
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7b1e0e88-9c11-48ed-8b6a-8fea60a3f92c.roa
File: 7b1e0e88-9c11-48ed-8b6a-8fea60a3f92c.roa (raw, json)
Hash identifier: l0TQ8x+hzwQOP3uqHfj1vttks2VMIO98Ej5daHT8myA=
Subject key identifier: 17:0D:AC:31:D4:D1:16:6C:02:63:17:67:E9:54:EB:BE:3D:A6:41:8F
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 21D0546D6766783ECB2D2D0AD06721D5F7DBEE74
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7b1e0e88-9c11-48ed-8b6a-8fea60a3f92c.roa
Signing time: Thu 16 Jul 2026 00:20:03 +0000
ROA not before: Thu 16 Jul 2026 00:20:03 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2606:8140:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d0:54:6d:67:66:78:3e:cb:2d:2d:0a:d0:67:21:d5:f7:db:ee:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jul 16 00:20:03 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=f7fab0696b87b335511f6b171f47b6e06df05a6dfb719b7828af33b74eb9d34c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:24:f4:6c:40:20:61:7f:3c:cf:7e:92:9b:57:
ab:4b:e2:0e:d2:7a:2a:33:5e:92:56:fb:10:b1:8b:
ab:3e:1f:a6:49:1b:9c:d8:df:8b:95:81:4b:49:b0:
24:2d:52:02:72:95:4d:23:b6:fd:1a:90:76:03:9a:
09:a2:5e:fd:14:b4:22:b9:87:be:14:98:5d:5b:a8:
83:05:33:94:20:6c:ed:aa:e1:3a:73:1d:65:e3:71:
34:46:51:48:22:c4:f5:02:91:5c:2d:82:b4:8b:12:
f5:85:e5:8a:25:f6:3f:99:9f:f7:e9:53:66:41:22:
c7:a0:13:6a:e7:99:64:22:96:35:6d:b0:3d:53:77:
e6:bf:d7:d7:99:fb:db:16:a8:e6:88:86:2f:3d:00:
0b:62:ad:97:fc:b6:fb:7a:0c:94:91:ac:51:40:01:
a6:2e:2c:6f:62:7b:d4:54:2f:25:71:2a:da:ea:81:
ef:31:9f:39:13:d0:96:35:69:b7:27:a7:bf:08:a1:
f0:d8:3b:73:78:b0:94:39:a7:99:2e:7f:69:ea:bf:
2f:02:53:0e:ac:13:3c:61:36:66:c6:6f:4a:01:e7:
da:7e:d2:05:e2:d0:65:31:1d:59:ec:8a:51:5b:05:
1c:69:ac:84:8e:0c:c7:7e:2a:a4:7e:80:1a:0a:fe:
39:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0D:AC:31:D4:D1:16:6C:02:63:17:67:E9:54:EB:BE:3D:A6:41:8F
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/7b1e0e88-9c11-48ed-8b6a-8fea60a3f92c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:8140:200::/40
Signature Algorithm: sha256WithRSAEncryption
04:4f:2f:93:69:9e:e0:8f:21:6e:46:76:0a:cf:37:4c:b8:06:
be:3a:0e:2e:20:e4:57:4f:7a:79:96:6c:a8:0f:58:78:f5:c1:
21:98:26:d2:be:69:b7:fe:1c:fb:99:b1:d3:7e:38:70:21:b7:
35:29:86:0e:e4:20:a3:35:e3:2c:62:f2:6d:8b:7a:68:7a:80:
d5:26:5d:51:c2:28:52:bf:b9:91:76:30:0d:61:80:b4:5b:83:
7a:cc:0a:51:10:e4:ff:b4:25:4d:33:aa:f4:d5:76:7a:2a:ce:
1d:0c:60:d8:e9:33:d9:83:8e:47:0b:c5:02:27:63:60:4f:6d:
ab:9c:66:4a:36:71:66:bf:42:f4:0e:b4:b5:a5:77:e8:cd:6c:
4b:36:42:cc:79:69:4e:7d:f2:e3:35:a6:d2:79:4e:d1:32:ef:
86:98:6c:5c:67:2d:76:95:6b:a5:15:29:8d:6c:0c:a0:35:eb:
ac:67:f3:ff:36:94:dc:ff:72:e3:65:d7:d6:30:cd:fe:d2:4e:
7f:d7:62:cf:6a:65:59:cf:d1:c6:a8:ca:0b:33:a4:e9:d4:c5:
24:ca:d7:45:c8:35:a1:8f:b9:44:f5:62:9d:8b:2b:78:8e:3d:
61:07:37:29:0f:5b:cb:35:5e:2c:ca:54:cd:34:8c:96:fe:9f:
e0:00:a9:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:43:01 2026 by rpki-client