
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5111af1-3222-42b7-8536-fbdd563c45ea.roa
File: b5111af1-3222-42b7-8536-fbdd563c45ea.roa (raw, json)
Hash identifier: CfEuq89oAPcpDs1pqVtICJARQDjGYePcz0VTM03EDfw=
Subject key identifier: 89:05:28:C8:02:A0:22:86:D8:00:87:94:31:F6:A4:57:D2:E2:D9:BB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1FF8CD5506ECA0D6F0DB1D1D4870E3D928EF52F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5111af1-3222-42b7-8536-fbdd563c45ea.roa
Signing time: Fri 08 May 2026 19:16:43 +0000
ROA not before: Fri 08 May 2026 19:16:43 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:ec80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:f8:cd:55:06:ec:a0:d6:f0:db:1d:1d:48:70:e3:d9:28:ef:52:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 8 19:16:43 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=eb1f485f5f1cca8398030397a7f847e749f13f08077845c7af30f58d0663aadf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:7a:2f:77:97:9e:8c:bc:45:ca:48:91:24:
ea:08:18:3b:71:e3:46:6a:0f:90:69:50:d5:51:bf:
02:17:97:f2:fa:96:47:eb:73:e7:3c:8b:69:6d:3c:
7e:da:9c:f0:0b:54:6e:d2:44:36:c2:87:3d:00:8c:
d2:14:a9:7b:8e:ea:bf:21:f7:d7:e2:3c:c4:52:42:
13:00:88:89:d8:95:57:64:85:91:23:3a:f9:09:34:
b5:07:3b:4a:b4:ea:38:cf:b4:ef:1c:c6:0a:8e:ce:
37:50:4e:15:e5:53:a2:3f:6e:49:00:5b:8b:a9:54:
ce:38:f5:67:fe:e6:a6:ae:24:c5:62:cd:5c:3f:e3:
c3:f9:67:11:44:b6:2d:68:31:43:42:4b:bd:84:b3:
d1:2c:55:12:8c:47:1b:08:1e:fd:6d:b8:26:d7:12:
65:de:0a:75:9d:ed:20:6d:3a:e0:98:08:7b:e4:5c:
a7:20:8b:d6:61:d5:d7:9b:b0:1d:c4:18:4e:7e:ba:
54:7e:95:18:51:7f:73:43:a2:a7:24:79:81:30:c5:
e8:9c:02:ed:10:f3:fa:fc:52:13:df:ed:64:b9:e5:
70:c1:a1:3a:cb:a5:07:20:8f:69:db:11:9e:e3:ec:
c5:ff:cc:60:2a:4f:71:bc:fe:31:de:b5:c4:e5:c3:
af:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:05:28:C8:02:A0:22:86:D8:00:87:94:31:F6:A4:57:D2:E2:D9:BB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b5111af1-3222-42b7-8536-fbdd563c45ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:ec80::/48
Signature Algorithm: sha256WithRSAEncryption
aa:4b:aa:3d:81:16:39:67:a1:3d:58:21:c0:cf:30:b2:4c:f2:
8c:0b:49:21:b2:ca:44:3e:6b:4e:e9:9c:6d:2a:58:89:da:ff:
ad:6c:26:19:af:8a:ec:5c:70:b7:79:10:5f:99:04:cc:71:25:
ca:8a:99:f2:23:48:11:80:f5:37:5c:15:10:7f:79:85:cd:3d:
8c:8e:87:2b:45:39:0c:0a:a9:60:ee:fa:d6:ca:f0:57:df:11:
16:9f:3c:62:bb:9b:e0:2e:4f:fb:fe:c5:dd:1c:af:1f:57:d1:
17:2a:d9:a7:46:9e:7d:d6:a4:af:d8:9c:d2:24:2f:95:0c:40:
e1:33:e9:bf:81:50:9c:d5:a2:1b:56:84:14:3e:dc:5c:ef:5d:
bc:42:51:0d:49:bf:aa:bd:b3:75:44:bf:b2:36:d2:58:02:18:
3e:68:5f:37:19:09:26:99:8f:97:cf:40:ca:76:2e:e0:c4:a3:
28:9e:e6:bf:0e:63:26:d2:c2:4e:1e:d0:12:2d:28:be:f1:e6:
84:9b:e9:c1:1d:22:31:62:17:08:4a:32:af:88:bd:d9:76:e6:
91:7f:2e:e6:37:8a:55:ff:dd:62:2a:9a:49:1d:ee:2a:ed:25:
9d:44:d6:91:fd:13:a6:fe:3f:cb:d7:9d:5a:a3:dc:88:d9:ec:
6e:60:3e:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 06:38:25 2026 by rpki-client