
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b329dcd2-1949-46fc-8852-9e7592d53c17.roa
File: b329dcd2-1949-46fc-8852-9e7592d53c17.roa (raw, json)
Hash identifier: Nq0UYfApcdk0HK9Chbu/pzV1cr1C1qgf3Gcn1/iJmms=
Subject key identifier: F1:B1:03:A2:DC:5F:E5:EC:55:11:14:EA:FC:C7:5E:C3:6C:3B:F2:21
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1FAFCC273AAB9F5687F92B97C13AECC9B4D15761
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b329dcd2-1949-46fc-8852-9e7592d53c17.roa
Signing time: Tue 19 May 2026 00:31:25 +0000
ROA not before: Tue 19 May 2026 00:31:25 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 98.82.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:af:cc:27:3a:ab:9f:56:87:f9:2b:97:c1:3a:ec:c9:b4:d1:57:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 19 00:31:25 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=6df2bee385960384dfd1e64b703d90e1e4c9fd53915fa58d61ceba47aefeef65, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:16:1e:29:7a:fc:46:10:68:62:c2:45:fb:
67:03:8f:93:2b:2d:98:d1:c4:4d:4d:95:08:f0:31:
82:34:1d:db:bc:42:01:2e:c0:bd:7e:8b:02:5e:5d:
73:52:ae:c3:3d:8a:bc:d5:61:6d:40:63:0a:5a:02:
04:aa:6b:a0:d6:fe:7a:d4:df:cb:cc:ee:6f:02:3c:
79:c5:dc:17:6d:cd:21:66:14:1c:75:b1:4c:71:7c:
8f:3c:b7:51:4b:2d:3e:9c:61:50:e8:c8:47:45:93:
d3:ee:09:ef:0d:4a:88:3a:bd:6c:cf:c3:a9:6a:44:
92:01:37:d5:db:2f:84:e5:e5:f4:27:27:1d:70:01:
80:2c:c3:3b:c1:48:0a:d2:de:06:91:56:7e:49:06:
62:5c:34:3b:52:e1:06:8d:00:14:c0:72:5a:32:f2:
78:ed:c9:5d:a4:a7:f5:e6:53:76:9a:1d:ef:e9:71:
42:1c:cf:bd:81:29:82:cd:70:0f:91:58:10:cd:51:
14:00:06:1b:b0:f9:e9:02:70:62:18:99:e6:df:39:
68:05:b8:76:a5:59:c4:62:dd:86:ed:77:86:e8:2a:
69:d2:d5:64:71:c5:8b:66:1a:3c:2f:2b:92:d3:83:
c1:55:23:29:b5:0d:82:b1:9e:08:32:c7:85:c9:35:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B1:03:A2:DC:5F:E5:EC:55:11:14:EA:FC:C7:5E:C3:6C:3B:F2:21
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b329dcd2-1949-46fc-8852-9e7592d53c17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.82.154.0/23
Signature Algorithm: sha256WithRSAEncryption
79:3f:51:10:48:a2:ea:4c:78:b0:58:df:75:4d:ab:e9:a6:48:
b7:11:91:6c:a0:29:5f:8b:15:f1:c5:25:ec:b8:f4:f1:0a:74:
94:8e:b5:c4:da:aa:da:4d:4f:e5:7a:2f:74:83:68:30:4e:cb:
65:8c:20:da:9e:df:8e:83:a6:ca:fb:c8:af:32:af:c4:4e:06:
9c:6b:69:10:a0:50:78:9e:db:03:40:1f:b3:0f:3f:ce:0c:8e:
6a:f1:35:d8:3c:6e:a7:ac:b5:94:4b:db:2e:91:98:55:ee:ae:
c3:1e:86:4e:b7:da:2a:0d:44:06:90:5e:8e:f3:1d:e7:6b:85:
e4:7e:7c:0d:3f:4e:ba:ba:5d:d6:85:c8:9f:e4:d1:67:1a:45:
88:b9:6e:48:dd:ea:99:5d:f9:f7:67:b0:03:89:ba:ad:e5:11:
62:b2:57:03:8f:48:15:83:6f:51:aa:79:dc:91:1a:7c:d1:32:
74:f0:ce:5b:ba:64:24:7b:43:51:74:64:21:8f:a7:1a:c1:2b:
e9:42:4b:b9:75:94:1c:18:61:54:02:b4:33:d8:36:75:c7:e0:
5f:78:b9:15:89:99:0b:30:7b:95:b4:4d:f1:1e:7d:41:20:94:
dd:8d:19:43:45:ad:3c:8d:44:e8:7d:b5:99:59:c4:1c:e2:7c:
f0:d5:c4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:25:14 2026 by rpki-client