
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b12f3e-dcb0-41c7-852e-373ae3f8b0b5.roa
File: b8b12f3e-dcb0-41c7-852e-373ae3f8b0b5.roa (raw, json)
Hash identifier: SKetnOAmeWK2tyZrOEg+wf091JUm5USYTXzqnf9sfKc=
Subject key identifier: 38:A1:7D:A9:CA:BE:F1:AD:B1:EF:46:05:AD:DA:DF:A2:95:4E:CD:CA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 52519993499C3954D51A820228A11BE4A417324A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b12f3e-dcb0-41c7-852e-373ae3f8b0b5.roa
Signing time: Fri 01 May 2026 00:21:29 +0000
ROA not before: Fri 01 May 2026 00:21:29 +0000
ROA not after: Thu 30 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffa:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:51:99:93:49:9c:39:54:d5:1a:82:02:28:a1:1b:e4:a4:17:32:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 1 00:21:29 2026 GMT
Not After : Jul 30 23:59:59 2026 GMT
Subject: serialNumber=94a994f3a99962dd845a6888468c705b94c74d4507191fb937eb2cffc4c16771, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6d:16:47:1f:8c:8c:01:dc:ee:e5:a3:09:cb:
41:ad:ef:92:39:1f:a8:4c:9f:cf:25:5f:20:dd:b4:
2a:e0:64:c1:cc:38:e7:eb:66:08:ba:57:07:43:b4:
19:38:6d:e3:41:49:38:c3:36:3d:ff:3d:d0:59:c3:
f5:69:d5:f1:d0:55:c7:51:ff:26:27:0d:dc:f6:e4:
6c:c7:2e:ec:c3:ab:59:63:dc:8d:3a:b4:ba:a1:57:
1a:1a:8f:6a:c7:71:89:4e:73:b3:4d:31:c7:f3:37:
9d:eb:a1:23:34:fc:89:fb:74:a0:b2:17:52:cb:03:
f8:54:be:ea:31:46:5f:52:6d:aa:9a:ee:09:86:09:
3d:9c:94:05:e7:e9:b6:e6:a8:59:46:8d:b5:a7:23:
84:46:08:33:61:67:c5:01:4e:97:41:30:f3:7a:16:
72:8c:4d:0f:4e:f8:08:cf:b2:32:07:fd:56:6f:36:
08:ab:36:bb:2f:99:5e:3f:9a:d4:38:a9:28:66:86:
88:2a:c4:75:68:0c:b4:bc:28:ed:3b:b6:fe:7c:b5:
da:16:a3:ac:9c:f9:97:2b:d4:0d:60:6f:6f:af:f7:
e5:be:30:e5:f2:3f:eb:31:d2:d3:ba:60:5c:25:ed:
2c:ca:e3:63:47:3d:f7:ca:fa:44:d4:c6:0d:2b:39:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A1:7D:A9:CA:BE:F1:AD:B1:EF:46:05:AD:DA:DF:A2:95:4E:CD:CA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8b12f3e-dcb0-41c7-852e-373ae3f8b0b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffa:8000::/40
Signature Algorithm: sha256WithRSAEncryption
6e:33:4c:5c:6a:d2:6e:07:29:e0:47:1f:11:d0:50:bc:b2:66:
3e:29:1d:aa:a2:21:30:3b:40:b8:f3:a3:83:3c:bf:00:8b:8e:
05:34:ac:d7:18:9a:b2:82:2e:54:f8:05:4e:0d:a9:94:64:8f:
ec:8b:b0:05:ed:89:1e:d7:90:9a:3c:d5:81:bc:f3:c9:d3:a3:
92:2e:e1:69:9e:e9:be:02:95:01:fe:66:56:1c:de:40:65:25:
29:ea:a9:00:7a:3d:92:ba:b1:e1:3d:54:2d:68:a6:d1:c9:c4:
00:2f:b8:7b:ac:8d:4f:fd:62:0c:8e:9a:5d:8d:a1:fe:73:a8:
cc:df:e5:67:7f:68:5e:6a:fb:d2:b4:38:83:3d:7d:48:27:c6:
34:b7:2d:26:88:5d:91:42:1f:83:44:01:e4:b5:c0:04:c0:88:
cd:20:3b:62:86:3a:de:00:b6:69:d3:6e:65:3c:46:bf:c5:80:
81:d4:b3:e6:99:8f:56:e8:bd:59:d6:06:89:3e:52:0d:00:70:
d6:bc:ba:62:09:5e:27:03:f1:c1:a8:8f:11:29:b7:91:21:c7:
62:3c:74:9a:65:3f:09:e7:f8:7e:d9:6e:06:02:c2:e3:65:b9:
d0:20:58:fe:e7:37:a1:c6:22:3c:18:b8:e0:27:9a:3e:00:a2:
4f:d1:30:70
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUUlGZk0mcOVTVGoICKKEb5KQXMkowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDAyMTI5WhcNMjYwNzMwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5NGE5OTRmM2E5OTk2MmRkODQ1YTY4ODg0NjhjNzA1Yjk0
Yzc0ZDQ1MDcxOTFmYjkzN2ViMmNmZmM0YzE2NzcxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcbRZHH4yMAdzu5aMJy0Gt75I5H6hMn88lXyDdtCrgZMHM
OOfrZgi6VwdDtBk4beNBSTjDNj3/PdBZw/Vp1fHQVcdR/yYnDdz25GzHLuzDq1lj
3I06tLqhVxoaj2rHcYlOc7NNMcfzN53roSM0/In7dKCyF1LLA/hUvuoxRl9Sbaqa
7gmGCT2clAXn6bbmqFlGjbWnI4RGCDNhZ8UBTpdBMPN6FnKMTQ9O+AjPsjIH/VZv
NgirNrsvmV4/mtQ4qShmhogqxHVoDLS8KO07tv58tdoWo6yc+Zcr1A1gb2+v9+W+
MOXyP+sx0tO6YFwl7SzK42NHPffK+kTUxg0rOWUpAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUOKF9qcq+8a2x70YFrdrfopVOzcowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I4YjEyZjNlLWRjYjAtNDFjNy04NTJlLTM3M2FlM2Y4YjBiNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/6gDANBgkqhkiG9w0BAQsFAAOCAQEAbjNMXGrSbgcp4EcfEdBQvLJm
PikdqqIhMDtAuPOjgzy/AIuOBTSs1xiasoIuVPgFTg2plGSP7IuwBe2JHteQmjzV
gbzzydOjki7haZ7pvgKVAf5mVhzeQGUlKeqpAHo9krqx4T1ULWim0cnEAC+4e6yN
T/1iDI6aXY2h/nOozN/lZ39oXmr70rQ4gz19SCfGNLctJohdkUIfg0QB5LXABMCI
zSA7YoY63gC2adNuZTxGv8WAgdSz5pmPVui9WdYGiT5SDQBw1ry6YgleJwPxwaiP
ESm3kSHHYjx0mmU/Cef4ftluBgLC42W50CBY/uc3ocYiPBi44CeaPgCiT9EwcA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:00:05 2026 by rpki-client