
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edabdce6-a3ca-4743-8403-ae737c3b4588.roa
File: edabdce6-a3ca-4743-8403-ae737c3b4588.roa (raw, json)
Hash identifier: NhrXzO/v7/vZNuftTc01en7phWuDxdpGpKEhOfkgIQ4=
Subject key identifier: E7:89:D8:2D:AA:F5:18:FA:26:B7:9D:58:17:85:6D:24:F9:08:E5:07
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3AC45734FF56FAFE3385FA8C14AFA74D8BC5433E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edabdce6-a3ca-4743-8403-ae737c3b4588.roa
Signing time: Mon 04 May 2026 01:21:21 +0000
ROA not before: Mon 04 May 2026 01:21:21 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 50.17.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:c4:57:34:ff:56:fa:fe:33:85:fa:8c:14:af:a7:4d:8b:c5:43:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 4 01:21:21 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=232e0f2b6fed9f11802e0bb3d285436ca2e4920999360a1703cf644769aedc56, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:a1:35:92:36:98:a2:82:e3:6c:e2:1d:91:
a0:95:c5:61:af:50:9f:15:3d:cc:2a:48:05:72:ca:
77:00:76:b0:97:76:04:dd:99:ac:4d:5b:b7:37:94:
52:3b:f2:28:32:d8:d3:c6:de:74:1c:17:23:f1:df:
0a:2b:2d:4f:af:bb:03:ae:fa:86:10:71:69:95:f0:
d0:ce:59:56:5a:f5:e0:a9:2d:b6:cb:04:25:4b:b7:
17:b3:ef:ba:12:de:55:d9:f7:40:00:36:90:96:3b:
06:f5:6d:7d:91:4b:fd:53:a8:bb:6b:03:bb:c0:fe:
96:75:12:b1:b4:c2:51:06:36:80:e4:bb:aa:68:d3:
24:cf:b3:92:80:6e:84:df:00:74:d9:00:e3:c1:e3:
3b:78:79:ec:00:a0:73:93:ef:34:fa:84:b0:8a:97:
cd:d0:bc:bc:d3:a1:c8:2e:a9:35:71:6a:5f:16:d4:
ca:14:83:58:78:2f:d9:03:45:85:dc:bf:bf:41:8a:
18:50:b0:55:3b:14:f7:77:1c:0e:6b:3b:88:52:76:
59:db:b2:c1:cd:3a:40:96:39:c3:88:9f:3d:3a:64:
86:5d:a3:32:a3:7c:5a:6d:7a:39:69:6f:ed:66:a1:
bc:af:9c:5f:f2:4f:b1:1b:c5:1c:ac:f5:49:a0:1e:
85:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:89:D8:2D:AA:F5:18:FA:26:B7:9D:58:17:85:6D:24:F9:08:E5:07
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/edabdce6-a3ca-4743-8403-ae737c3b4588.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.17.160.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:9d:64:42:11:60:24:fc:1c:da:86:d9:6c:ec:dd:09:fa:f4:
21:e7:5d:db:b4:a7:8b:fe:5b:64:ce:5b:92:e4:eb:49:48:cb:
ab:fb:0a:3f:b6:75:d3:59:a7:91:09:af:1f:c6:17:4b:37:68:
1a:54:11:f3:d6:ce:34:ee:bb:e9:1e:f3:85:67:c1:c8:64:af:
d8:c4:e9:27:45:0c:84:08:f2:86:f3:95:38:d7:e4:3a:63:1b:
4a:b2:86:a2:91:ea:0d:62:a2:e8:cf:d3:78:28:d7:f9:7e:6d:
d5:02:23:0e:3f:bd:9f:75:dd:0d:97:45:6d:be:36:02:18:a6:
1f:4e:73:56:89:99:46:04:33:98:78:37:b3:86:f5:b5:c1:63:
a5:b0:d4:a3:85:00:bc:7a:5d:06:8e:51:c2:34:e5:e5:91:6e:
4c:f3:77:9b:9d:06:8e:2d:8c:94:fa:7a:bd:f1:2f:5a:0e:5b:
45:b8:72:13:01:8d:6b:b7:71:d1:13:9b:a6:f9:7f:64:4b:e2:
77:26:89:d2:15:97:b7:c6:c5:de:af:f9:d8:7f:d7:b8:32:ff:
dc:b4:e8:f5:bb:08:d7:12:9f:ce:a2:89:9e:1b:78:48:25:dd:
ec:f6:68:7e:e1:92:d5:5d:ad:30:66:0f:28:a8:23:df:6f:30:
a7:a1:e9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:49:35 2026 by rpki-client