
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/356faa82-a0da-4902-ac5d-0346855caaf1.roa
File: 356faa82-a0da-4902-ac5d-0346855caaf1.roa (raw, json)
Hash identifier: VYAxKPB1lyj0hkD8MyzwII+6REZBs5VuRXxm6fdDPrk=
Subject key identifier: DC:33:28:9D:45:4F:5E:A5:C8:5A:B2:33:E4:C4:C9:C3:71:DF:14:E4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 395B5331EBCF151FF9144BC5FA19F50B1F8FE6B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/356faa82-a0da-4902-ac5d-0346855caaf1.roa
Signing time: Sat 16 May 2026 02:21:45 +0000
ROA not before: Sat 16 May 2026 02:21:45 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.60.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:5b:53:31:eb:cf:15:1f:f9:14:4b:c5:fa:19:f5:0b:1f:8f:e6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 02:21:45 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=07358c0b83bf8b1e7078777fe40e52304c823cc5535d1e885ab51c22c5562254, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:ed:e9:93:4a:7e:f6:b3:2a:e3:8d:79:7d:
e1:9c:65:96:e8:3f:e2:bc:37:c1:77:47:5a:78:51:
19:85:bd:01:3a:98:bb:9a:92:76:bf:f7:13:8c:4b:
d4:08:39:c6:9f:2b:b2:9e:09:5c:93:42:a0:c4:e6:
82:5b:d9:33:a3:a5:30:e0:9f:5e:bd:b1:13:75:3b:
b8:08:b0:30:84:11:be:c0:cc:b3:71:2c:ef:da:9d:
db:b5:6e:18:e7:2b:13:d3:21:a9:0e:a1:f9:0f:a3:
b3:ad:96:5c:0a:ed:7a:1e:b8:d9:fd:95:ec:b2:46:
fb:9b:43:be:c3:cc:ea:96:dc:d7:a6:b0:d6:13:9c:
82:41:25:b2:0a:25:cc:a8:5a:50:ba:05:6f:05:eb:
1b:72:39:03:80:5a:2e:2f:6d:bf:d3:6c:f5:3a:6d:
1f:4a:d9:8f:cb:6e:8e:b9:dc:b9:3f:84:96:c2:38:
f5:96:1b:f6:73:40:14:ae:27:26:b5:e4:b1:fc:a6:
9c:61:8f:e7:3b:31:4a:32:1e:43:bf:ae:c6:a9:c2:
41:9b:fe:d3:6c:d2:16:1b:39:4f:dc:d6:3d:9d:22:
82:3e:03:57:a1:4e:2c:94:a9:41:7c:ad:50:cd:66:
b7:fd:6c:8d:9f:8a:19:11:37:b0:76:a4:02:ff:65:
e7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:33:28:9D:45:4F:5E:A5:C8:5A:B2:33:E4:C4:C9:C3:71:DF:14:E4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/356faa82-a0da-4902-ac5d-0346855caaf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.60.0.0/15
Signature Algorithm: sha256WithRSAEncryption
3f:fd:f6:b5:c9:21:d6:3b:79:5f:ca:e0:f1:22:ec:6d:ad:eb:
81:35:7e:22:32:0b:ca:5d:e0:32:65:78:4b:1d:be:cc:ec:70:
a2:18:1b:1d:f9:e1:f3:3d:c9:63:ac:a6:8b:c4:80:9f:91:6f:
9a:02:e6:90:e1:50:dd:31:a8:f1:6b:7e:78:0d:91:05:a4:f5:
7e:e8:6d:8d:87:b3:8d:b8:99:96:66:b6:cd:a5:8b:0a:86:00:
f2:e1:af:ca:bc:63:2f:4c:0f:bf:57:c8:7b:38:59:c2:34:9a:
16:4e:ba:82:b0:ee:19:5b:b1:fd:c0:8f:74:6c:79:a7:1c:30:
87:69:a3:75:26:c2:ed:9f:8e:a8:4a:1a:a6:34:62:68:9d:16:
24:7d:2a:9a:2e:f0:ce:f0:4b:d8:03:b2:e0:15:3d:1c:82:9d:
42:53:29:08:6b:a2:43:74:be:19:6c:cf:bd:c0:89:4e:91:1b:
b2:7a:0a:b9:77:c7:04:c0:f8:72:d5:0d:61:23:bf:53:59:c9:
c9:b5:73:9d:46:d3:67:2a:62:0f:2e:a4:5b:44:aa:de:94:11:
b7:2c:7b:87:b4:1e:0d:0e:90:7a:79:f6:2f:4e:03:31:1a:9a:
9b:c9:ec:99:ef:03:e8:9e:3a:2b:a5:61:93:c3:d3:5d:6a:78:
25:38:89:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:18:25 2026 by rpki-client