
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c1e2604-6355-4061-8e4d-164d58041afe.roa
File: 1c1e2604-6355-4061-8e4d-164d58041afe.roa (raw, json)
Hash identifier: NLpXH1N5sgfMwlpwVY9U3hdlQv6BdNb84ezP2S2q7Ag=
Subject key identifier: B0:9F:DE:45:59:FE:51:CC:32:D9:E1:03:A2:D4:FC:9E:97:7E:5A:A8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4D1E679163C947624EE47F16B6CD980289689B08
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c1e2604-6355-4061-8e4d-164d58041afe.roa
Signing time: Sat 18 Jul 2026 00:20:34 +0000
ROA not before: Sat 18 Jul 2026 00:20:34 +0000
ROA not after: Fri 16 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 66.219.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:1e:67:91:63:c9:47:62:4e:e4:7f:16:b6:cd:98:02:89:68:9b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 18 00:20:34 2026 GMT
Not After : Oct 16 23:59:59 2026 GMT
Subject: serialNumber=06593d5e47770983e5d14c8a69a73444b10d0316bfa0da6852011312b30137dc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:00:9a:b0:44:ce:1e:ac:02:e5:73:5e:b9:
8c:2b:da:50:0a:89:ed:aa:f5:60:54:29:69:9b:48:
8d:80:db:87:ab:a8:f4:38:72:ee:5c:8f:df:7c:1a:
96:e0:34:80:e8:31:97:ef:74:e1:e9:14:23:8b:2b:
db:c7:d5:73:71:ed:76:f1:28:5b:7e:bf:03:45:36:
cf:53:c6:ee:ff:8a:f0:97:da:0e:e9:f7:d5:a0:0c:
c6:de:58:25:ef:90:02:35:dd:fb:62:31:5e:10:bd:
d8:07:91:1a:d7:aa:38:bd:4c:08:4b:6a:4f:a5:9c:
ad:15:4d:d7:92:36:8a:16:78:51:6e:06:36:63:2a:
1f:cf:8c:f5:7a:c1:e6:f7:bf:7a:03:72:56:af:04:
16:09:64:30:98:f7:7c:d1:c1:61:59:3c:98:6f:dc:
5d:3a:a6:08:8e:33:5f:b3:50:d9:9d:36:a6:64:d7:
4d:9a:48:4e:e7:56:65:31:64:74:ea:d3:55:86:7e:
ce:7a:77:ff:50:94:aa:41:9b:17:98:d8:00:a8:6d:
65:23:11:e0:92:01:ba:a8:4e:7f:a7:43:bb:c2:60:
2d:88:d8:8d:75:fd:99:2c:bc:73:d1:6f:8b:68:cc:
aa:7f:5e:b2:1d:3c:62:fc:59:9e:a1:95:c7:2b:3d:
9e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9F:DE:45:59:FE:51:CC:32:D9:E1:03:A2:D4:FC:9E:97:7E:5A:A8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1c1e2604-6355-4061-8e4d-164d58041afe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.219.64.0/19
Signature Algorithm: sha256WithRSAEncryption
70:ae:62:c7:4d:a0:ae:40:ef:56:34:0d:42:ac:55:3c:2e:cb:
1b:1d:ab:15:5b:ad:57:7c:ba:60:4d:c3:5e:22:a6:07:bd:d8:
87:ae:ab:88:62:19:35:d0:a1:71:a1:f0:2a:13:f3:40:02:97:
5b:be:e9:fe:fa:d6:1b:88:0d:0a:59:fa:1a:44:77:7e:a2:30:
53:c4:56:a2:66:8a:c6:93:95:02:18:c3:98:7d:05:30:13:5b:
18:61:d3:8b:50:2d:12:58:a9:ba:60:af:f2:3d:67:d3:4f:f9:
cd:ee:66:fb:75:3e:65:0d:8e:ef:c7:0f:fc:b1:e2:e3:5b:8a:
e3:8c:b4:68:64:15:80:c2:2c:fc:07:71:9c:87:b6:66:88:73:
5d:68:cd:4d:75:f7:10:1d:d1:a2:d9:f9:56:43:e3:da:de:f4:
d4:fa:70:41:3b:1f:e9:b1:17:ed:9b:9b:5d:9f:a6:1c:7b:0c:
5b:88:7c:21:49:be:32:a9:ab:d4:69:82:e2:5e:0e:35:6d:18:
a4:62:3d:e4:32:c0:63:d0:42:89:06:d7:e7:f3:f2:ef:1f:31:
a8:46:0b:62:51:9d:f0:85:a3:41:e3:d9:9f:63:49:8f:7f:44:
d9:fb:e2:02:1d:53:e3:dd:aa:3b:fc:14:12:91:c4:97:73:c6:
a7:29:74:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:23 2026 by rpki-client