
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7695f205-b82a-41b0-9ce0-f6b8c80f8d09.roa
File: 7695f205-b82a-41b0-9ce0-f6b8c80f8d09.roa (raw, json)
Hash identifier: U0wSnMkbzewlfXxmMN0arOymsgXDTedfjsG+XnP3Qd4=
Subject key identifier: E4:8D:CF:30:99:C8:FE:89:0E:DC:BF:C6:77:E0:63:FE:E4:17:BF:FA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2A09936D6C47E9D993804699C315B0CCE08593F5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7695f205-b82a-41b0-9ce0-f6b8c80f8d09.roa
Signing time: Fri 03 Apr 2026 20:51:48 +0000
ROA not before: Fri 03 Apr 2026 20:51:48 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 207.94.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:09:93:6d:6c:47:e9:d9:93:80:46:99:c3:15:b0:cc:e0:85:93:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 3 20:51:48 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=e5629c7bd2e3d04c749a444d7211b9c16c08850fd2b6a2f2c899a564c30c50ce, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:72:fd:64:b4:3d:32:2c:1f:e0:fb:0e:92:99:
10:a2:8e:1b:a9:2d:e5:46:e9:5e:ca:1a:d3:f5:f7:
70:94:00:fb:a5:44:94:9b:62:0e:7d:4f:48:29:1b:
e4:d4:e0:2c:2e:79:cf:e4:37:d4:73:ba:4f:35:c9:
7a:d1:1c:c1:30:fa:35:ef:8e:e4:31:11:61:96:85:
d7:8a:44:e0:22:e0:ff:7a:38:86:60:97:88:cd:b9:
71:0f:d8:d7:57:7a:76:74:ec:ac:09:a3:ac:47:08:
02:7e:38:89:90:5a:98:85:6d:73:1e:96:3f:e4:c7:
c1:17:12:67:b4:8b:50:77:cc:c8:55:55:18:cd:9c:
d0:92:20:45:13:9d:8d:14:92:36:95:fd:01:1c:70:
6f:a5:84:09:7f:68:24:5d:14:41:5f:2c:c6:02:d3:
d3:40:aa:34:cb:de:26:d3:7a:75:f8:8f:f6:ba:fa:
49:e6:01:ab:72:20:c2:4f:39:44:eb:0e:f1:3b:33:
c9:a6:c7:1b:59:e6:8d:4b:7b:c4:c4:a4:2b:77:a9:
40:2c:8a:2c:9a:68:91:85:b8:b0:a1:2f:ec:3f:37:
0a:7e:72:2d:00:55:b6:d7:f1:02:34:38:c6:0b:c6:
28:26:82:68:cd:10:e6:3b:e2:c0:3a:64:1b:30:77:
7b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8D:CF:30:99:C8:FE:89:0E:DC:BF:C6:77:E0:63:FE:E4:17:BF:FA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7695f205-b82a-41b0-9ce0-f6b8c80f8d09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.94.128.0/20
Signature Algorithm: sha256WithRSAEncryption
ce:43:9c:8c:fe:a4:ff:d1:71:5a:8d:eb:38:46:e8:3f:ca:c2:
e8:ae:a1:04:f2:3e:fe:1c:da:97:4a:e4:ca:4b:47:fe:ba:19:
a3:24:65:62:c4:b2:6f:62:0d:58:12:ef:96:7b:e5:64:e4:5a:
24:cc:a4:20:07:bb:aa:c7:cd:ed:f0:a0:0a:fa:c7:39:81:e9:
7a:e6:92:27:ee:d0:90:8c:a2:f5:d2:27:e0:96:63:7b:59:a7:
cf:42:ad:e0:68:77:64:4d:b9:ca:80:44:37:9d:33:d0:35:f9:
d7:88:6e:25:7b:51:ac:f8:86:ce:aa:fa:fb:b4:79:cd:9f:a4:
0f:93:6b:c1:db:bd:77:4e:ec:9a:7c:e3:90:9e:ae:0f:e1:48:
7b:c3:09:bd:72:97:f7:6e:47:5e:b9:fd:ca:05:48:b8:a2:f5:
31:b8:73:c9:a6:5a:38:05:ad:06:76:10:ad:27:c5:22:53:7f:
c3:42:66:59:97:3a:b4:f1:8b:6a:11:bb:92:f3:13:3a:7b:2d:
35:bc:d3:1c:81:29:70:74:40:3c:ee:a1:28:e3:7b:70:b0:c4:
71:5b:98:8a:47:74:3c:3f:92:dc:4d:e9:56:ff:c5:a7:14:cc:
87:c4:79:22:1e:b7:64:e5:fe:42:b3:29:5b:9e:b2:eb:c2:f8:
5b:5b:c7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:33:25 2026 by rpki-client