
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4afba84-8d51-440d-a653-037c4b7ea55e.roa
File: d4afba84-8d51-440d-a653-037c4b7ea55e.roa (raw, json)
Hash identifier: GFUxcnGtPEHij0cfamvHx1ugByBTH/tNDbKLS89c0U8=
Subject key identifier: C5:47:D0:D3:59:3C:CA:0F:F9:5A:D7:BB:A2:3E:F9:12:59:1A:CF:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0560697280826059CB36848073F54619BB944AC5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4afba84-8d51-440d-a653-037c4b7ea55e.roa
Signing time: Sat 25 Jul 2026 00:00:11 +0000
ROA not before: Sat 25 Jul 2026 00:00:11 +0000
ROA not after: Fri 23 Oct 2026 23:59:59 +0000
asID: 8987
IP address blocks: 99.151.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:60:69:72:80:82:60:59:cb:36:84:80:73:f5:46:19:bb:94:4a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 25 00:00:11 2026 GMT
Not After : Oct 23 23:59:59 2026 GMT
Subject: serialNumber=e711f467b5056374b659c04ea8512faa294253ffe7193879d3a36e21256482a2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:14:ee:11:f5:16:3b:45:dc:17:34:a6:f9:42:
64:50:2d:65:b4:7c:d3:5e:4e:02:73:35:91:ca:48:
59:a5:92:83:2d:97:e8:58:98:40:38:d3:61:09:3c:
83:41:dd:62:fa:b9:a7:9e:2d:6b:e3:ca:89:9b:11:
bf:27:75:3c:8e:5f:85:b8:02:b5:40:f1:3c:30:d0:
11:1c:68:e9:d2:03:45:d2:89:39:69:b3:af:07:22:
85:e1:d5:d9:0f:7f:84:45:88:0f:c0:85:c2:ac:56:
37:fe:c0:36:38:46:32:9b:13:b9:ae:85:32:c1:ca:
c0:81:d2:f3:61:c8:65:56:f3:d0:b6:b2:73:e5:16:
41:3b:7a:6e:65:d7:cc:9a:c1:ad:c2:63:b8:35:82:
0e:3e:47:7e:50:b2:53:f4:25:07:ef:6f:ed:db:0a:
55:6f:b8:43:ab:65:f3:3e:02:34:13:f7:a5:d3:f8:
4e:9f:9e:56:66:0e:2a:9c:55:34:91:01:3d:42:95:
7f:29:b3:1d:8f:f6:87:f5:30:33:c2:b2:83:68:54:
62:4e:e6:c7:04:6a:04:10:e9:67:4e:78:e3:fb:4c:
bb:c4:bd:d8:b5:81:43:af:6f:b7:fd:82:8b:60:62:
d0:bb:bb:54:20:a4:3c:34:ff:11:55:42:d7:72:de:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:47:D0:D3:59:3C:CA:0F:F9:5A:D7:BB:A2:3E:F9:12:59:1A:CF:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4afba84-8d51-440d-a653-037c4b7ea55e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.96.0/21
Signature Algorithm: sha256WithRSAEncryption
48:b5:b0:5d:00:20:ff:21:bd:2d:4c:13:36:cb:34:a9:90:47:
3c:3e:d0:13:2a:3e:01:d9:5e:3d:4f:42:6a:65:87:0e:84:10:
fe:19:9c:84:51:5b:27:93:63:0f:b0:fb:04:14:2e:eb:c3:d6:
c8:d5:50:d2:1b:ea:b8:76:43:cc:52:42:57:69:59:67:9b:ae:
5b:c6:68:bb:60:fa:d8:59:72:18:ae:c3:f8:5d:bb:56:d6:fa:
e5:a0:c1:a8:58:da:b7:e2:a0:19:af:ae:1d:44:df:dd:e8:a9:
22:db:55:b5:1f:e9:1e:32:c9:e5:b9:6d:86:1a:d6:6d:6c:34:
53:2e:0c:91:cb:96:11:40:a0:da:8d:06:6c:31:5c:dd:f2:d3:
6e:03:31:02:cc:2c:e3:f6:d2:df:71:bc:08:f1:85:87:88:9f:
10:7b:02:b3:2f:fb:67:1b:10:05:9e:07:fd:34:d3:0b:c2:e9:
f2:c9:f4:11:af:d5:ff:e3:c6:bb:7e:e1:15:bb:46:c2:88:f1:
8a:8f:63:25:7e:f8:7f:2d:7f:ee:81:c5:5b:d4:47:39:8f:bb:
11:c7:fa:9d:df:bf:20:66:c0:30:41:a9:b4:db:63:c2:14:75:
b3:79:16:ba:c1:3c:b0:34:a6:a5:24:f5:d1:cb:a7:ec:7e:22:
57:99:c8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:26:18 2026 by rpki-client