
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e45166a-a84b-42e6-b47a-83a9bfdb0639.roa
File: 8e45166a-a84b-42e6-b47a-83a9bfdb0639.roa (raw, json)
Hash identifier: OshSfi9KmTjDTo91LHaCMTBLzllZXKqJGkVQKRwDeYM=
Subject key identifier: AB:78:78:C5:A1:62:20:96:54:55:D4:03:E1:DB:47:DC:8D:32:22:CD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 07137078E30F98386EC6EAE7C16F6EC36EB2E346
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e45166a-a84b-42e6-b47a-83a9bfdb0639.roa
Signing time: Mon 18 May 2026 00:00:13 +0000
ROA not before: Mon 18 May 2026 00:00:13 +0000
ROA not after: Sun 16 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:13:70:78:e3:0f:98:38:6e:c6:ea:e7:c1:6f:6e:c3:6e:b2:e3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 18 00:00:13 2026 GMT
Not After : Aug 16 23:59:59 2026 GMT
Subject: serialNumber=5d597e9028346269a076797c9779449fea3be74790e16ccf8361d9abf60f80ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:e7:2c:a8:f4:a6:47:ec:65:06:e6:9a:85:
c2:3c:3e:17:1d:13:0d:f9:fc:68:76:2e:95:79:07:
7a:02:6b:20:19:34:32:a1:ad:75:d9:8a:39:a5:80:
22:a8:c5:6c:57:b3:3c:8e:d3:c1:c5:f4:a7:90:83:
9d:4d:cc:16:0a:8d:73:ba:a6:c7:8e:fb:31:72:46:
55:a4:ad:36:ac:ff:f9:0e:1d:30:90:cc:0e:af:79:
bc:38:8e:d9:ab:0f:5d:93:6a:df:0a:45:37:52:df:
fe:68:02:a9:49:eb:69:a2:ab:20:0f:c4:2d:43:cf:
ca:ff:94:c2:8c:38:22:44:aa:f2:80:d7:04:59:7d:
fd:89:70:0b:6c:00:f0:f3:6d:64:be:db:e8:c2:11:
05:c3:d8:1f:88:55:46:62:b1:40:92:4e:bb:8f:11:
6b:2f:71:cd:f4:65:52:53:69:de:4c:1b:6b:fd:b9:
06:c2:7b:b6:07:9b:8e:cf:a1:ce:da:87:10:dc:29:
d7:e9:e3:0f:69:cc:4b:4f:60:16:e6:d1:7c:60:68:
1c:e6:88:b3:61:6e:87:64:32:41:0a:b0:9b:20:40:
5e:5d:18:b9:23:df:00:3e:91:cf:a9:bc:f5:e9:07:
97:b5:25:86:b4:b4:09:39:66:cb:42:9a:a4:21:29:
72:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:78:78:C5:A1:62:20:96:54:55:D4:03:E1:DB:47:DC:8D:32:22:CD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8e45166a-a84b-42e6-b47a-83a9bfdb0639.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.48.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:6b:9b:ec:a5:97:74:f1:b4:a5:03:77:f2:40:04:fe:b7:80:
05:18:10:fa:d5:b6:82:20:5a:ce:59:8c:49:dc:5d:43:d0:be:
6e:35:e5:ac:35:cf:9d:b3:f9:17:f0:1b:ef:fe:aa:ac:36:8b:
5c:f5:7f:7e:d6:8e:9a:a3:d8:fa:cf:c0:4c:82:0c:83:fd:83:
30:ba:8a:0b:c8:7b:fc:b8:18:4e:82:cc:f4:73:ee:fd:0c:c6:
32:a2:95:d2:03:14:9b:97:b1:60:3a:21:59:0d:1a:90:74:31:
8b:11:ca:4c:71:e3:44:ae:5b:dd:92:79:92:7f:61:b3:09:d7:
30:4f:8c:08:84:c5:9b:df:dc:4e:cb:51:3a:03:df:57:5a:72:
b2:f8:be:9f:05:e1:2e:8b:80:e3:a4:9e:64:ec:12:5e:7f:b4:
76:7f:3d:27:43:c7:a5:92:ad:03:05:5a:46:0d:b8:99:8b:60:
31:c1:ef:8b:b7:63:30:f7:cb:3d:bc:35:98:c4:8c:cc:48:df:
68:92:c4:07:32:9d:16:b9:b6:bd:5c:4b:7c:8e:9f:2b:42:b1:
f6:13:ef:4a:84:e2:69:37:27:4f:79:72:0d:26:6a:02:cc:9d:
dc:be:b8:ca:38:65:c0:bb:0c:8a:0d:04:fe:43:66:38:12:c8:
66:60:47:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:04:44 2026 by rpki-client