
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec3bb488-0ca4-4ea5-91d1-498d66f8ae7a.roa
File: ec3bb488-0ca4-4ea5-91d1-498d66f8ae7a.roa (raw, json)
Hash identifier: 1bXAJugCO2JIEk0cKWT+e/5IbEXlvWI0eL/MLw59cPc=
Subject key identifier: C4:30:FF:06:99:FB:52:F0:2E:3F:48:A1:65:BE:D9:1E:D0:3E:21:4C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5D31A508388A3DF23432809EC89B6AF2BE7F1B76
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec3bb488-0ca4-4ea5-91d1-498d66f8ae7a.roa
Signing time: Tue 28 Apr 2026 00:10:14 +0000
ROA not before: Tue 28 Apr 2026 00:10:14 +0000
ROA not after: Mon 27 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.178.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:31:a5:08:38:8a:3d:f2:34:32:80:9e:c8:9b:6a:f2:be:7f:1b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 28 00:10:14 2026 GMT
Not After : Jul 27 23:59:59 2026 GMT
Subject: serialNumber=c871ef14317d31c59c86f35df8ef3505b0edbd18bd9e95e0ec5159d3f4ac3c5e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c1:9a:4f:df:3d:b5:35:eb:a9:16:08:f8:75:
4f:49:0e:db:ad:66:e1:8c:90:6b:ec:74:5f:97:cb:
4d:f4:9f:39:06:8f:bc:0e:aa:31:05:1a:3e:6c:d5:
31:71:cc:69:e5:21:ca:db:aa:21:82:04:53:ab:67:
51:28:9d:a5:3b:c9:ed:94:30:f2:b1:e4:0e:1a:32:
6c:5c:34:6e:1f:e7:a1:70:ca:f7:96:82:eb:37:02:
e8:73:d6:a6:4e:9e:01:9d:31:06:a7:a5:cd:37:21:
81:56:7e:db:a0:52:8b:70:2c:49:aa:57:eb:cd:18:
28:a1:9d:ea:2d:da:9f:b7:82:3f:46:8e:67:b9:79:
51:14:27:f1:2f:6e:be:c0:89:9d:8f:84:c4:e9:18:
57:03:ad:0c:51:56:01:34:94:d6:da:7b:27:09:ca:
ca:5a:95:10:40:ea:13:f7:16:94:2f:b3:ae:6d:b9:
24:af:99:1d:6d:b1:ae:37:cc:09:34:a5:be:cf:f7:
9b:3e:92:de:8f:cf:6f:08:95:68:56:0f:3d:0a:7a:
c7:ea:c4:a9:af:6e:8b:ce:8a:7d:db:d3:f9:12:b8:
a3:cb:08:18:83:93:cc:80:56:de:a6:46:18:dd:1d:
bd:5f:65:e6:6f:22:dc:b9:8f:69:6c:6b:de:cb:8a:
f9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:30:FF:06:99:FB:52:F0:2E:3F:48:A1:65:BE:D9:1E:D0:3E:21:4C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec3bb488-0ca4-4ea5-91d1-498d66f8ae7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.178.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:a9:9c:be:a7:9d:0c:7b:76:9c:d5:ab:87:92:53:d4:b3:ff:
13:12:64:ee:8a:f0:a7:b8:4c:30:e7:8d:ba:51:46:7d:6f:d8:
cf:e1:b0:0e:62:aa:08:9c:c4:8f:84:80:1e:d1:ee:48:96:6e:
da:ff:81:a8:83:49:fa:a8:8c:49:48:97:42:36:51:b6:eb:18:
70:94:e7:c7:8b:0b:57:28:5a:0f:e3:3c:6a:2d:aa:2e:d1:b7:
06:c1:4f:80:35:15:c5:9a:36:ad:39:ad:39:e3:98:d7:03:d2:
7f:ca:99:81:36:f7:96:e8:e7:19:d1:9d:8f:53:e4:8b:c6:bf:
9d:61:66:ff:cb:3b:b0:3b:39:7e:47:0c:43:4f:19:aa:39:bc:
5f:96:ed:54:79:eb:09:d6:93:41:80:a2:0e:a2:1b:e0:69:b4:
9e:93:7f:f5:c1:ff:2e:43:74:69:66:cc:30:92:7c:13:3d:46:
aa:5d:75:16:f9:c0:1f:da:d1:80:0b:48:d0:4f:97:31:37:ea:
aa:a1:39:b0:c5:74:49:e8:35:e1:8c:83:3a:f2:ae:97:87:86:
73:1c:ab:80:39:0f:09:30:4a:fc:a7:dd:7a:01:4b:d8:b1:20:
50:e0:f0:f5:dd:10:1e:64:04:b9:a8:06:50:be:d5:0a:d9:36:
c6:bf:1d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:52 2026 by rpki-client