
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e35a490-ebaa-45f3-96f3-fb57747ff7f7.roa
File: 0e35a490-ebaa-45f3-96f3-fb57747ff7f7.roa (raw, json)
Hash identifier: r2MkN0pBG0l+T9Zfqqem5shF3wDEiMCvoAk0ZVPVJFw=
Subject key identifier: C6:F0:58:D4:18:B5:52:A7:1D:93:5F:59:4C:C2:3F:4A:6E:89:24:88
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 77C5D4CB8B8DE45C749B4099B88CC78A95E41DE7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e35a490-ebaa-45f3-96f3-fb57747ff7f7.roa
Signing time: Mon 27 Jul 2026 00:40:58 +0000
ROA not before: Mon 27 Jul 2026 00:40:58 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 72.12.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:c5:d4:cb:8b:8d:e4:5c:74:9b:40:99:b8:8c:c7:8a:95:e4:1d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 27 00:40:58 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=e92778cf6cbeda20e235e0cc5b36ab98af1efc8857b36f6cf52b9f1401ff9421, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:fb:bb:c2:8d:7f:ad:2e:a9:6c:cb:a3:5e:
0a:92:d3:98:04:0e:6d:75:e6:cc:ba:6e:ed:55:05:
73:22:40:67:8a:d2:52:a0:c6:26:4a:50:71:6e:92:
97:88:76:a9:9b:35:14:8c:44:53:dd:af:8d:55:8b:
6c:99:ef:a5:be:b2:ed:d2:70:f5:e5:c1:12:43:aa:
8a:17:9d:23:f5:dd:a4:bf:7f:99:25:81:b5:bf:a3:
cf:c9:92:2c:5b:75:e9:48:17:da:ef:83:64:0d:04:
0d:d1:c1:0e:b8:9f:97:6b:68:5d:1b:6b:9d:72:44:
cd:ea:51:d0:9a:26:b7:59:34:09:65:0b:7e:ea:85:
b4:2b:ef:67:a1:1f:3f:3e:9a:7f:fd:0c:9f:a7:21:
6e:de:2d:0f:1b:98:42:5b:88:78:82:db:24:84:c2:
2e:f4:f3:6b:bf:5f:ce:e2:a3:37:4b:5e:8e:60:08:
7b:36:97:a2:41:43:14:c0:26:15:b0:89:2b:48:4c:
3d:59:f7:a3:61:28:0c:1b:73:9c:82:0a:46:ed:42:
8d:75:66:27:9b:e1:47:d1:94:74:4c:38:e8:ef:d0:
c7:64:ed:8d:fe:06:ba:54:5b:0a:1a:56:2e:bc:10:
f5:19:7a:04:62:2f:13:e6:c5:d6:e5:58:4b:d0:5e:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F0:58:D4:18:B5:52:A7:1D:93:5F:59:4C:C2:3F:4A:6E:89:24:88
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e35a490-ebaa-45f3-96f3-fb57747ff7f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.12.0.0/18
Signature Algorithm: sha256WithRSAEncryption
27:fa:44:10:db:ef:6c:6e:1a:93:6c:e5:b9:69:7b:ea:3f:67:
53:f6:32:e8:67:6a:b8:d1:86:7b:58:69:f4:fb:a5:b0:dd:32:
53:b0:7c:7c:18:f0:71:39:2b:cb:b5:6f:a0:89:2d:59:92:db:
bd:58:dc:31:88:81:6e:c2:07:5e:ff:94:65:11:31:a5:10:14:
fd:b4:72:25:20:d3:6e:50:8d:eb:d1:f1:42:4b:25:dd:9f:91:
10:82:52:f3:2b:7e:e4:8b:a0:31:0b:61:11:8e:6a:64:c3:71:
76:4d:e6:22:9b:85:71:7a:01:7c:ca:d0:d7:55:0b:4f:9a:14:
fa:ee:49:a9:db:c7:b1:8c:b7:97:c6:87:32:74:23:e9:86:48:
48:62:cc:0e:ab:43:de:af:3d:87:8b:00:b4:7f:fe:47:f5:50:
02:a8:05:26:28:f4:e9:52:57:0d:ec:31:b2:f5:7f:c8:84:ea:
98:41:c7:dc:e6:92:8f:ec:55:e4:48:fe:ec:81:3e:2a:2a:d2:
fc:74:ac:6b:eb:3d:af:2b:b0:66:f6:a9:73:04:fb:71:30:79:
4e:5a:58:be:c9:0f:b7:ee:04:54:d9:18:8a:14:98:2c:67:d3:
82:02:8b:ca:a5:5e:19:9d:cd:aa:44:07:af:d6:6e:3b:77:44:
c1:7c:b8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:50:20 2026 by rpki-client