
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db463fe4-9f42-45f1-9854-14a5c2057405.roa
File: db463fe4-9f42-45f1-9854-14a5c2057405.roa (raw, json)
Hash identifier: 3HuW3JIjJFzf+edCH33zXC/rrerNGMaj9TeicqSLl3Y=
Subject key identifier: 1B:9B:D6:C3:0E:12:17:04:29:EE:08:2F:44:8F:26:2F:3E:44:50:E9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B76E63249FAFD5875C6F15C2F0B342C4C32C604
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db463fe4-9f42-45f1-9854-14a5c2057405.roa
Signing time: Tue 19 May 2026 00:11:03 +0000
ROA not before: Tue 19 May 2026 00:11:03 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 146.167.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:76:e6:32:49:fa:fd:58:75:c6:f1:5c:2f:0b:34:2c:4c:32:c6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 19 00:11:03 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=898f3402398396225e0bf9091f1a4dbee6302cbcba1043f3a0becf69b586cbd3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:fd:a4:09:f9:cb:b4:4c:c1:51:4c:f7:6c:
2b:74:15:19:aa:3f:04:94:2a:ec:f0:3a:96:de:c2:
db:46:4f:12:6f:4a:35:72:76:26:f2:dd:aa:1b:10:
13:39:25:5d:e3:52:4e:b4:23:c4:1f:0f:76:e9:95:
70:4e:33:0c:3c:e9:ec:9f:f1:10:b2:17:5c:ec:c6:
f1:58:84:9e:a3:13:51:5c:c1:63:6a:02:95:0c:ea:
46:3b:ce:94:13:e6:b2:28:7c:82:e8:be:28:97:21:
5f:be:55:c6:cb:88:c5:20:dd:3f:53:b5:46:db:c5:
66:d4:29:c7:64:16:79:ef:93:87:de:c7:f7:bd:cc:
c4:d7:f7:93:82:5c:ef:3c:4e:3f:86:4b:7c:55:d3:
61:24:66:e4:27:78:9f:81:93:f0:ae:f6:4d:30:31:
e5:de:29:73:09:8f:ae:1a:84:78:2b:0f:69:f0:bf:
57:7e:ae:19:54:27:bd:36:f5:e7:92:27:10:67:b8:
59:70:c6:ec:44:fc:48:ea:65:bc:31:b1:e5:b0:a8:
b9:27:03:41:40:0b:03:0a:e6:40:ba:30:27:82:c9:
d9:2c:fe:28:20:c2:41:90:ad:47:1b:f9:6a:23:ac:
cf:9c:94:92:34:4c:7f:85:40:e8:50:d7:cc:6b:11:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9B:D6:C3:0E:12:17:04:29:EE:08:2F:44:8F:26:2F:3E:44:50:E9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/db463fe4-9f42-45f1-9854-14a5c2057405.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c6:07:53:be:63:b9:01:73:95:50:f1:94:e5:2f:1b:c4:5a:67:
9f:01:65:bb:f6:41:58:e6:8a:df:18:81:5b:21:43:03:ae:1d:
4b:ac:3b:41:d6:d1:0b:b2:e1:6a:21:12:2f:3d:6d:d2:04:3d:
83:21:e2:92:22:61:90:f7:70:ad:14:8f:ad:cd:37:5e:18:82:
d2:f3:58:a7:0f:97:66:5a:e6:9c:d1:76:bd:aa:65:37:26:c1:
a2:fa:fa:cd:b8:23:be:2f:7c:44:92:2a:56:fc:b0:41:70:cc:
9c:57:45:ab:43:a4:d4:59:c6:74:a1:52:7a:4e:e2:bc:d3:e7:
c6:5a:d2:bc:f9:dc:f6:6e:b1:eb:55:1b:61:b2:47:e7:3c:22:
9d:b2:92:21:b9:41:62:02:99:ca:cc:74:e7:40:77:a0:34:c9:
d8:88:cf:fb:47:42:22:1f:bb:37:98:63:4e:87:7a:c8:a0:22:
48:6c:d4:37:4e:b1:b0:19:e3:70:fe:f7:9d:99:9c:1d:4c:ae:
f9:7b:9f:dd:37:d5:c0:6e:75:02:7b:a1:88:ea:76:f2:4b:3e:
ea:4a:2f:8a:3b:7d:09:8b:09:9c:e6:32:37:aa:12:d8:3c:31:
2d:af:f3:22:bb:f0:96:8a:16:31:a1:96:90:7e:20:07:30:a1:
48:6e:28:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:34:53 2026 by rpki-client