
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11efc78f-00de-42b6-b52c-218adf4f6cc9.roa
File: 11efc78f-00de-42b6-b52c-218adf4f6cc9.roa (raw, json)
Hash identifier: qw0jzKPvS/ujCs7HUEHDsQHuZ6yUl6DMST6Wavll75A=
Subject key identifier: 10:06:FD:D3:47:64:5F:10:E1:91:08:D6:1A:9B:4A:CC:A0:AD:56:8A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7FF7AB5C6F955DB31B20C5D78BE0FBB09EB67ECA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11efc78f-00de-42b6-b52c-218adf4f6cc9.roa
Signing time: Wed 06 May 2026 00:00:33 +0000
ROA not before: Wed 06 May 2026 00:00:33 +0000
ROA not after: Tue 04 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.64.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:f7:ab:5c:6f:95:5d:b3:1b:20:c5:d7:8b:e0:fb:b0:9e:b6:7e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 6 00:00:33 2026 GMT
Not After : Aug 4 23:59:59 2026 GMT
Subject: serialNumber=942011307afb10059c2630e4a9260f813c7c986ae61acb962d55f05ad743d392, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:46:88:58:88:3c:e9:a0:48:e0:28:ad:69:
70:f8:d3:42:89:c0:04:53:a9:39:cd:9b:55:5f:9c:
85:ca:07:f1:dc:f2:70:75:2c:2e:78:49:e8:af:6d:
8f:f3:ae:2c:c3:33:7f:ce:7e:4d:b6:90:f5:86:57:
9d:a8:5d:da:2a:a5:2f:c6:1c:05:15:eb:a3:cf:9c:
0b:4b:90:7d:ab:c9:44:d7:6c:27:23:f6:c1:1d:39:
ef:79:37:61:57:38:b8:70:8e:03:32:b7:fe:f7:70:
57:08:41:f3:34:ba:bd:1e:2d:a6:9f:40:fd:77:8f:
74:cb:41:e3:b0:31:25:10:5e:fe:6e:3d:00:89:b9:
b5:d1:af:95:fd:0d:e2:7e:8b:47:8b:fb:03:69:18:
4d:58:0e:71:40:32:9f:51:49:ae:c6:ea:c3:a9:b9:
e7:37:e6:c5:92:71:70:37:c2:80:ed:66:a7:bd:e3:
0f:8c:c0:c9:2b:48:c3:6a:8b:60:10:8d:40:46:58:
17:c5:3e:d1:bb:56:46:bb:6a:23:15:d4:1e:ae:61:
fd:22:24:f4:98:1a:9e:3e:10:89:8f:54:dc:35:7d:
ed:10:55:e5:40:80:c8:77:ab:b2:ca:13:b2:d5:d8:
9c:64:be:9d:8b:2d:24:4d:54:2d:32:fa:a7:f4:a6:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:06:FD:D3:47:64:5F:10:E1:91:08:D6:1A:9B:4A:CC:A0:AD:56:8A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/11efc78f-00de-42b6-b52c-218adf4f6cc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.64.0/23
Signature Algorithm: sha256WithRSAEncryption
99:2c:8f:37:65:ab:fd:53:6b:0a:3f:98:5b:18:6a:73:30:7f:
b3:34:e9:ec:03:82:1f:fb:6a:6e:94:dd:9a:7f:92:be:3c:7a:
11:72:3d:51:b5:5a:31:ad:48:35:9c:a4:3d:cc:13:7b:97:5d:
81:c6:fe:28:ab:60:f7:c4:5e:64:d6:c7:b0:7b:2c:4e:dd:0f:
56:23:48:9c:da:3a:ef:23:d8:fb:4c:88:75:a7:a8:97:c5:93:
18:2b:9d:2f:25:0a:53:1f:29:b0:e6:6b:df:15:58:6a:e2:12:
85:bb:2b:58:43:60:3f:77:04:07:b0:57:16:5b:14:35:c9:e6:
e2:10:64:8c:48:95:ae:12:29:b1:d9:b5:72:ba:df:8a:fa:49:
74:0d:5d:42:7e:b6:58:fa:f0:1c:a1:eb:72:ad:8b:7d:57:98:
1d:c1:ab:bc:9e:31:46:72:3a:c2:32:ed:2f:88:45:62:56:b8:
26:c3:68:46:80:44:2d:2d:97:f0:30:54:55:1f:bc:c5:fd:4a:
82:8a:3d:58:14:f9:ee:30:f0:a4:8a:bb:9d:38:9a:0b:27:71:
b7:2b:1d:c2:83:da:ea:9d:72:ed:f5:c4:d7:c1:34:9f:ec:25:
e2:86:d6:82:3a:c8:52:ef:bb:65:e9:69:e0:34:70:5d:e4:d6:
70:64:e9:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:57:08 2026 by rpki-client