
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5be2472-af1a-4957-889f-91229016b0c9.roa
File: d5be2472-af1a-4957-889f-91229016b0c9.roa (raw, json)
Hash identifier: 0+Y0dWI05DxoegEv9iHADGzUfNkLlHd1z4UA8vh+F8E=
Subject key identifier: 6D:74:D2:9F:F7:1C:1E:A2:5F:E9:35:3E:55:A9:2C:16:F4:1E:67:66
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 57787B4520F8F8215FBC53EE44D298EDFED33564
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5be2472-af1a-4957-889f-91229016b0c9.roa
Signing time: Tue 21 Jul 2026 01:00:09 +0000
ROA not before: Tue 21 Jul 2026 01:00:09 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 129.223.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:78:7b:45:20:f8:f8:21:5f:bc:53:ee:44:d2:98:ed:fe:d3:35:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 21 01:00:09 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=8464d9399cf067a7902e9c3a21e17df84dcfc52687bc6bb4f45254da049221ed, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:2d:82:35:92:a4:7a:13:75:a6:c6:a7:d5:
8c:04:07:53:7a:00:0b:19:c2:89:15:b2:04:b4:8a:
e2:0d:0d:af:49:29:09:b8:24:53:63:a8:03:7e:a8:
0d:32:09:97:95:29:d1:a9:60:ea:8b:58:3e:93:3f:
48:60:5f:10:a4:8c:0e:2d:04:b6:aa:4e:84:ba:15:
d1:9b:f5:13:8a:10:b1:37:13:10:ab:67:54:8e:cb:
6c:a1:e0:f2:7a:3a:2c:fb:36:6b:e7:4e:f5:e4:20:
fa:3a:53:1b:e6:c2:93:bd:ec:ec:f3:a9:de:d5:83:
c1:e9:81:e5:d8:33:65:04:a5:98:2d:f0:b8:ee:fa:
c5:0e:88:8f:cb:b2:85:30:83:43:e0:d8:f4:18:ac:
a5:7d:8e:ad:27:5e:0c:de:f0:0f:07:a5:22:c8:7b:
f1:64:09:f0:0c:fd:27:7d:c0:72:b8:b0:fd:9a:46:
bf:85:15:d1:c8:86:ab:b2:a7:67:a4:8a:d5:81:4b:
47:1c:d1:e6:33:5b:f2:de:81:85:90:0b:fc:b7:86:
48:91:7b:69:6d:95:19:a5:d0:6e:b3:d5:a2:af:42:
07:b0:17:ce:ea:9d:83:46:ac:f4:e7:fc:24:35:d1:
2a:0d:c3:ff:fe:9f:e9:95:7a:9a:31:1c:1c:79:75:
86:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:74:D2:9F:F7:1C:1E:A2:5F:E9:35:3E:55:A9:2C:16:F4:1E:67:66
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d5be2472-af1a-4957-889f-91229016b0c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
32:6f:01:84:00:64:0f:5a:fe:3b:13:64:69:ba:e9:fd:9e:27:
2e:f4:3a:49:94:df:80:52:34:fa:7e:75:c1:a9:9e:d6:e3:31:
5e:3f:9a:a1:d8:5e:d0:47:6b:8f:1e:e2:7f:7b:53:97:ce:88:
f3:04:3f:23:ea:2d:16:91:53:54:ba:85:38:cd:a2:c1:4a:1f:
e2:c5:40:28:7d:5f:e7:51:dd:49:8d:95:78:c0:0e:88:19:d2:
d5:02:22:c8:d2:ab:22:b9:1a:84:8d:47:59:6a:22:c0:d0:fc:
29:8a:a3:7a:60:f3:9b:f5:2b:78:aa:9e:cd:e0:09:3b:b9:4b:
1c:f2:4e:36:2a:0d:f7:d7:7e:a3:f8:81:0f:af:d6:57:65:44:
51:77:46:47:b2:98:53:9d:df:3e:19:d5:52:94:bb:d3:d1:d3:
e0:d9:73:3d:3c:34:9a:15:d0:db:37:d0:06:df:a3:49:90:4a:
02:9b:b5:78:ef:42:cf:ae:58:d0:a8:61:42:4e:73:f6:ba:da:
e6:30:1a:da:7b:f4:4e:86:ef:51:65:af:64:36:b3:66:d1:31:
96:22:9e:75:ab:6b:41:cd:06:e7:01:cf:b8:53:e8:f4:ba:47:
7b:19:5a:b9:e3:74:94:a5:f5:a3:34:e1:80:0e:f7:bd:e6:f0:
04:97:2a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:39 2026 by rpki-client