
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4d0f55-3bb6-430a-8ccc-2c0cbf50d74a.roa
File: 2a4d0f55-3bb6-430a-8ccc-2c0cbf50d74a.roa (raw, json)
Hash identifier: dSuHvHvxcTenaJWwvEDfoa76IL5eWu1snkfQm234Lks=
Subject key identifier: 26:8E:20:89:88:75:54:CF:8B:B0:AA:64:95:36:A9:C5:54:0D:D3:E3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 147AF98D0B406A0D94A8F0432CA239F7ED10C38E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4d0f55-3bb6-430a-8ccc-2c0cbf50d74a.roa
Signing time: Sat 18 Jul 2026 00:31:20 +0000
ROA not before: Sat 18 Jul 2026 00:31:20 +0000
ROA not after: Fri 16 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 146.206.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:7a:f9:8d:0b:40:6a:0d:94:a8:f0:43:2c:a2:39:f7:ed:10:c3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 18 00:31:20 2026 GMT
Not After : Oct 16 23:59:59 2026 GMT
Subject: serialNumber=99d6466210a50fd8cbdeb629d39c5d64fb06ac4b3bcca3be3d71c64f8f697149, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:26:ea:61:ea:44:67:e8:b0:87:ed:bc:09:
2a:09:68:b0:0a:68:49:4b:c9:a6:3e:32:e0:2e:35:
e5:88:fb:6f:5b:0f:6f:99:79:ab:1e:e7:97:41:79:
d8:09:c1:2a:33:25:9f:e8:c9:a8:e7:6c:56:a8:40:
2f:9a:b0:19:64:93:7e:e2:67:bb:27:a5:d3:59:81:
cf:49:9f:ec:31:85:e0:c2:ac:53:d0:99:db:35:04:
a2:3f:8c:e3:b4:bb:df:c8:3f:5d:29:72:41:02:0c:
76:b8:72:80:c8:36:fd:b4:a3:70:0f:0e:63:dd:85:
96:b6:55:16:68:9c:47:b7:df:33:1c:4f:d3:eb:6a:
57:7b:b0:b7:07:04:a2:6b:c8:f5:fd:03:3b:43:51:
53:a9:f2:30:92:6b:5b:b3:a4:bb:c5:47:25:cf:de:
f8:5e:95:d0:bf:c4:53:3e:2b:66:9e:e3:70:bf:98:
ab:91:29:62:98:a0:f9:3b:9e:33:16:ba:d8:bb:ab:
1a:ea:1d:79:d3:42:a5:c7:0f:df:49:88:15:a6:8a:
7f:a0:1d:37:9a:6b:36:ed:a5:a2:bb:30:d7:e3:85:
f8:6d:e6:98:71:73:05:09:d4:9b:7c:fd:fb:ea:fb:
55:87:05:8f:10:0c:d8:5e:ea:b9:24:8a:08:54:ea:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8E:20:89:88:75:54:CF:8B:B0:AA:64:95:36:A9:C5:54:0D:D3:E3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a4d0f55-3bb6-430a-8ccc-2c0cbf50d74a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.206.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:e1:d2:f6:34:b2:8b:42:17:3a:f0:f3:3f:01:67:06:b2:fd:
5a:35:04:37:90:cb:3e:1c:57:b0:95:79:ee:ef:80:86:59:b4:
6b:2a:02:c2:50:1a:69:5e:38:03:af:49:d5:92:86:cb:7a:e5:
6a:f3:af:84:5c:a1:6a:93:49:a5:6e:e9:e1:9e:d8:d2:40:b6:
01:44:e8:82:e3:af:c0:53:15:72:47:df:26:f2:c4:1e:f1:1d:
0c:f3:d8:ad:71:83:5d:0f:38:35:39:19:09:82:8c:28:8e:da:
e8:8f:5e:09:56:9e:cc:60:e8:8a:f0:df:a3:35:c9:73:ed:c3:
17:49:53:44:bc:44:2d:9b:2b:f2:81:5e:9e:9a:7b:06:03:f8:
b9:53:41:9c:dd:30:e2:4b:f9:ad:f7:aa:0a:ea:7e:11:92:3c:
3f:ae:c3:b1:48:b3:ad:b7:a2:31:b0:00:c3:40:17:31:1c:9d:
96:6d:df:2e:b6:7b:a8:4d:c2:cc:41:37:d1:b0:65:56:ba:54:
7e:5e:82:dd:6a:8e:2b:21:c5:8b:8c:e8:62:f6:94:5e:3b:ee:
6d:84:15:23:6d:d7:5e:fb:fe:fd:ce:aa:17:ed:4f:d0:99:b8:
ef:0c:99:a7:51:9d:b1:48:d5:62:e5:53:d8:fd:e4:68:e3:c1:
43:f9:57:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:08 2026 by rpki-client