
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78ee870b-8fb8-4c20-8f73-3a85b8e383e5.roa
File: 78ee870b-8fb8-4c20-8f73-3a85b8e383e5.roa (raw, json)
Hash identifier: mXJqIy2eQ0pik9/dR0Og5t94XKu/8bXHMW0sK7J6ySc=
Subject key identifier: 3C:9A:44:C7:90:33:7D:E8:EB:03:94:82:D9:8E:F5:AF:74:73:47:73
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4184D6FFE4C63FDB8A028A1A5CB2605B2BB9FAF5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78ee870b-8fb8-4c20-8f73-3a85b8e383e5.roa
Signing time: Sat 16 May 2026 01:20:29 +0000
ROA not before: Sat 16 May 2026 01:20:29 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 40.192.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:84:d6:ff:e4:c6:3f:db:8a:02:8a:1a:5c:b2:60:5b:2b:b9:fa:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 01:20:29 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=46fa3ddae4d128b2ebcc828fe6b8e8a831bb4bdb4dec6ba79b606585b48dd612, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:4d:d5:66:39:c5:08:18:51:1d:b6:b2:d1:eb:
aa:67:f2:ce:d9:b6:6b:63:b8:fa:c6:fa:31:a6:3f:
0a:e6:26:dd:79:8a:3b:1c:ca:6f:ec:d9:b9:94:ae:
dc:8f:46:3c:ac:3b:ed:e9:52:13:e6:80:5e:ec:24:
4e:ad:65:3f:9a:20:ae:86:46:51:34:bc:27:82:53:
ec:5d:e2:1f:27:e9:f1:78:f3:66:40:cc:91:aa:44:
56:3c:c0:e7:77:e1:ce:af:56:73:33:44:cc:12:90:
49:ad:bb:7e:d9:44:c9:ab:cf:66:10:16:6f:2b:f6:
54:60:97:31:f1:a3:cf:c8:f1:48:d5:77:c8:d6:b0:
ea:9e:8a:a2:21:54:63:cc:43:0b:c1:d1:a0:e4:9b:
38:45:46:37:1a:50:47:3e:01:50:71:8b:b7:43:02:
82:3b:22:ec:2a:24:72:90:3b:bf:8f:65:f4:2f:bc:
c3:45:e4:26:be:1d:70:b9:3a:3e:66:aa:54:8b:d4:
42:ab:03:9d:62:ef:cd:20:3a:6a:6e:b2:78:ce:0e:
dc:9e:4c:3b:37:40:bc:68:74:a2:c9:07:f4:87:6d:
53:31:77:b5:49:9d:13:e5:27:4c:49:c1:b0:df:ba:
6e:46:e3:59:06:bb:f3:a5:40:0c:c0:b6:2b:88:73:
86:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9A:44:C7:90:33:7D:E8:EB:03:94:82:D9:8E:F5:AF:74:73:47:73
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78ee870b-8fb8-4c20-8f73-3a85b8e383e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.192.0.0/17
Signature Algorithm: sha256WithRSAEncryption
d5:ff:fb:b3:f4:cd:88:78:98:f4:89:52:46:5a:48:6b:1c:53:
2f:81:36:66:99:f1:66:b6:ec:81:42:48:2a:79:e6:bf:3e:a3:
ce:71:1d:4e:43:ba:31:90:71:cd:ac:66:d4:52:a1:85:0c:f2:
09:e1:58:3e:72:c8:f6:88:09:00:07:ca:d2:bf:56:ed:e7:6c:
43:1b:5c:69:b4:71:f1:a7:86:e1:97:1e:51:e4:38:5e:61:21:
eb:43:ed:89:6d:6b:86:f6:2a:b6:69:ee:fb:86:26:0b:17:c5:
82:c5:35:ff:34:99:22:a9:b5:91:e6:43:3c:69:ab:7b:e1:ae:
c1:4a:82:8f:cf:c7:1d:a3:6e:0c:71:8c:50:41:ca:3a:9b:eb:
f1:e5:1a:05:be:fe:31:67:6f:c1:45:05:0b:0c:bd:49:aa:8e:
11:9b:f8:32:15:3a:8a:91:b5:e5:a4:08:21:ee:c2:89:59:98:
70:a1:28:df:a7:67:a7:99:e7:fd:23:99:0f:c2:cb:ce:ef:25:
99:bc:d1:0a:5f:2c:da:76:75:b0:5f:44:78:80:1d:58:5a:52:
6c:df:cc:2f:99:89:cc:3d:30:28:80:19:fb:0e:55:95:9b:8f:
d2:07:b4:34:38:ed:45:4b:66:48:d2:d8:9d:3e:ea:4f:39:5b:
ef:a5:e9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:49:23 2026 by rpki-client