
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/76ffc1ea-00ce-4ab2-8661-dbff1b3a1290.roa
File: 76ffc1ea-00ce-4ab2-8661-dbff1b3a1290.roa (raw, json)
Hash identifier: 45z0wBJvmAXrUaLh09WJHxHew/727izKU2krDge/OvI=
Subject key identifier: 1F:CA:87:5F:E2:79:D9:4F:7B:0E:E8:6B:F9:0B:F2:3F:24:F3:77:24
Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial: 06BD4EE7E724EFF4F2331F870094BFC628A42C8F
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/76ffc1ea-00ce-4ab2-8661-dbff1b3a1290.roa
Signing time: Wed 21 Oct 2026 00:09:31 +0000
ROA not before: Wed 21 Oct 2026 00:09:31 +0000
ROA not after: Tue 19 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2605:8380:d00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 13 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:bd:4e:e7:e7:24:ef:f4:f2:33:1f:87:00:94:bf:c6:28:a4:2c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Validity
Not Before: Oct 21 00:09:31 2026 GMT
Not After : Jan 19 23:59:59 2027 GMT
Subject: serialNumber=58e3b8033a7415554728b0514b2398ff8174903a6094b9811a58f633b2aa86a5, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:bf:fe:84:d5:f0:2d:7b:07:59:c9:c6:b4:
73:da:50:2d:2f:14:63:09:0d:f9:a5:88:09:4d:97:
c7:7a:30:96:d6:27:85:8b:4a:77:9b:f5:fe:52:cb:
8b:fe:ff:97:ef:ec:cb:a1:fa:1c:61:96:93:db:be:
ba:8d:05:4a:3d:c6:80:34:0a:e7:5c:c3:25:2b:64:
5c:7a:2b:3b:6e:41:ac:5d:58:b6:2d:0e:19:4e:56:
7a:17:e2:60:56:58:71:20:ff:21:bb:1c:62:00:25:
da:09:01:f5:1a:cd:63:08:c0:88:24:9e:16:ba:52:
d2:b5:d5:85:95:c6:15:e0:46:5f:91:57:8d:45:e8:
c9:e1:25:7d:ca:65:04:1e:7e:d4:87:2f:a9:d0:02:
f5:a0:2c:c9:08:52:c1:91:d0:64:18:f3:5a:73:73:
42:7d:96:7e:62:fb:8d:23:e4:ef:62:28:93:3c:37:
5c:35:0f:0c:b5:89:08:19:13:ca:5d:db:06:e6:ba:
73:52:26:6b:88:1e:5e:de:21:d4:68:5d:06:cf:e8:
47:fd:3e:7d:49:49:5e:5f:a9:37:8a:22:89:82:90:
85:16:f4:d3:f5:c1:bf:64:03:dd:d5:3c:a8:1a:bb:
37:02:f3:de:cb:0c:17:c8:e7:fa:cf:77:7c:bc:3d:
af:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CA:87:5F:E2:79:D9:4F:7B:0E:E8:6B:F9:0B:F2:3F:24:F3:77:24
X509v3 Authority Key Identifier:
keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/76ffc1ea-00ce-4ab2-8661-dbff1b3a1290.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:8380:d00::/40
Signature Algorithm: sha256WithRSAEncryption
9f:23:3b:2e:4d:d9:3e:76:bc:f3:d8:ba:21:55:32:bb:b9:51:
9a:9b:68:ee:a4:61:b6:a9:53:00:06:6a:60:db:41:b4:b6:77:
2a:9a:36:91:ca:c4:e6:be:15:58:67:e7:d5:be:e3:b9:15:36:
84:d4:59:7d:92:be:50:c8:86:08:af:7a:15:ce:cc:aa:54:b1:
3f:35:7b:8f:18:99:f9:b9:19:81:56:7d:2f:48:64:3e:60:55:
5f:2f:19:dd:18:58:58:9f:e8:0c:cd:da:17:4d:ad:bf:ff:0c:
d1:65:c7:d1:b7:51:7f:3b:70:f1:00:33:7d:62:48:82:b1:c6:
8c:f2:a2:ea:b6:fa:32:f7:9f:a6:2f:5d:52:bd:0b:6f:cd:e4:
19:a4:08:fd:66:ec:d9:15:07:08:e2:b0:e1:ac:a4:fa:ad:6d:
13:33:b8:25:71:3d:c4:d0:6a:e8:24:00:dd:0f:29:4f:38:2b:
4d:94:8e:b7:4c:a8:9b:c7:9c:28:94:bf:c1:28:91:d7:2f:88:
8f:14:07:42:c6:cf:29:85:76:a0:fb:c5:2e:2a:3e:e1:5c:39:
00:99:2e:52:4f:f7:0e:aa:ae:2c:83:2e:81:bd:51:0d:2e:ff:
f8:a9:cc:8c:c1:ee:d8:54:0b:c7:54:7f:00:a3:a2:2b:22:08:
6a:e3:90:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 12 16:07:16 2026 by rpki-client