
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/142a47d1-ea7b-41a3-8dc1-1ae882f845c2.roa
File: 142a47d1-ea7b-41a3-8dc1-1ae882f845c2.roa (raw, json)
Hash identifier: 1kmKfNIBz+9ncbsNaq74V2qdwSRu4M7g2++WNFr3M9Y=
Subject key identifier: 43:02:89:BD:0F:B4:5D:87:4E:12:6A:C7:55:D2:93:B6:CA:91:59:34
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7CD062CD135032393D3A6632FB395D24AA288517
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/142a47d1-ea7b-41a3-8dc1-1ae882f845c2.roa
Signing time: Mon 04 May 2026 00:40:10 +0000
ROA not before: Mon 04 May 2026 00:40:10 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.82.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:d0:62:cd:13:50:32:39:3d:3a:66:32:fb:39:5d:24:aa:28:85:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 4 00:40:10 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=06ba5bbf2e81e934aff6bf1e6593fc869323c6af5600371db378e5de7f4fa3f2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6d:50:3b:ff:75:56:d7:f3:c4:7c:f8:d1:c4:
fd:7f:10:59:20:69:e7:25:ef:ef:db:4e:8b:81:a7:
00:81:12:53:9b:e4:04:8d:45:bd:16:a5:25:c1:40:
e0:11:9a:cd:bd:9b:c0:39:3a:65:e3:9f:d0:ba:1a:
ce:25:9d:e2:07:35:54:6d:47:c0:bf:c2:1f:98:ad:
74:93:35:b4:23:18:72:16:a4:43:de:16:4f:2a:65:
79:09:b0:71:d8:fa:82:f2:81:dd:26:3e:c0:c0:f5:
d1:c6:7c:ad:53:0e:66:77:e2:12:66:28:b5:9b:72:
87:65:72:eb:5d:43:12:38:42:13:61:14:80:6a:9d:
27:49:2a:12:4e:7c:56:32:5f:73:04:00:69:07:4f:
03:82:1d:14:40:94:38:51:07:82:17:1b:40:51:a9:
52:0d:fd:be:56:90:3d:e8:d7:b2:8f:ae:c1:f3:f2:
61:c7:37:fe:cd:be:72:11:06:ca:36:b8:b4:c3:f2:
4c:5c:49:0d:0d:05:15:ff:68:2c:ac:ed:bb:ac:33:
41:8f:60:23:c8:47:ba:bd:d6:9b:4b:3f:46:77:e5:
da:13:1f:c5:cb:f0:e6:c4:20:6b:07:20:70:87:d4:
bc:f7:74:a6:3c:6c:3a:dc:c2:ed:05:31:da:f8:fb:
30:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:02:89:BD:0F:B4:5D:87:4E:12:6A:C7:55:D2:93:B6:CA:91:59:34
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/142a47d1-ea7b-41a3-8dc1-1ae882f845c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.82.156.0/22
Signature Algorithm: sha256WithRSAEncryption
09:91:2f:32:83:38:ee:3c:76:43:49:52:cf:18:cb:cb:52:05:
fb:52:c6:13:b0:27:b4:16:40:87:8d:ca:63:73:17:40:ae:e7:
10:7d:ca:34:ad:a8:28:62:e9:fb:34:f6:90:fa:c8:1c:d2:25:
ab:5a:dc:13:27:67:ef:07:1e:df:4d:e9:72:f3:e2:3c:9f:c6:
7e:1f:17:07:b6:80:dc:f2:e2:c7:62:26:67:2b:9e:6f:1e:81:
b5:23:41:de:1f:70:10:c9:1f:55:a5:58:63:73:df:0b:47:a8:
ad:57:7e:d1:96:59:8e:1a:3d:79:16:aa:e3:e3:54:08:02:d3:
b0:ca:e4:11:28:f2:62:d1:23:ee:ad:a8:8a:73:7e:be:fa:31:
20:8e:3c:22:ac:4f:82:72:42:46:7b:7b:ec:01:69:f6:82:6f:
d9:c8:9e:0f:53:71:40:c7:fc:2f:db:49:70:84:9f:71:10:65:
7c:b9:31:7b:02:59:b8:af:00:29:09:f8:f5:8e:dc:bd:1c:a7:
3c:c2:19:61:49:da:a3:bd:58:65:b4:a2:49:3a:f7:84:c3:71:
e2:02:f1:6b:64:fc:fe:13:90:94:3a:5e:ee:d3:ec:a1:1e:d2:
54:0b:19:e1:f2:59:c5:11:ff:5b:1b:ec:de:69:05:1a:f1:05:
fc:78:9c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:41 2026 by rpki-client