
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ee3c33e-f615-4726-bf4a-6cbf742e3b29.roa
File: 1ee3c33e-f615-4726-bf4a-6cbf742e3b29.roa (raw, json)
Hash identifier: OXcGSAPT+skwOpHZ1JLWUII12XvtWYA5LweghTmdwzQ=
Subject key identifier: 43:8D:4C:C4:52:95:7E:D0:19:7C:5F:DF:57:6C:7C:A6:20:6E:73:CC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 19B9A5CAEBD9F9F7190A27E791E319888AD0FD7B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ee3c33e-f615-4726-bf4a-6cbf742e3b29.roa
Signing time: Wed 20 May 2026 00:20:50 +0000
ROA not before: Wed 20 May 2026 00:20:50 +0000
ROA not after: Tue 18 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.54.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:b9:a5:ca:eb:d9:f9:f7:19:0a:27:e7:91:e3:19:88:8a:d0:fd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 20 00:20:50 2026 GMT
Not After : Aug 18 23:59:59 2026 GMT
Subject: serialNumber=f17655a4283c3005a52e6934a68c3165abc584ca8093789bfc1d2514631a211f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:b7:1c:25:a2:ab:67:15:fe:72:ac:40:b9:
d5:36:61:7d:dc:65:78:9e:21:64:c0:f5:45:8b:80:
6f:b5:05:64:37:b1:bc:6c:97:cb:39:cb:53:98:32:
4f:be:47:79:9f:4d:5d:de:d3:a3:4a:85:65:8b:7a:
41:3d:1e:ac:a1:f5:57:2a:1c:02:c0:69:f1:c5:eb:
0a:db:ca:88:50:22:51:a8:8e:0c:30:95:d4:15:b3:
d1:cf:15:57:0f:cb:41:51:f4:c3:96:50:4a:31:71:
08:ff:27:36:48:0b:f7:cf:08:cc:52:a6:54:6a:35:
aa:ea:1d:10:cf:e1:bf:1f:b1:3a:4c:6f:0d:05:e6:
29:36:18:09:97:43:7b:94:10:46:83:55:66:1e:0c:
8c:af:f0:86:ba:af:cd:4e:fd:e1:ec:59:ab:35:20:
b2:06:e1:28:8c:09:f1:f5:3f:c9:bd:ec:72:d7:85:
d1:98:c2:13:84:f8:09:0e:34:68:76:34:1b:9f:71:
98:00:47:b9:25:77:f3:8c:65:39:c7:ff:8c:0a:71:
54:dd:47:79:70:24:d2:35:b2:c6:ff:a2:d6:a7:1a:
5b:8e:70:79:b7:34:83:70:ca:60:98:84:4e:e4:d5:
0d:db:85:72:d7:53:6f:59:f5:6e:ee:8d:83:27:bf:
56:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8D:4C:C4:52:95:7E:D0:19:7C:5F:DF:57:6C:7C:A6:20:6E:73:CC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ee3c33e-f615-4726-bf4a-6cbf742e3b29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.61.0/24
Signature Algorithm: sha256WithRSAEncryption
35:30:ad:f0:60:cd:40:b3:05:20:3f:06:65:55:df:07:8d:28:
13:1c:3c:dc:ad:a2:d0:9e:cf:12:a0:90:f2:02:52:43:5a:3a:
67:bb:58:e8:16:79:be:11:aa:75:a0:63:ce:d4:19:66:f7:74:
61:3d:ee:56:58:98:5e:d6:de:1e:2f:6f:7f:93:18:dd:35:88:
dd:cc:3d:63:4c:86:4c:9d:bb:e8:ff:79:eb:78:5a:c9:dd:13:
50:a8:d9:e1:2c:e8:88:22:1a:c5:e3:e3:fa:4c:8e:84:02:61:
ba:50:5d:56:da:a1:9d:1b:cc:0d:16:0b:fc:04:9a:9c:d6:ff:
b1:97:8a:59:e4:e9:d4:04:7e:a7:a4:13:0b:af:26:08:66:55:
4e:dd:12:fb:a2:f6:ca:23:20:09:2f:1d:77:aa:ce:e1:1d:f6:
34:77:99:5c:ab:e8:0c:05:c1:67:71:fa:7c:09:3c:7a:d9:14:
8a:08:5e:76:33:60:70:c7:39:b4:c5:f1:e1:fc:e1:52:6d:d7:
8b:1e:1d:00:51:ae:b3:8e:a7:0d:67:1f:1f:bc:2a:4f:7c:51:
3f:57:ff:2a:8b:c4:a6:e5:8e:35:46:8f:5e:70:35:e5:cf:0f:
89:cc:d8:ae:d1:c3:fc:11:fe:f7:6d:22:31:96:58:f5:12:7f:
5c:63:b6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:51:03 2026 by rpki-client