
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4259c68a-93ef-43e1-9e0d-14ebf785bc7b.roa
File: 4259c68a-93ef-43e1-9e0d-14ebf785bc7b.roa (raw, json)
Hash identifier: 13rVRzigxcxm9NVYK8pALCWcQSK+aD8GMNGK5lGYhp8=
Subject key identifier: CD:5B:19:0C:AA:A9:57:67:C2:00:DB:AE:5E:B3:53:91:8D:39:9B:E2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3CE6C6A065C7AAE04DEBBC5BDAC53ACFE8B8BC4B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4259c68a-93ef-43e1-9e0d-14ebf785bc7b.roa
Signing time: Mon 27 Jul 2026 00:10:09 +0000
ROA not before: Mon 27 Jul 2026 00:10:09 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 64.95.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e6:c6:a0:65:c7:aa:e0:4d:eb:bc:5b:da:c5:3a:cf:e8:b8:bc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 27 00:10:09 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=be0d18ebf577ddc67f6c7302fe5c3b8a178acaf3b10c9baffda05146081ba953, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:38:d1:29:4b:33:d5:3f:94:d3:14:e4:2c:
09:d0:df:91:50:c2:cd:b6:94:d8:db:83:32:9f:b2:
9d:e4:af:eb:7f:01:0a:b2:d9:2f:d2:5a:34:bd:51:
bd:dc:c7:51:24:ee:63:ac:1c:bb:30:6b:91:d9:af:
83:db:22:2c:61:5c:1f:97:06:47:f4:3c:47:69:ae:
1b:0e:d7:bf:36:5c:fb:8c:c8:c1:3a:f5:9a:6a:af:
89:77:25:4a:34:32:41:97:15:9b:59:8e:85:6e:4b:
98:8c:dd:50:48:f3:ed:c4:cd:28:37:13:1c:58:3c:
b5:b1:fa:b7:d0:0d:97:31:da:f5:89:b4:54:78:4b:
d1:60:0f:6b:7b:26:d2:37:56:6f:89:91:a2:73:90:
e1:2e:1d:25:37:0c:c3:35:25:24:a5:82:97:c6:66:
71:93:ed:45:e2:6f:fd:ad:9e:93:79:19:dd:d7:04:
b7:39:a6:21:ad:2b:eb:a2:f1:9b:f3:c5:76:59:68:
6a:3b:52:cb:04:41:6a:83:23:c4:d3:63:d2:23:2d:
87:48:38:69:ae:6b:45:61:82:4c:5e:08:39:b3:e7:
19:c1:e9:4b:d9:1d:1c:26:7f:a2:cf:35:9a:0f:0e:
c2:f4:ef:de:91:36:bb:7e:ed:37:de:5f:02:16:96:
8f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5B:19:0C:AA:A9:57:67:C2:00:DB:AE:5E:B3:53:91:8D:39:9B:E2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4259c68a-93ef-43e1-9e0d-14ebf785bc7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.95.212.0/22
Signature Algorithm: sha256WithRSAEncryption
91:03:14:db:93:d9:e7:65:c8:f9:af:5a:53:58:bd:c2:b7:32:
43:0b:89:4c:e5:17:3b:d2:b5:58:58:5e:27:e6:b6:b6:de:17:
9c:cf:c3:97:9b:3e:25:be:3f:81:c3:4f:9a:43:04:66:6b:60:
1f:16:d6:92:ac:b5:53:0e:fa:c2:af:5d:94:5f:dd:25:90:6a:
7a:d2:f8:4b:99:47:1e:1d:11:62:2d:02:61:55:29:c2:5d:59:
bf:a2:6d:cb:69:f3:f0:37:4d:e0:76:e1:2d:ca:39:62:53:60:
a8:7f:91:05:30:3e:b7:3d:e9:1e:28:1d:79:50:38:e9:e8:1c:
47:78:c2:ee:3e:35:f2:27:1c:36:d8:bc:fb:92:62:ba:1c:30:
d9:0a:4d:41:50:bc:f6:d1:1a:80:58:44:97:ef:d1:f6:6b:8a:
19:cb:ff:c4:27:6b:15:d2:4b:bd:61:b3:3a:ca:08:44:20:b8:
ab:7e:00:1a:1b:7e:fa:f8:28:c4:63:76:9b:01:e7:16:b9:7c:
83:de:25:d4:ef:87:3f:13:e3:11:c2:d6:2f:f4:f6:bd:e7:94:
7a:59:48:6e:5a:4e:01:a6:3b:db:dc:4a:94:6c:be:b4:fe:2b:
39:06:bb:96:70:c3:d4:90:27:bc:44:8c:67:29:ae:36:9d:ee:
c2:53:f5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:51:13 2026 by rpki-client