
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff41c404-4080-49f0-b6c7-2fea4bf84b2d.roa
File: ff41c404-4080-49f0-b6c7-2fea4bf84b2d.roa (raw, json)
Hash identifier: wzVCJNlZvTqJUA3SGODjgpfXAUg+zHM/7PEHB6o7Cc4=
Subject key identifier: 02:51:ED:F0:AC:6B:B4:AF:1C:56:11:CF:38:44:BC:50:62:DF:BD:A4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 04C1B56C29C9D0239DA48267C1A50481E5ACDCC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff41c404-4080-49f0-b6c7-2fea4bf84b2d.roa
Signing time: Wed 20 May 2026 00:20:47 +0000
ROA not before: Wed 20 May 2026 00:20:47 +0000
ROA not after: Tue 18 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.54.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:c1:b5:6c:29:c9:d0:23:9d:a4:82:67:c1:a5:04:81:e5:ac:dc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 20 00:20:47 2026 GMT
Not After : Aug 18 23:59:59 2026 GMT
Subject: serialNumber=610c8c66a423be068d068244156028359aea162f4318538f136c914144818aa6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:de:1d:18:1d:2c:35:5f:84:94:4c:c7:de:25:
00:df:7d:b9:22:23:e0:16:08:76:e4:67:84:8a:d5:
8d:14:4e:96:7c:28:9c:be:52:92:41:7b:de:ac:0f:
f1:3b:90:69:72:19:ae:60:63:9e:33:38:03:25:b7:
df:3a:87:44:4a:13:af:1f:ec:5d:2f:77:38:17:c8:
1e:66:50:ed:a9:7c:24:f7:51:9d:62:b0:00:88:b3:
da:d4:ec:e4:17:06:0e:fa:6b:2a:66:57:80:95:21:
de:fd:b6:e8:da:8f:93:0f:e9:35:53:12:2d:3d:42:
6a:b5:d9:69:a8:06:ca:45:18:b7:2d:99:02:40:29:
05:1b:dd:16:e6:2d:56:13:25:f5:39:dd:cd:27:15:
8b:ae:6c:b7:b7:a7:7a:fd:07:91:f2:f6:3d:de:d7:
90:d7:6d:90:65:42:8e:11:83:e0:e8:22:7b:c5:b6:
f8:43:dc:b9:eb:5b:03:77:95:ba:0b:f0:85:2f:d9:
70:0e:52:51:45:f1:6a:10:2f:36:a8:7d:61:25:db:
0d:52:07:7b:6b:ea:8d:d5:53:73:b8:36:96:41:b1:
6b:40:d0:dd:2d:b6:fe:ff:f9:99:74:6b:09:a0:30:
7a:fb:bc:f9:4c:cf:f7:2f:44:94:96:8d:ca:d5:25:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:51:ED:F0:AC:6B:B4:AF:1C:56:11:CF:38:44:BC:50:62:DF:BD:A4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff41c404-4080-49f0-b6c7-2fea4bf84b2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.57.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:5a:9d:3d:24:af:d6:94:f1:1c:fd:52:08:c8:75:4a:0e:9c:
ca:1f:91:8a:c0:56:bb:a5:1b:06:c6:df:3d:f5:e0:20:02:79:
ca:ce:c4:e7:fb:eb:9d:14:c2:84:3b:87:d9:7f:01:d6:4f:96:
4d:20:b5:23:2f:3c:a0:5d:35:55:dd:a3:91:f4:95:98:f5:b1:
ed:87:60:2d:31:22:41:27:1d:e0:4f:27:d6:50:36:23:80:f3:
83:d7:e9:29:b5:e6:6e:55:fb:ae:12:cf:cd:6c:95:9c:46:2c:
c2:b8:ec:69:54:5c:27:f7:5e:26:69:5b:f7:84:9a:12:20:52:
58:c1:e1:04:be:05:8f:ad:c7:fa:e8:7e:48:f5:78:cf:6f:94:
cc:63:5f:21:e8:20:fd:4a:45:e0:79:aa:59:93:00:df:f4:dc:
8d:4f:c9:55:3f:91:a9:e1:3d:b5:07:d4:f5:67:9c:a4:d4:8d:
6a:37:69:58:60:9b:16:71:0b:59:3b:79:ef:5f:e3:f3:3e:69:
16:12:0d:f7:af:55:63:0b:f8:a8:de:27:5e:26:65:e9:09:38:
28:fb:3d:50:5b:dd:10:43:e0:47:d7:5d:4d:81:20:75:8b:4b:
65:92:65:36:0d:8e:86:79:da:c1:0f:60:4e:bf:8a:43:9a:76:
20:82:c8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:58:17 2026 by rpki-client