
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ba0e448-d5e0-4e96-97b3-0ebfa473d361.roa
File: 1ba0e448-d5e0-4e96-97b3-0ebfa473d361.roa (raw, json)
Hash identifier: +jqBCJ2EJv1Vo8e4fpD+IFVnRdXgTUX3FBHQmmjQzhc=
Subject key identifier: 7E:AE:B2:C1:C3:99:88:FB:C9:04:BC:A8:D7:1C:1B:86:E0:B7:0E:AE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 58682A6EB474CE7546290BE8B4289EEDCE311AD2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ba0e448-d5e0-4e96-97b3-0ebfa473d361.roa
Signing time: Sun 19 Jul 2026 00:00:07 +0000
ROA not before: Sun 19 Jul 2026 00:00:07 +0000
ROA not after: Sat 17 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 89.62.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:68:2a:6e:b4:74:ce:75:46:29:0b:e8:b4:28:9e:ed:ce:31:1a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 19 00:00:07 2026 GMT
Not After : Oct 17 23:59:59 2026 GMT
Subject: serialNumber=137dc528a516c3d647f712de6ea7e5c77c91de69b87489f246fb072557ff0f62, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:29:f2:d0:30:99:9a:39:af:c6:20:7e:ef:07:
21:b8:b0:0d:c4:3b:62:a4:a4:d8:d1:07:4e:1b:8a:
d1:3d:bd:41:72:0c:1b:f6:f4:b2:ca:be:ab:47:9b:
fa:88:c6:af:eb:3a:6b:bf:58:3d:6f:b4:a6:9c:0f:
6a:bb:ef:cf:3d:44:e1:5d:ae:ba:13:dc:96:64:4a:
df:21:95:b6:23:b5:67:61:68:c4:ac:0d:29:fe:5a:
b3:1f:c4:22:c6:78:63:66:2e:ca:55:5f:ef:c7:6e:
a5:88:d9:ff:a6:65:4e:e5:0b:79:b8:45:74:12:8c:
fc:e7:44:25:bf:65:f3:7e:b4:03:db:54:64:6a:54:
18:21:60:6b:73:bf:68:eb:a1:25:c5:33:f9:2f:17:
dc:f6:aa:e2:e9:00:dd:03:42:aa:a0:0f:78:95:98:
1b:4c:63:24:e2:d4:6d:84:17:43:23:5f:7b:75:03:
d4:02:e8:4e:ec:16:8c:fa:8e:c8:ca:6c:38:05:65:
3d:ea:a0:43:a8:b7:13:37:4b:48:22:40:c2:e2:c3:
d9:ad:97:fa:2a:26:b9:9f:d9:18:0d:06:87:e6:64:
64:24:16:63:d8:b0:cb:c9:7b:c6:55:f7:be:2c:d9:
20:63:62:65:3b:5e:2e:9e:67:55:4e:69:96:b6:d4:
1b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AE:B2:C1:C3:99:88:FB:C9:04:BC:A8:D7:1C:1B:86:E0:B7:0E:AE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1ba0e448-d5e0-4e96-97b3-0ebfa473d361.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.62.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:e8:bc:35:51:a8:bb:26:c8:63:7b:3e:c3:55:72:f6:bf:07:
a8:1a:c0:de:04:85:79:0b:47:1f:d8:64:72:9a:a5:2c:16:3e:
2b:a5:15:1f:1d:34:f7:49:3f:b3:6d:f2:86:60:1b:5d:10:9b:
e5:9d:82:4e:b8:08:eb:e7:92:b8:57:06:9e:1f:b1:d9:bf:83:
80:8c:7f:09:39:f7:00:ef:35:e3:38:9c:ff:84:2d:fb:c9:1a:
c8:a7:76:97:d5:f2:2a:53:ce:1c:6d:70:72:48:7e:46:2f:f5:
f2:90:75:fa:74:52:fc:ea:0c:bc:ad:a1:f8:51:96:9f:2a:0a:
0c:0f:78:ca:68:d7:82:55:ea:13:70:4c:fb:06:a3:fb:2d:e1:
95:be:b2:ec:9a:7f:47:ee:4c:ab:bd:a6:d7:de:4b:e2:37:01:
f6:5d:fe:ac:71:36:f9:dc:6d:3c:a8:de:88:b5:6e:24:7f:d4:
a2:22:25:41:4e:f2:ee:6b:95:ca:7e:45:e1:8a:db:dd:17:5c:
6c:20:e2:01:8d:55:5a:27:0d:b2:98:ea:93:8f:a0:f8:aa:11:
c0:e7:a2:a3:bf:1b:80:89:b2:16:85:bb:1a:2e:3b:e1:86:38:
19:79:46:aa:9f:d9:6c:b5:6d:6b:f9:21:8c:ba:9c:fa:25:1c:
fd:83:45:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:29:25 2026 by rpki-client