
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e0224f-add1-4750-9889-4168c3af1743.roa
File: 22e0224f-add1-4750-9889-4168c3af1743.roa (raw, json)
Hash identifier: W+A2k4vnoh3niYTNvLpdUh7gA3CHdRDSz7ehljMp0qo=
Subject key identifier: D9:27:6E:20:ED:8F:D9:0E:65:55:3B:86:BA:13:FA:B9:6E:19:88:C0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 04FB35F387228EB07E20514D287D96DD183410FB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e0224f-add1-4750-9889-4168c3af1743.roa
Signing time: Mon 20 Jul 2026 00:01:22 +0000
ROA not before: Mon 20 Jul 2026 00:01:22 +0000
ROA not after: Sun 18 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 104.153.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:fb:35:f3:87:22:8e:b0:7e:20:51:4d:28:7d:96:dd:18:34:10:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 20 00:01:22 2026 GMT
Not After : Oct 18 23:59:59 2026 GMT
Subject: serialNumber=cb1d46aef70e1bf35eb5164538ddcc33e18a7f2bd97a51a9a7460a92d8c2a65c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:6c:8e:c7:00:1b:3f:ac:80:50:25:ba:92:
f2:2f:d8:0d:c5:b4:ee:d7:20:86:da:77:8e:f1:6c:
15:16:96:6c:f0:1d:01:09:58:d7:7e:63:aa:7f:75:
c7:f1:b5:1d:66:8c:3d:8d:16:3e:f5:4c:d7:28:3b:
cf:35:1c:60:e6:3c:12:94:91:fc:00:16:bb:a5:c3:
fe:56:f5:f7:f2:79:a6:23:f9:23:7d:90:e6:f5:7d:
fd:3e:5a:2b:8a:7e:b5:68:80:cd:d5:32:73:49:6b:
81:4a:bd:6a:ab:b8:f6:b9:85:cc:b4:2f:3a:15:e9:
d0:b7:f5:cf:1f:9f:26:a6:5e:ef:ab:59:3d:df:13:
3b:4b:31:73:99:fc:c1:98:6c:4e:60:8b:05:bc:6e:
0e:ee:78:f5:cf:95:f7:6c:94:66:ad:3d:9d:c0:39:
bd:a8:7a:26:a5:4c:9e:a7:c0:38:f7:8b:63:f0:df:
8b:b3:74:80:2e:f8:09:40:4e:96:86:78:e0:cf:75:
c2:b5:f8:16:01:52:28:6a:30:05:1c:db:39:1d:e4:
70:b9:99:53:25:6b:cf:ad:30:54:41:94:9a:08:4c:
1e:7b:aa:32:ee:bf:a8:a5:88:85:c7:a3:fd:aa:99:
1d:6d:4e:e0:29:03:de:4e:e7:fe:88:0a:ae:45:48:
92:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:27:6E:20:ED:8F:D9:0E:65:55:3B:86:BA:13:FA:B9:6E:19:88:C0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/22e0224f-add1-4750-9889-4168c3af1743.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.153.112.0/21
Signature Algorithm: sha256WithRSAEncryption
c2:ac:2f:aa:88:db:a3:71:69:b2:c4:fc:2f:97:df:c5:71:2c:
92:83:68:4a:48:cc:54:72:72:bc:55:43:32:4d:dc:95:49:6b:
a3:75:f2:46:d7:a9:0f:04:51:d7:7c:56:d0:30:73:40:d3:7f:
ce:43:b1:12:8b:a3:52:85:ae:96:fc:57:2b:f9:68:7a:a4:6d:
16:31:0f:91:f8:5f:a1:73:4d:fb:94:59:8d:f7:a3:5b:87:88:
43:78:55:75:19:0a:7c:f1:99:1f:42:15:2b:05:8a:28:3e:1a:
29:e4:ba:b6:b1:ee:61:76:ee:bf:46:f9:14:e8:71:88:d6:fc:
fd:0c:2a:31:d6:b4:d0:19:ff:ee:fb:58:74:90:51:63:05:01:
c6:9b:66:4e:cb:0a:0f:05:83:7f:3f:2c:51:7c:ac:57:fd:f1:
5b:78:b8:77:38:a6:f9:ed:7e:60:58:ef:ac:30:b3:3a:87:4c:
6f:49:2b:bf:86:2e:b6:14:9e:1a:e7:6b:eb:50:8a:67:84:26:
01:53:ea:c6:1e:ee:3a:e6:d5:6c:98:d6:6f:62:f5:71:46:f6:
67:d3:29:00:80:fa:c2:78:6f:0f:e2:58:d4:b8:20:76:1f:74:
d2:a1:be:1c:0c:ca:8c:14:dc:16:cc:89:0a:72:79:a3:8c:e5:
56:c3:71:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:21 2026 by rpki-client