
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c68f718c-b794-4f1b-8ba5-23b85abca40d.roa
File: c68f718c-b794-4f1b-8ba5-23b85abca40d.roa (raw, json)
Hash identifier: AeWJ63TqLYmdsQ33YtCTVSOXH7rko/r5ZyPR4bQe3Sg=
Subject key identifier: CC:14:1F:DD:48:AD:EF:4E:01:82:01:C5:E1:79:B5:B4:B6:C7:71:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 254AF6A04A00E956495F8AC4BA6E79EB1B18B241
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c68f718c-b794-4f1b-8ba5-23b85abca40d.roa
Signing time: Mon 22 Jun 2026 00:20:47 +0000
ROA not before: Mon 22 Jun 2026 00:20:47 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f14:2000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:4a:f6:a0:4a:00:e9:56:49:5f:8a:c4:ba:6e:79:eb:1b:18:b2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jun 22 00:20:47 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=ea6838f8cac0b6d320ececdcfca4c709663badc1cc2c2c83e8a1272c775694ae, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:53:1a:e0:94:ce:42:36:a2:13:51:92:4e:
a1:4b:41:6d:13:39:25:31:52:e0:01:21:9a:c6:92:
b2:5e:be:8c:f0:a2:eb:3e:14:0f:b1:2c:25:f4:aa:
77:57:84:6a:22:ec:4e:66:c2:96:42:f9:ba:3e:e4:
d9:85:13:e1:73:e3:a0:ac:9a:5d:2b:23:7e:cd:92:
ad:c5:4a:3e:70:0d:30:ac:55:4b:e5:c4:0c:d2:c6:
a4:b8:89:7b:6a:ae:36:30:2a:a1:43:1f:66:e3:9e:
5d:79:f3:8f:90:da:60:19:2c:73:c3:bb:f2:03:c6:
8d:23:6b:10:55:94:5a:f4:ae:41:bf:88:40:81:5f:
8f:79:46:8b:ae:19:f9:20:4a:84:28:e9:03:be:46:
53:6a:54:91:7f:89:d2:b9:32:1d:7f:d3:1f:4f:72:
da:c9:00:6f:99:ce:02:f5:e5:e9:e1:95:c6:47:c0:
84:ec:61:2b:a0:e4:20:11:2a:59:2c:f6:08:a8:89:
e5:7d:1a:7b:cb:05:39:31:2f:f9:c1:90:f2:cc:ec:
22:9a:4d:ee:d3:eb:61:54:ce:d6:df:2e:40:f7:b0:
fe:fb:61:8c:f7:88:ed:fe:ea:75:c3:a6:56:a1:e6:
8e:13:e9:07:bc:18:a3:30:49:d4:ef:e4:79:9c:80:
b5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:14:1F:DD:48:AD:EF:4E:01:82:01:C5:E1:79:B5:B4:B6:C7:71:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c68f718c-b794-4f1b-8ba5-23b85abca40d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f14:2000::/35
Signature Algorithm: sha256WithRSAEncryption
c8:29:f8:d4:59:a3:9f:17:2a:59:92:49:be:9e:66:d0:db:4e:
70:8c:b5:40:37:70:a9:73:53:fc:4e:06:a1:ee:47:ad:f9:8c:
d9:67:f8:29:a0:eb:9c:cd:f3:6a:a8:a9:9d:7c:a9:eb:b4:57:
89:82:03:24:f5:7f:43:cc:7d:81:30:42:3c:ba:e3:42:e2:31:
d2:55:d4:e1:4d:92:05:83:44:60:a0:2d:32:f1:0a:cc:5e:5e:
ea:cc:2f:09:a1:60:ba:1d:d1:fa:ea:b4:bb:a3:8d:9c:07:1d:
86:8f:94:bc:10:a0:26:f4:bd:26:89:29:95:0b:67:ef:de:fa:
12:c1:70:3c:81:ca:34:68:af:64:c0:e4:d4:20:d6:1b:2c:43:
cc:b0:29:77:0e:ed:68:c3:90:41:39:57:cc:0e:37:14:71:7d:
97:f0:71:f3:b0:78:7d:66:3c:3f:79:9e:29:90:a9:ee:81:a6:
db:7f:97:be:eb:b9:d4:8c:d4:3c:97:f0:4d:84:83:47:e5:e2:
d2:d4:96:e2:b2:34:d6:90:2a:01:b5:c7:9f:11:4a:07:85:90:
26:6b:d3:21:ad:fa:64:e2:e0:c4:12:8a:42:9b:ce:77:a8:75:
b7:9c:74:04:6a:cf:2d:a6:c5:94:a4:dc:b7:12:12:db:4b:ca:
5c:93:a8:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:54 2026 by rpki-client