
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04d48776-d0a9-4c41-a5be-4384a8276f10.roa
File: 04d48776-d0a9-4c41-a5be-4384a8276f10.roa (raw, json)
Hash identifier: m8IBCphmsh9gRCbsPSOq/Os31N/uUXAFAqxwInki9QM=
Subject key identifier: 03:79:37:E4:1F:17:C1:F4:6B:77:17:13:C1:AD:BD:75:B3:B2:34:6A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0BF59B6ECE2B3091B0F32E3B309C8DC0C0C1396F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04d48776-d0a9-4c41-a5be-4384a8276f10.roa
Signing time: Mon 27 Jul 2026 00:41:01 +0000
ROA not before: Mon 27 Jul 2026 00:41:01 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:f5:9b:6e:ce:2b:30:91:b0:f3:2e:3b:30:9c:8d:c0:c0:c1:39:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 27 00:41:01 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=8769e62325a8e2a34f7e87fbe564c5a0770259e76a33494368994d5525498bce, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:38:31:14:d0:9f:d9:a4:6e:3a:85:7e:c1:
1e:e2:93:3d:7a:6c:01:fc:52:b4:7d:f8:cc:0a:b8:
40:36:fc:5c:ec:d7:9c:a2:07:89:d4:19:f4:05:0a:
27:c4:4c:01:5a:f6:98:69:49:e6:a4:f7:e6:e5:c7:
1f:d4:88:fd:b7:04:d3:5f:6c:77:54:8c:6b:60:5b:
7c:2a:6d:69:da:2f:a4:d3:e6:48:40:e3:8e:31:80:
10:57:1a:83:0b:9b:b3:cd:9f:bb:0f:39:84:16:46:
89:46:57:85:fe:fa:43:3a:cc:19:ce:21:4b:1e:84:
d6:49:d2:0f:8d:22:12:24:e1:40:3f:15:a6:d2:e6:
a0:93:12:f1:f2:76:31:ae:89:d4:d1:6b:16:62:b9:
5c:69:71:9e:dd:29:96:c1:fb:99:a2:ba:eb:63:c0:
a7:cf:89:a6:05:04:e0:c1:7d:e7:0f:f6:ac:e7:ab:
50:29:e9:6d:2a:ec:d5:db:1c:1a:da:fa:af:81:07:
aa:6a:af:3d:4f:af:f7:b9:47:38:6b:42:14:6a:06:
83:55:34:7c:b0:f3:e4:cd:6f:ea:5e:7f:7b:24:e8:
a8:68:7a:b8:1e:56:fe:87:21:37:f4:1b:85:ac:20:
02:bb:cc:57:e4:98:03:a0:32:82:8b:5b:7d:b5:bc:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:37:E4:1F:17:C1:F4:6B:77:17:13:C1:AD:BD:75:B3:B2:34:6A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04d48776-d0a9-4c41-a5be-4384a8276f10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.1.0/24
Signature Algorithm: sha256WithRSAEncryption
35:81:93:86:4b:60:41:d8:3c:b0:32:c7:0f:24:63:a3:dc:13:
f4:52:67:06:60:86:24:57:39:cb:83:f3:fa:fb:bb:b9:2d:98:
8f:28:39:1d:c8:94:ba:d8:93:79:99:66:ae:93:0c:5a:ca:74:
44:fa:3d:23:87:c3:cc:e5:65:fa:e7:77:1c:76:07:6f:40:0c:
c8:f5:5a:5a:49:8d:5a:b7:01:06:02:18:4f:11:b6:0a:2e:a3:
e2:bf:f0:02:6b:b8:33:e4:07:33:d2:55:90:3b:2c:5d:a6:99:
00:f3:c1:1e:c5:3b:19:50:0a:f6:21:dd:2d:b2:0a:f0:75:a1:
71:38:46:15:14:e5:f7:f3:9a:04:5f:b0:c7:19:75:cc:9a:dd:
09:a2:d2:6e:cb:8f:34:04:4b:c9:4b:b4:fb:5c:99:8e:e5:8c:
7e:5b:42:48:23:31:96:96:90:48:28:15:94:57:d6:6e:a8:1c:
a8:98:8f:ca:03:14:59:af:1b:86:36:e2:11:17:1c:7b:a0:2a:
65:13:b9:15:b8:f0:73:40:96:0e:31:5b:4f:72:e3:14:24:ef:
8b:c9:42:5d:40:d1:76:ac:3c:d0:dd:7e:2a:37:9b:e8:f7:f9:
09:53:45:23:f6:83:ac:12:f9:1e:17:4b:2e:88:6c:f2:50:e0:
49:9c:82:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:52:57 2026 by rpki-client