:ee:
c4:07:93:5d:10:f7:a2:1c:34:0a:a9:9d:dd:4a:95:ac:74:5c:
85:12:fa:52:10:94:27:62:d0:0e:75:ea:40:6d:5b:61:b9:07:
b0:f3:38:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:03 2026 by rpki-client