
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b2d563-9558-42a3-af91-c49abf2fc92c.roa
File: 00b2d563-9558-42a3-af91-c49abf2fc92c.roa (raw, json)
Hash identifier: Z07ba2md7fa9A0GE6ZZBq1mbbvb8ZxCHyWCxlxrCH/o=
Subject key identifier: E3:8C:71:8A:76:8E:E1:BE:D9:72:9B:AA:6A:1E:63:25:B3:AC:CD:BC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 79EB9E8018801CCFD64BE4693A95C9D1BC91A6FC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b2d563-9558-42a3-af91-c49abf2fc92c.roa
Signing time: Thu 16 Jul 2026 00:20:34 +0000
ROA not before: Thu 16 Jul 2026 00:20:34 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 67.35.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:eb:9e:80:18:80:1c:cf:d6:4b:e4:69:3a:95:c9:d1:bc:91:a6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 16 00:20:34 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=b003e7a57d5c9ebb6d9f620847e842b8bdbafc560e315560ecd1a4b80ef36580, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:bd:55:50:37:1f:9f:f9:be:73:00:40:ce:
33:c1:d5:e5:22:c1:44:aa:b5:54:4c:cd:a3:5c:54:
0a:6a:5e:1c:cd:af:ae:83:9c:19:b2:04:39:3c:87:
92:8b:3e:9a:e0:96:aa:22:82:75:44:57:53:af:12:
2c:2a:cb:2a:13:97:c6:45:51:d3:80:43:d0:60:63:
2b:7f:4b:ea:70:c9:d8:89:bb:a9:ab:56:f9:f4:1e:
4e:ff:13:b3:96:7c:dc:32:f7:4a:80:0e:37:c7:aa:
d3:54:d5:92:80:64:81:3d:37:04:f4:34:a8:d3:43:
ef:ea:88:34:e5:74:71:df:bf:d9:75:ad:33:aa:dc:
fd:44:49:c8:44:27:17:2f:12:2c:58:8d:8e:61:e8:
66:11:1c:4f:8c:44:83:8f:1d:34:0c:aa:09:d8:1c:
7a:20:eb:57:48:22:19:d7:bc:5c:93:e4:48:79:29:
3e:b8:b4:99:bd:67:0c:1f:09:fd:6b:63:5e:fe:63:
87:b5:04:92:96:34:bd:b1:c6:0f:1b:95:92:db:f7:
71:72:c0:32:dc:33:ea:f0:5a:87:a5:06:f6:16:11:
c0:f7:79:5f:7e:d0:30:ef:a1:4e:cd:bb:6d:5b:b4:
9e:b1:ba:2f:bb:b5:19:73:27:27:eb:2c:e4:14:63:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8C:71:8A:76:8E:E1:BE:D9:72:9B:AA:6A:1E:63:25:B3:AC:CD:BC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00b2d563-9558-42a3-af91-c49abf2fc92c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7d:bd:72:b1:32:43:1f:54:43:db:8b:0e:a4:be:a3:55:a8:d9:
20:88:fd:f5:0e:9a:09:cf:79:df:a4:ac:07:b9:4f:ac:b7:91:
b7:33:67:44:08:7b:59:f0:f0:c8:83:bf:ee:40:38:7b:3c:71:
61:ca:4f:0a:8c:d6:b4:89:a2:cf:9b:a2:77:09:6f:a8:bf:5c:
fe:31:74:14:76:61:7a:ef:08:d9:67:b9:f6:7c:fc:0e:db:0b:
b1:a3:93:bd:99:40:ac:7a:8c:b4:d7:14:62:2b:fb:3c:59:00:
74:79:22:89:c2:58:d5:0c:b4:89:ad:05:be:ac:ae:29:57:0b:
b2:99:19:df:d0:af:a0:bc:65:13:12:bd:58:7d:2c:28:29:ff:
f0:e2:94:2d:a4:a5:d1:40:22:01:86:2f:9a:a0:57:88:0c:70:
69:c5:d4:6d:28:6b:30:ee:df:d9:59:39:47:8f:11:2d:dc:28:
8d:21:1b:41:d0:6f:03:04:54:dd:45:0a:3f:96:5b:b7:d5:9f:
77:bb:01:f9:59:4a:65:b0:64:7d:c6:0c:15:92:bd:84:7b:63:
4d:f2:39:00:78:07:7c:d2:d9:1b:38:aa:72:e5:97:7b:54:82:
5f:aa:ee:f0:32:0d:2f:65:82:66:81:f7:f8:59:64:61:4c:45:
3e:93:33:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:04 2026 by rpki-client