
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0022bd1b-6926-4965-8a67-25901363fca8.roa
File: 0022bd1b-6926-4965-8a67-25901363fca8.roa (raw, json)
Hash identifier: iXxhtvzRRggnUfQAOxNotsZDMIWAF4jhw2ZlfQvl3ck=
Subject key identifier: 34:C0:75:E5:3F:DB:ED:6D:AA:2A:47:9A:C3:49:35:9F:45:DA:23:4A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 179E6869B3C9E517636712C4DE6DD6B5B78F43BD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0022bd1b-6926-4965-8a67-25901363fca8.roa
Signing time: Sat 25 Jul 2026 00:40:11 +0000
ROA not before: Sat 25 Jul 2026 00:40:11 +0000
ROA not after: Fri 23 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.104.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:9e:68:69:b3:c9:e5:17:63:67:12:c4:de:6d:d6:b5:b7:8f:43:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 25 00:40:11 2026 GMT
Not After : Oct 23 23:59:59 2026 GMT
Subject: serialNumber=bc474d1219f0c31220c8a98032c8746784e61a2531cf4df31c4dd43010720f9e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:c1:20:53:3f:a0:ac:e7:ee:5f:bf:90:58:
18:75:7f:17:9e:e6:27:d9:2e:36:6f:a2:4b:61:71:
51:47:5c:f3:00:5a:e7:e7:88:f5:bd:31:7c:ba:bf:
43:31:32:1d:40:30:be:d7:69:d8:07:69:78:1b:5e:
9e:2d:ce:09:6c:b8:ee:a2:d3:0c:66:fa:07:e7:f9:
9b:56:ef:20:7c:b5:80:2e:f3:f6:6e:7d:50:62:cf:
7d:7f:11:f3:59:9c:9c:5a:3d:e5:02:fb:b4:cc:ad:
d8:f4:a7:e6:32:f9:54:e8:b1:b7:34:26:d7:e4:c9:
51:e0:67:19:f1:a1:4d:e3:3f:00:a4:f1:24:66:89:
ee:3f:54:ec:ae:31:a5:90:9b:e8:4a:f6:a2:ac:c8:
20:c0:a9:aa:86:c8:70:61:6e:cc:fc:8e:d8:a7:5a:
e8:a9:7f:04:cd:ec:93:2d:e3:8f:49:66:bc:db:35:
db:ca:b9:65:8f:60:28:77:7d:5a:53:35:1e:93:43:
51:01:b3:f7:26:54:6d:07:46:63:7d:ae:bd:c8:24:
15:18:94:af:da:40:07:95:74:bd:db:23:cf:7b:b8:
59:58:4d:ce:e2:46:28:bb:ac:cf:b1:8e:96:cb:bb:
0b:46:d8:b9:98:74:17:64:8f:6c:56:78:dd:0d:b8:
fc:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C0:75:E5:3F:DB:ED:6D:AA:2A:47:9A:C3:49:35:9F:45:DA:23:4A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0022bd1b-6926-4965-8a67-25901363fca8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.104.0/23
Signature Algorithm: sha256WithRSAEncryption
18:e2:fa:18:24:9b:20:d9:32:4e:fd:06:aa:f7:33:db:23:c0:
54:18:bb:81:46:ed:98:02:69:e0:dc:ac:39:dd:61:dc:67:28:
a3:4b:f6:8c:e8:a7:a7:3f:00:7c:8a:00:d4:31:1d:9c:21:41:
43:9c:f8:44:0e:de:97:52:67:2b:90:00:56:bc:3f:6d:92:d2:
6b:77:b5:58:88:e9:e8:6c:9c:2d:75:ef:ea:ec:30:95:0a:07:
ce:c6:a8:c5:d7:f7:65:cc:85:40:ac:54:a0:97:54:d3:81:0e:
a5:a2:16:4a:3e:62:e4:10:d4:c1:62:3a:6f:d9:71:62:78:e1:
c5:15:4b:00:7b:c6:49:1b:28:7f:8e:4c:89:87:bd:01:d9:f6:
fe:c3:69:d8:4f:25:f3:ff:fc:9e:ab:18:7c:d0:03:c8:0f:53:
a5:5f:79:f9:ea:c0:bf:da:5c:57:49:bd:2d:47:9c:11:a8:d3:
b2:23:6a:4e:57:7c:6e:00:52:ab:11:3c:4b:72:dd:7d:7f:f8:
29:f1:3e:4f:8a:58:2f:b6:ec:ef:ee:50:c7:0c:a3:9c:6f:23:
1c:81:34:cd:d6:bf:0a:20:11:b2:d2:92:c9:2f:7d:0f:49:20:
61:ce:60:6b:32:1b:9c:f0:48:6d:f3:da:a4:32:bb:b4:a4:0c:
b8:1f:38:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:10:37 2026 by rpki-client