
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f5ca6d6-2a45-4d3c-8dfe-8f0c0c6d22fa.roa
File: 0f5ca6d6-2a45-4d3c-8dfe-8f0c0c6d22fa.roa (raw, json)
Hash identifier: /LoLt9hgX6CbyjLXVdJt3WizZWsXqdFnZ9fNXJ2Vp3Q=
Subject key identifier: 80:D4:F8:2C:3C:46:87:DC:FB:A5:DF:ED:1C:40:1A:C0:89:37:59:36
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 08ECFFABFE9238E7266E0CC34A5B15455E71E936
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f5ca6d6-2a45-4d3c-8dfe-8f0c0c6d22fa.roa
Signing time: Sun 05 Jul 2026 00:01:22 +0000
ROA not before: Sun 05 Jul 2026 00:01:22 +0000
ROA not after: Sat 03 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 173.245.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ec:ff:ab:fe:92:38:e7:26:6e:0c:c3:4a:5b:15:45:5e:71:e9:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 5 00:01:22 2026 GMT
Not After : Oct 3 23:59:59 2026 GMT
Subject: serialNumber=4927e9a359aa89dcedaf460c5bab2b50c457f47ac8e1e0ce921af782e46d4e2f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:83:e2:7f:9a:f3:d2:bb:34:01:a2:a9:b6:60:
f9:dc:f6:50:8f:0c:86:c0:40:69:19:94:cb:97:60:
1c:35:a5:d8:93:db:ea:97:6c:f7:3f:74:08:51:9f:
9e:20:49:77:e9:af:c7:73:bc:11:17:03:3f:a8:3b:
72:42:f6:75:7d:41:97:9c:a3:f9:48:ac:c2:90:37:
cb:2f:0b:09:7a:e5:c0:e0:d4:ba:01:1e:7d:cb:44:
1e:ac:01:3f:5f:c0:1d:42:32:74:60:8a:67:d9:79:
b0:8b:64:e4:9b:22:71:0e:4e:57:1e:f1:b8:f7:91:
32:b8:85:71:90:59:2f:ea:a7:50:bb:2e:eb:f6:f6:
e5:1e:6a:40:c6:8d:60:90:7f:52:de:d3:27:cf:07:
52:2a:14:79:d3:94:6c:ae:84:80:7f:a0:35:44:53:
ad:a6:44:97:4d:fc:ad:1e:00:b6:9b:84:eb:23:ee:
ac:42:fe:a9:53:50:ae:54:18:c4:70:b2:99:eb:70:
94:7c:1e:a8:d9:1f:65:93:6b:95:20:8b:7d:f0:a0:
91:39:cf:09:bd:0f:b4:ef:fd:99:69:e8:2b:7a:a8:
c3:66:01:71:b1:c0:19:fa:eb:f8:92:25:f6:7c:dc:
37:8e:f8:99:92:10:45:53:61:31:72:5d:1c:de:1c:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D4:F8:2C:3C:46:87:DC:FB:A5:DF:ED:1C:40:1A:C0:89:37:59:36
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f5ca6d6-2a45-4d3c-8dfe-8f0c0c6d22fa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.245.220.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:33:f4:91:07:53:89:c0:31:df:e9:20:d0:a2:be:14:13:c1:
b6:a4:c9:1f:b3:bb:f2:c3:71:d9:4f:9b:de:24:c6:e1:59:c4:
4e:30:b3:98:15:f3:25:87:00:80:1f:53:39:c8:ef:03:b3:4c:
d7:33:2d:cd:7a:90:f0:5a:bc:c0:86:b5:78:86:26:61:3a:bc:
20:8f:6e:5c:10:2d:bd:0d:e5:f3:39:1e:64:43:c2:6d:41:ef:
7f:42:e2:97:60:d1:9f:bf:bd:ae:d2:58:dc:b9:4d:a7:25:3e:
6b:b1:2a:1d:3b:8e:a2:9e:a6:41:e1:3e:c8:6d:3c:d5:57:cb:
df:55:e7:3a:73:d8:88:9e:41:88:e8:c3:10:83:56:29:3e:1d:
c3:14:c7:8e:e0:c8:65:8a:ab:94:6a:43:16:aa:eb:71:f5:ee:
1d:4a:2e:68:df:aa:e0:fc:4a:f6:10:1b:8f:a7:04:74:7c:25:
59:ce:d8:3f:80:f8:c5:c7:76:7d:37:0c:e0:3a:e1:93:34:f2:
25:4d:7b:90:ae:31:93:91:8c:9e:53:14:9f:3a:16:34:9a:3c:
b1:01:54:0d:52:aa:e0:4d:b1:6a:22:5a:ee:22:91:52:ef:76:
22:00:75:0d:2b:f7:5c:fa:c2:0d:e7:fc:f2:64:73:3b:8e:4a:
41:0b:0a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:52:55 2026 by rpki-client