
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c9776ab-27f3-4aa0-8637-61029365e929.roa
File: 9c9776ab-27f3-4aa0-8637-61029365e929.roa (raw, json)
Hash identifier: znxibhzDAx8syUfZTMBl4u4IUGPHqx/OAlxAElXHOhc=
Subject key identifier: 3D:24:6B:3F:3C:27:F7:A9:35:F8:21:C1:97:59:BA:EC:C3:D7:74:41
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6E7EA820964065918318D206D7DCB8743DEA074E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c9776ab-27f3-4aa0-8637-61029365e929.roa
Signing time: Thu 16 Apr 2026 00:00:08 +0000
ROA not before: Thu 16 Apr 2026 00:00:08 +0000
ROA not after: Wed 15 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 199.192.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:7e:a8:20:96:40:65:91:83:18:d2:06:d7:dc:b8:74:3d:ea:07:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 16 00:00:08 2026 GMT
Not After : Jul 15 23:59:59 2026 GMT
Subject: serialNumber=9cb3b6dacf50dbc1d3ef4ec93ef6d74759da7da54d5902e91956d0cdcbfd0dc4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:1c:b6:b3:01:18:5e:1f:41:6e:3f:e2:44:
50:cd:cc:b2:d5:14:e2:0f:a5:cc:31:f5:e3:94:7f:
18:c5:ff:20:8e:b4:da:39:32:65:eb:79:01:1c:54:
1e:1f:9c:7d:92:6b:07:d3:0e:f3:3c:1a:d4:70:1e:
52:50:90:59:39:de:95:87:a5:ca:29:cf:1a:4b:2c:
8c:f8:93:a1:ff:4d:74:1d:ff:09:9b:a4:dc:49:48:
7f:fd:2f:1c:f6:e5:83:c5:4f:51:0b:74:2d:03:2a:
8b:d7:fb:05:57:18:5f:3f:be:17:e3:19:23:a9:de:
d7:ae:06:f9:64:2d:00:4e:68:96:28:d2:2a:fe:dc:
10:3f:d8:3d:25:88:ab:f6:62:84:64:7f:a9:c3:f2:
4c:29:3b:17:a6:35:f1:37:5f:1a:81:6d:78:c5:53:
64:d3:07:05:73:aa:b8:0f:42:3f:b5:bc:8f:f6:b2:
b4:67:84:96:9e:f6:a8:c5:2a:d0:81:fe:48:13:71:
2b:08:c5:d1:a7:25:4d:51:f6:d3:8e:0c:f3:97:fc:
60:f4:15:e3:ce:9b:e1:82:77:c7:25:74:9f:6e:20:
26:57:b2:36:9d:e4:4b:18:8a:b0:74:90:d5:9a:ac:
d4:3d:74:96:d3:99:8a:1a:8d:82:8c:87:16:ad:56:
5a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:6B:3F:3C:27:F7:A9:35:F8:21:C1:97:59:BA:EC:C3:D7:74:41
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c9776ab-27f3-4aa0-8637-61029365e929.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.192.72.0/21
Signature Algorithm: sha256WithRSAEncryption
ab:3c:e6:9b:fe:7d:47:3b:81:70:cc:50:64:a8:dd:35:cf:0d:
39:43:ec:00:ac:76:fe:94:eb:e1:fe:65:eb:01:07:3c:e7:04:
23:84:94:c8:4a:04:b8:e1:d4:5f:b3:25:0d:f0:7d:73:dd:d2:
63:c9:b6:4e:49:45:2a:33:a1:63:13:73:70:c5:1b:39:07:f8:
d3:ab:3f:fb:9c:e6:37:85:29:af:cc:a4:5c:ae:21:34:8d:25:
55:6c:47:4c:61:b8:f7:ff:28:a2:28:d9:a4:bf:a0:68:48:1a:
b9:25:f9:59:f4:f5:ea:06:ba:29:5a:b8:4f:fc:ae:17:98:71:
64:43:f1:55:eb:01:ea:2d:55:21:78:9e:46:65:42:1d:05:ad:
6f:4c:ef:7e:80:e2:d2:36:69:70:36:5c:08:47:3e:f0:29:58:
62:f5:a9:c5:4e:35:10:05:4e:3b:92:fc:2e:64:2a:d8:ca:ce:
da:4f:c7:a7:63:de:0a:b8:f0:de:28:fd:3e:a3:51:d9:95:a4:
29:f4:e8:c9:e7:02:25:aa:37:8e:41:3a:cf:d1:f7:de:19:e9:
78:02:67:55:af:e8:c3:db:94:5f:87:3e:1f:60:9b:7a:25:66:
52:03:3e:81:f1:7b:38:ed:48:d0:f7:d9:cd:b2:1b:a9:c6:e5:
a7:33:1f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:06:28 2026 by rpki-client