
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1799e86e-9c98-417a-9878-d7c2ab84b1a9.roa
File: 1799e86e-9c98-417a-9878-d7c2ab84b1a9.roa (raw, json)
Hash identifier: TfRo9RQI0NF0HYWLM63YUWxU2HtectxwFm8Y8b3kkGs=
Subject key identifier: AD:52:B4:CD:CF:28:40:82:BF:C0:20:D5:4F:29:2B:FD:4C:FE:6D:12
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 132B4830519B1F90C8653ACE25540940F7097227
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1799e86e-9c98-417a-9878-d7c2ab84b1a9.roa
Signing time: Sat 18 Jul 2026 00:51:41 +0000
ROA not before: Sat 18 Jul 2026 00:51:41 +0000
ROA not after: Fri 16 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.35.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:2b:48:30:51:9b:1f:90:c8:65:3a:ce:25:54:09:40:f7:09:72:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 18 00:51:41 2026 GMT
Not After : Oct 16 23:59:59 2026 GMT
Subject: serialNumber=8994205619a7c477476b7ad63a92085d5b8501a44df9608ca8fe11277e86ec6e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c6:50:f2:ae:e6:75:87:59:b9:b6:6d:46:8c:
ec:cd:8a:2b:09:0a:5f:be:60:b5:67:93:b8:51:4e:
8d:6f:03:02:ac:2b:35:72:4b:86:9f:a0:93:6b:80:
86:f2:c2:ca:ad:b9:4e:ae:6c:d2:9f:24:b0:52:98:
68:8d:95:23:78:bd:1c:7a:56:09:d9:01:4c:f7:6c:
bc:26:42:c0:82:60:59:60:2d:4f:6c:cc:a1:42:36:
ca:04:b1:db:4d:c3:1b:fb:39:df:bf:08:09:fa:ab:
ad:51:82:71:20:78:7f:9c:98:0f:ff:cc:07:46:76:
8b:2c:83:aa:5b:a0:d5:77:7b:19:3d:30:13:92:57:
b7:e6:31:4e:d3:93:62:f3:1a:5d:33:1b:c7:a7:09:
93:9c:3b:ae:0f:8b:86:9a:8d:5f:51:77:19:65:4c:
dd:62:b9:6c:fb:db:26:e7:42:85:50:fd:a4:ff:c2:
89:f9:54:36:b1:9a:6d:c8:9b:e7:1b:25:f4:1a:bd:
1b:02:d8:a9:45:3c:97:43:d6:d9:be:a2:b4:e5:80:
b6:21:98:2d:97:fe:b3:2f:a2:68:94:b9:8f:b7:fa:
69:0f:06:fd:fd:e5:2d:1f:39:f3:2f:7f:61:6e:7b:
5b:58:41:de:17:b9:3a:71:ec:5b:7c:3e:f2:e8:be:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:52:B4:CD:CF:28:40:82:BF:C0:20:D5:4F:29:2B:FD:4C:FE:6D:12
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1799e86e-9c98-417a-9878-d7c2ab84b1a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.35.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:79:92:e9:53:5f:b2:c6:44:20:50:d5:77:02:23:1f:b0:fd:
4a:2c:63:64:20:8b:bc:01:09:24:e3:11:d8:32:93:0e:65:fd:
27:5a:52:c7:df:d5:31:df:3c:1b:8d:8f:3d:f0:d2:61:eb:02:
33:99:78:d8:aa:a4:15:83:61:8f:95:f8:0f:a5:6f:3c:cc:86:
a5:67:8a:f2:23:ed:bd:ec:95:9f:e1:4b:d6:a8:c0:3a:9f:de:
89:8f:57:be:f0:79:0c:b7:08:4b:24:dc:0b:f4:9e:43:52:5b:
f2:35:f7:f4:db:58:17:be:5f:51:52:8f:dd:e8:af:74:84:0a:
64:c1:b7:f4:74:af:fa:75:ac:c4:96:ef:e3:96:25:5b:41:5f:
90:4e:92:fe:b2:82:8c:ff:99:ba:3d:12:61:81:83:8a:d8:56:
c3:4d:53:6c:30:46:2a:d0:08:22:e0:d3:e0:6c:10:7e:3c:23:
92:c6:59:f7:d4:db:3e:15:0c:8e:7f:fa:1d:ed:c5:52:fb:9c:
b6:9a:b8:70:65:1a:00:91:ef:14:2c:83:24:0d:be:96:f3:a8:
8d:9e:dd:35:af:81:5a:fd:f9:a3:3b:08:0c:54:26:98:3a:2f:
71:83:0a:01:f2:5e:f9:45:60:a3:2d:dc:ea:f7:c1:bf:23:4c:
36:0c:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:58 2026 by rpki-client