
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b26e593-a13b-454a-a756-c53c7f5a7416.roa
File: 9b26e593-a13b-454a-a756-c53c7f5a7416.roa (raw, json)
Hash identifier: NM8LghVqIi1HOtL+nNiRLUrQZ5i6OjUhwKMtU68vj8E=
Subject key identifier: 4D:0F:31:FA:9D:CF:21:23:BA:01:50:6F:32:D5:55:01:BD:F8:6F:68
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 64F130263635CC00F1EEDBE691677ADBF0027920
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b26e593-a13b-454a-a756-c53c7f5a7416.roa
Signing time: Mon 27 Jul 2026 00:20:11 +0000
ROA not before: Mon 27 Jul 2026 00:20:11 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 70.42.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:f1:30:26:36:35:cc:00:f1:ee:db:e6:91:67:7a:db:f0:02:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 27 00:20:11 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=2c673fbbcd668e391ddac6c4fabb7256826ed22dac487383072d3a69f509bf9b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:52:95:32:0e:e3:af:60:e0:f5:03:6a:f3:58:
f5:b8:ee:60:1f:ec:d3:19:56:26:6b:1b:4c:a3:fd:
d2:34:f4:dd:1d:a8:a4:36:4d:0c:0f:46:19:39:d1:
9a:da:78:89:ac:5d:fb:db:0e:0e:45:02:7c:9b:1d:
57:7c:3b:08:52:35:ed:ec:9e:9a:2d:82:71:c5:8a:
39:29:e2:7c:63:bd:b2:19:2a:21:37:f9:08:6e:9c:
96:84:29:b3:36:15:89:fe:53:20:83:f5:4f:00:5d:
5e:ba:93:81:74:c2:85:96:e7:80:c9:ff:68:ae:d3:
7d:a2:84:a3:62:f2:71:c0:9e:06:3f:0b:97:a0:80:
2a:00:b8:d8:0b:97:cc:e6:46:1a:98:cb:4d:5b:38:
2d:dd:15:bd:f5:b5:04:57:1d:c8:54:fc:d9:06:12:
29:61:aa:f8:c1:4a:c5:7a:8a:2d:ad:60:84:fa:ec:
00:9f:2b:82:05:f2:90:63:1f:f1:0e:3b:0d:5e:dd:
8c:00:cf:fe:4e:fe:d9:57:f7:6c:3d:1e:e5:b8:6d:
4e:e4:41:52:27:3e:3a:03:f9:6d:58:23:4e:05:ca:
14:29:e7:ee:26:4a:fd:e1:ad:a4:ed:d6:39:ac:63:
ff:a6:7d:7e:e6:94:07:4d:54:75:e3:0b:31:1e:31:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:0F:31:FA:9D:CF:21:23:BA:01:50:6F:32:D5:55:01:BD:F8:6F:68
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b26e593-a13b-454a-a756-c53c7f5a7416.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.42.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:c7:49:c0:00:60:17:37:df:59:62:94:57:ec:6f:4b:0a:40:
cb:03:4a:ef:63:81:2a:77:25:6f:1f:cc:6a:2c:ea:73:9d:a1:
56:2f:f9:8f:81:17:d0:9b:b6:ca:0d:6d:fb:34:2f:05:b3:6c:
ad:06:6f:f9:11:a2:08:27:9a:b0:28:98:28:93:00:23:58:77:
63:31:47:2a:f0:a1:c6:ff:f7:06:c4:67:ef:b4:0a:93:5d:08:
a3:f4:bb:b9:39:54:5a:08:20:58:55:bc:89:ae:4d:53:07:b1:
65:ea:b3:95:c9:ed:4e:4c:1a:67:d3:93:e0:c0:33:19:34:b8:
ad:22:0b:00:0f:31:65:9a:c3:d4:66:99:9b:1f:fc:94:13:9f:
0d:f9:e4:2c:f9:4b:05:6c:3a:84:7d:53:40:1c:69:72:23:14:
cd:1b:7f:ce:cb:84:5d:c0:e8:f0:02:d8:cf:be:42:31:7e:42:
7d:94:66:89:2d:74:f6:d6:d7:9e:e5:8d:2a:8d:ac:05:80:c0:
3f:e1:f7:8a:a8:fa:03:9c:bd:6a:a0:1f:bf:05:fb:da:51:27:
95:21:85:ff:38:f8:51:15:c6:5e:ab:12:fb:ca:3b:63:b8:28:
50:04:ae:c8:22:db:46:4e:0f:a9:97:1f:e0:fe:22:3b:76:b0:
36:34:31:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:26:14 2026 by rpki-client