
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae5b63dc-e0ae-4bed-8bed-50711d8863b5.roa
File: ae5b63dc-e0ae-4bed-8bed-50711d8863b5.roa (raw, json)
Hash identifier: o0ghXxQmILhpDRRAvQatfgNM1vVmIedlXa1qCqNqiZ0=
Subject key identifier: B6:4A:0D:1F:A5:EC:4B:E5:D1:09:07:7A:75:D0:B0:42:91:77:D0:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 01AF785FC88D005A974FEBC2871BB67328B72B9F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae5b63dc-e0ae-4bed-8bed-50711d8863b5.roa
Signing time: Thu 23 Jul 2026 00:11:07 +0000
ROA not before: Thu 23 Jul 2026 00:11:07 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 166.117.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:af:78:5f:c8:8d:00:5a:97:4f:eb:c2:87:1b:b6:73:28:b7:2b:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 23 00:11:07 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=2aa9344a8264258587ba06b04865814bf331e420a83e3697900e198690270cf0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:2e:62:5e:9d:0d:04:2b:e4:af:a9:a1:73:
6c:ac:60:a5:34:08:eb:a2:1d:61:e1:3e:78:32:f4:
56:f2:56:43:af:92:1b:a4:a1:1f:c9:a7:4c:61:66:
1b:72:ee:10:6d:d1:07:93:d5:7e:6e:4a:63:54:83:
19:18:fb:e5:02:43:6a:cf:5e:7f:14:f4:cb:2d:1c:
d3:9d:49:76:a7:35:e1:3d:d1:f9:eb:2b:69:0d:a4:
a7:bd:a2:aa:31:8e:c4:0e:d3:55:64:29:ae:28:47:
d8:a6:b5:82:97:ce:35:8f:29:4d:87:06:7a:6b:e6:
bd:34:ac:c7:94:1f:85:b1:b2:3d:22:15:4c:4b:56:
10:9a:83:80:c2:99:b4:3f:ad:b2:ec:2f:d7:22:83:
a7:7d:e4:c3:a1:77:6c:e0:0e:ac:a3:89:31:91:8a:
c3:d6:8b:9b:a6:e8:71:e3:e4:d8:0d:fe:f4:d6:98:
39:1f:39:c2:00:d8:2b:08:20:4a:57:16:16:16:ce:
0b:44:cf:e3:40:94:ec:09:94:c6:b3:64:28:76:e4:
45:22:62:e6:9e:1f:f1:07:07:a3:40:ee:0a:d0:b2:
60:cc:84:4e:50:fe:e6:01:1a:d2:1a:c2:79:67:ce:
90:5f:75:fa:b3:56:95:44:c2:d9:76:94:d0:f2:76:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4A:0D:1F:A5:EC:4B:E5:D1:09:07:7A:75:D0:B0:42:91:77:D0:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae5b63dc-e0ae-4bed-8bed-50711d8863b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.117.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:d2:d6:e3:ed:40:e4:bc:23:69:1a:41:67:42:da:69:9d:91:
e5:79:33:cb:41:d9:5b:1c:eb:ae:d6:82:32:0f:ee:96:ef:ef:
56:10:d0:e2:98:96:54:55:1f:b9:91:a7:8c:0d:78:56:9b:ef:
d3:11:94:11:11:3c:30:eb:35:f7:fc:67:25:4a:aa:1c:bc:15:
b4:16:37:a2:76:31:8c:0e:1d:a1:94:37:61:23:50:00:6f:3b:
a2:37:47:13:bd:da:02:3a:d9:fd:4d:01:df:cf:15:7b:a3:49:
79:bf:d9:55:e1:5e:f5:24:b3:04:0d:67:c2:97:61:7b:ee:68:
7d:b9:e3:ca:af:fa:28:e4:88:44:df:34:02:87:c9:ae:90:82:
9b:a2:b0:2f:7c:fa:9f:6c:3c:06:25:88:e0:68:25:6e:5f:a6:
b7:9d:44:12:dc:97:0a:e2:6d:ee:aa:6f:c5:d8:57:c0:c5:f4:
24:38:9a:34:8e:d0:85:e3:08:cd:78:06:dc:91:ff:f3:81:98:
67:d2:8d:6f:b1:7e:3e:1b:e3:9c:56:3f:6e:ca:1a:bf:d2:83:
6e:c2:68:6d:be:01:fa:d3:17:ca:05:8e:39:2f:06:be:5b:dc:
06:cb:1e:f5:49:15:be:17:2e:d3:9f:f3:af:0d:bc:ef:37:88:
8b:77:a4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:35:50 2026 by rpki-client