
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f20b22c4-1b25-4b12-94c2-81fda3225593.roa
File: f20b22c4-1b25-4b12-94c2-81fda3225593.roa (raw, json)
Hash identifier: RLHE0ZFzWwxeRzueXrlFa/ZO+aUnl4KoH7J32dqsMDQ=
Subject key identifier: B8:28:81:F7:31:BF:46:42:36:CE:50:30:AD:D9:BA:05:9E:32:9E:89
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 40A78B46386E163B313595012B3FC876A37E4B9D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f20b22c4-1b25-4b12-94c2-81fda3225593.roa
Signing time: Mon 04 May 2026 00:50:48 +0000
ROA not before: Mon 04 May 2026 00:50:48 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 50.19.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a7:8b:46:38:6e:16:3b:31:35:95:01:2b:3f:c8:76:a3:7e:4b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 4 00:50:48 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=03777e78dff977e2d88debe6958aa8ae036415519e33c5a522c6c6c98ec4420e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:f9:9c:6d:c6:5a:33:29:b5:b4:ef:74:99:
38:81:5e:34:9e:78:33:21:df:bb:dd:b0:a0:68:59:
87:7f:fb:7c:05:99:a6:3a:6e:19:1a:8e:7f:fc:21:
cd:1b:4a:a0:ba:89:7b:0b:b5:6b:36:84:3b:58:19:
e9:d4:07:5b:d6:72:55:40:85:3f:28:e3:e6:2a:d3:
27:35:61:93:1a:4f:d9:07:00:51:12:80:d0:c8:37:
f2:01:3c:24:b5:39:ab:b9:62:c6:bb:45:d3:82:57:
b5:22:f2:ce:d2:73:f4:d4:e8:f6:f0:f8:3c:bf:28:
3f:d6:32:5c:ec:6f:05:10:ef:ed:72:03:fe:e0:fd:
3a:84:08:e6:07:07:7c:08:68:a7:8a:ae:d7:89:33:
6f:97:76:d6:06:87:69:6e:6e:34:89:07:19:b0:9d:
c3:75:62:b2:9a:da:82:ff:3f:ef:3f:54:d2:be:58:
1a:e6:5f:4c:5c:cb:9a:85:ba:2d:2b:79:f3:f6:45:
ef:ab:bb:5d:ff:5d:07:f4:7c:ee:eb:54:bb:4a:54:
18:31:08:96:63:35:2a:cf:1e:78:82:55:a8:a2:05:
bc:bd:cf:df:c8:2d:f8:1e:58:15:a1:4d:ca:80:a5:
e8:16:31:72:f7:26:18:62:b8:df:3c:54:43:e4:bb:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:28:81:F7:31:BF:46:42:36:CE:50:30:AD:D9:BA:05:9E:32:9E:89
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f20b22c4-1b25-4b12-94c2-81fda3225593.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.19.96.0/19
Signature Algorithm: sha256WithRSAEncryption
29:85:fb:20:6d:38:92:a8:1b:0d:95:55:93:80:28:e0:fb:fc:
09:72:af:e5:01:0b:97:2d:e9:20:06:5a:70:14:c2:02:3b:35:
c6:b7:3d:93:f1:d6:b9:a7:5d:2b:5b:45:3e:42:d0:af:35:e6:
f1:f2:48:3d:c8:29:c1:e1:0e:fd:2c:2c:33:ca:f6:cf:13:0e:
14:bb:ea:8a:5f:49:d8:d1:04:f1:14:a9:7e:74:ec:54:63:eb:
70:8e:1a:19:be:30:4a:7d:7b:a2:b8:1d:02:8e:1e:33:1b:dd:
0e:7b:ac:da:20:5c:b5:0c:ed:14:d0:87:2d:ac:fc:45:67:ac:
81:59:18:a8:33:1a:6c:bd:cb:8b:0e:6e:ed:0d:8d:dd:4e:83:
fe:b5:fa:45:8b:ec:d9:6e:ab:c0:4c:d2:ea:57:ba:63:45:38:
53:55:94:2b:a6:fe:42:b5:50:67:ff:3e:f3:ea:60:f5:d9:41:
90:40:5f:96:ab:69:d3:0f:af:cc:b0:79:e2:da:80:5e:a5:59:
76:4d:e6:39:38:4a:f5:6f:5b:ea:29:05:d6:8b:99:bd:92:26:
95:f7:1c:d6:07:90:e5:41:77:a2:65:d3:db:8d:e1:76:59:3f:
2f:ba:99:aa:65:0c:e7:af:38:65:32:1a:66:ec:c9:c5:8d:aa:
e0:e2:a4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:11:35 2026 by rpki-client