
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d27659a-99b8-4f12-8e10-81c7bc2cf7bf.roa
File: 8d27659a-99b8-4f12-8e10-81c7bc2cf7bf.roa (raw, json)
Hash identifier: CriQdG21l1qtZlGdbMw9kOuLVxtOSg1ofCkIscn+RhY=
Subject key identifier: F2:0C:A2:31:98:9A:2E:28:C2:52:A8:37:16:84:57:E4:C1:2F:38:AE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 25BFA664D14A94BB71C959CAB1BE191A20EA1734
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d27659a-99b8-4f12-8e10-81c7bc2cf7bf.roa
Signing time: Sat 16 May 2026 01:21:01 +0000
ROA not before: Sat 16 May 2026 01:21:01 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.22.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:bf:a6:64:d1:4a:94:bb:71:c9:59:ca:b1:be:19:1a:20:ea:17:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 01:21:01 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=4c4e67e9d335c3f74ded4ea2ce6cba0dee9d68c0b3121c3855b2f3f96e4076c3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:7c:2d:fb:f6:6d:2c:31:55:01:a0:2d:74:
f5:fa:88:b3:95:2a:87:ed:00:08:12:1e:a0:6a:96:
91:7d:ef:3b:df:61:81:a6:f1:89:ee:07:84:c1:7d:
2b:54:8e:25:e7:f3:5e:73:f2:48:0d:cf:d4:64:11:
0f:3c:f0:ef:c0:0f:78:9e:61:7a:a6:8b:7d:0b:fc:
7b:ca:77:50:d0:85:8f:d6:82:9d:e2:3e:6b:68:ba:
08:82:03:a2:88:de:ae:de:9b:ce:98:40:28:8f:ce:
29:d8:3e:f3:dd:a5:00:89:6b:b8:41:00:b2:f3:55:
17:8e:65:65:d1:70:1c:dc:30:54:40:2b:00:01:6b:
d5:1c:30:35:bd:3f:d7:b3:a6:10:50:93:49:7a:81:
a7:e0:86:7c:12:12:27:dc:84:4c:23:04:b8:23:34:
75:b8:02:5d:4a:43:96:d0:09:fe:71:a9:b1:cb:38:
64:4a:f7:a1:59:f5:7e:91:59:2a:31:73:b1:f3:f7:
8a:ea:3d:85:ec:de:bc:07:d0:58:c8:21:21:b2:48:
d2:6a:f6:84:23:df:b2:89:ea:c0:4d:78:af:2f:0f:
55:41:db:94:22:8c:5d:69:06:8d:14:30:c3:35:c0:
80:a3:4b:f0:b6:3b:f5:49:c3:e5:bc:04:75:48:a2:
35:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0C:A2:31:98:9A:2E:28:C2:52:A8:37:16:84:57:E4:C1:2F:38:AE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d27659a-99b8-4f12-8e10-81c7bc2cf7bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.22.64.0/21
Signature Algorithm: sha256WithRSAEncryption
d5:27:3e:c9:02:e7:6c:62:19:52:b3:3e:73:48:fd:3f:b9:a7:
d8:57:7a:f5:65:14:85:f8:9a:1b:80:b8:84:2f:21:6d:88:9d:
65:0a:fa:77:87:1e:13:fa:7c:5a:e9:6c:22:25:b6:fd:5d:70:
90:c4:ae:b6:56:ce:fc:0b:1f:f6:3f:7e:a7:10:9a:63:cf:c9:
39:5e:b1:e7:3d:d3:23:7c:ec:3a:f8:8f:af:48:7e:14:ea:c3:
e0:11:52:85:a6:2f:40:25:28:2d:56:dd:f9:4a:cd:b3:32:59:
d1:af:b6:f2:4a:96:f4:a9:c2:a2:84:15:e6:33:da:12:41:f7:
dc:b4:30:c7:65:82:d3:a5:d0:00:57:2a:0b:ff:15:c6:bc:ea:
3e:dc:22:61:71:35:f5:b4:78:cf:f6:96:a8:69:6b:5b:de:94:
df:c2:f8:ea:8c:9d:00:86:88:2f:72:6c:82:ce:35:53:7d:02:
22:0a:aa:f4:7d:bf:f6:fc:e3:f3:36:73:e8:83:fc:38:44:b2:
6d:7b:f1:85:57:4a:39:c6:1a:92:9c:f4:54:5d:46:da:97:31:
82:c5:b4:20:3a:de:41:68:5e:b2:e5:d0:65:49:b6:e1:a7:22:
0b:0f:50:48:09:3e:36:4d:e8:7f:d5:0c:40:14:6c:e0:5f:d7:
47:28:dc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:58:20 2026 by rpki-client