
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6f85961-ca25-49f8-acb4-411306bae795.roa
File: d6f85961-ca25-49f8-acb4-411306bae795.roa (raw, json)
Hash identifier: D6FOMzMKIoQ4Nei84uUyXXBIJNDyHNwmmaVHh3eGf/E=
Subject key identifier: 30:FD:20:F9:F0:B5:77:6E:77:25:F3:44:D3:CC:8F:16:99:CA:01:4C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4AF0299B300B1E3C4DF9D6FB4AD4E41931C1F626
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6f85961-ca25-49f8-acb4-411306bae795.roa
Signing time: Thu 16 Jul 2026 00:20:06 +0000
ROA not before: Thu 16 Jul 2026 00:20:06 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f0:29:9b:30:0b:1e:3c:4d:f9:d6:fb:4a:d4:e4:19:31:c1:f6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 16 00:20:06 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=f5b4e9607ab42c401fda4a6a273b4b820e8b270a96c041df213f1508ec85298e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:3d:77:20:93:37:fa:90:48:07:00:e9:49:
ef:07:27:27:8d:c2:ac:7c:46:ef:2c:41:bd:e8:8f:
a9:ec:a2:f6:28:65:44:64:f9:e6:2f:8f:dc:80:9d:
d4:43:c1:dd:cb:69:49:e7:b8:cd:0b:17:88:f8:fd:
9b:a6:69:bd:26:a1:9f:85:70:69:a7:49:7f:36:1a:
4f:e7:be:42:63:29:5a:69:83:1f:35:15:5a:9c:4e:
77:68:fb:6a:ba:ae:ff:24:a1:95:9a:fe:3e:e3:e2:
5b:3f:74:14:4c:71:1a:02:46:dc:a1:f6:65:4b:54:
ee:59:8b:c7:0b:7c:65:27:c7:66:5f:ab:3a:6f:54:
28:a1:73:eb:5f:43:64:c7:2a:53:71:aa:1f:8b:c0:
22:d7:1f:92:f1:fd:b5:c8:f0:09:b9:7e:3f:1f:e0:
85:96:1e:02:71:1f:bc:08:07:de:19:8a:3c:d1:68:
81:3e:57:e4:99:f4:de:61:ef:15:56:5e:03:aa:0b:
b3:0b:f8:31:ca:08:fb:6f:eb:81:3b:a2:8e:17:03:
37:f8:90:78:ab:68:8a:f3:af:91:01:96:73:fc:18:
37:ef:62:ca:9c:03:4f:53:99:3e:5c:20:8e:ee:c1:
5b:c4:6f:6d:70:2b:ee:ad:e9:dc:10:7c:29:1c:00:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:FD:20:F9:F0:B5:77:6E:77:25:F3:44:D3:CC:8F:16:99:CA:01:4C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6f85961-ca25-49f8-acb4-411306bae795.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.176.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:5a:37:66:4e:76:3a:49:a3:8d:c5:ad:bf:51:f5:f2:ad:73:
4a:89:04:3c:6d:51:09:52:07:b9:74:de:6b:53:86:1b:a2:b8:
67:36:8c:9e:42:c8:35:e2:7e:5c:d5:e9:84:57:71:fc:e8:c8:
7c:26:11:78:6b:70:81:1a:6e:88:6b:8c:03:22:b6:7d:ac:c9:
a2:8f:15:ac:1d:b5:a6:ad:5c:d2:fa:72:4c:07:9a:03:28:11:
81:fe:e3:95:55:b1:45:3b:ce:3f:07:66:1c:85:0f:02:5a:8b:
e1:d0:19:42:68:03:c8:4a:07:e7:98:24:ca:5a:b8:5f:af:a6:
ae:cc:79:a4:fd:ab:a4:da:a7:55:95:e8:a6:ea:a0:80:98:ee:
fc:d8:cb:11:a5:2f:3c:c3:27:e1:66:4e:a4:05:ed:35:0b:e5:
47:19:a3:dd:60:dc:e7:45:13:c0:00:b9:38:a7:26:3f:0a:e5:
39:24:94:ac:b9:99:cd:bf:f0:b4:c7:2a:df:7d:f4:7b:26:de:
b3:e0:b6:95:2b:32:ab:b4:ea:16:e0:6b:7d:6a:76:8f:9f:f3:
0c:ce:8a:74:ac:a3:ce:41:88:34:d9:b8:57:7d:c0:5d:93:11:
50:83:2e:9a:70:e4:ab:03:22:d9:53:e2:95:af:28:1c:61:6c:
50:63:c7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:04 2026 by rpki-client