
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d95bd62-e681-4cef-a026-fbb2d2eb1ef1.roa
File: 2d95bd62-e681-4cef-a026-fbb2d2eb1ef1.roa (raw, json)
Hash identifier: GD+D8E8H5D67tddsR4TPhP8L5+nX7s4iEzqTdq8Z7Dw=
Subject key identifier: C4:1B:BB:45:1D:31:69:00:F0:A5:2C:C9:9F:C1:53:D3:76:C2:08:1E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 75102F1D27D3191ED802915134DBF30C6CC40BF7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d95bd62-e681-4cef-a026-fbb2d2eb1ef1.roa
Signing time: Mon 20 Jul 2026 00:10:08 +0000
ROA not before: Mon 20 Jul 2026 00:10:08 +0000
ROA not after: Sun 18 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.87.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:10:2f:1d:27:d3:19:1e:d8:02:91:51:34:db:f3:0c:6c:c4:0b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 20 00:10:08 2026 GMT
Not After : Oct 18 23:59:59 2026 GMT
Subject: serialNumber=ce88565dd3b24c907e954745adfb776b5444903513a45a7553182a9b0e5b25b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:83:24:e8:29:4e:a7:3d:ec:ee:94:5e:5c:8f:
5c:94:1d:ff:aa:69:2d:44:3f:73:25:16:83:a3:c8:
30:d1:4f:28:a2:a7:df:9e:a5:ee:7c:30:43:d9:bd:
4f:7b:66:72:e9:89:59:76:81:ba:8c:bb:fa:f9:0b:
a5:f3:54:42:a6:f6:18:08:33:fd:9d:c7:35:9f:f5:
a4:30:2f:f8:2f:83:95:c6:7d:28:db:d1:88:1d:b2:
87:1e:b7:18:7a:3c:e5:cf:5b:e3:f0:11:f9:2d:13:
0b:b7:ad:4c:b7:b0:15:69:0b:75:28:ed:e3:82:4c:
28:d3:c7:cc:8d:bb:81:76:26:bb:aa:20:c3:da:81:
5c:ff:e8:d3:b1:15:4e:32:0f:3e:30:1f:8e:42:ab:
86:f2:85:c9:ae:63:b5:fe:d7:90:f8:a5:c3:06:47:
80:91:db:a8:ff:5b:b4:a8:6a:df:fa:32:0d:c7:06:
ec:f3:d6:5d:ec:2a:6c:17:2c:f2:81:ac:e5:8d:af:
94:05:14:b3:b0:e3:71:4c:dd:26:10:1c:2a:a9:3b:
0b:ac:36:ba:0d:86:52:66:8e:2f:19:0c:b7:48:41:
e6:c1:20:6f:3c:cb:b5:3e:f7:29:26:56:c1:ec:c1:
c9:43:67:5b:bd:8b:db:58:5d:e2:e6:5c:ef:30:4e:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1B:BB:45:1D:31:69:00:F0:A5:2C:C9:9F:C1:53:D3:76:C2:08:1E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d95bd62-e681-4cef-a026-fbb2d2eb1ef1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.87.128.0/18
Signature Algorithm: sha256WithRSAEncryption
41:48:9e:b1:53:07:57:52:ff:63:c0:35:21:fa:d3:06:de:ba:
bb:05:94:50:23:d6:41:9f:52:38:a2:32:c5:1d:52:6f:ac:2c:
9b:38:88:a6:7d:14:0d:ea:60:ac:d7:3a:93:4e:3b:bc:fb:64:
32:69:88:4f:ea:69:e3:a6:39:db:11:34:45:d8:56:93:71:79:
c0:7b:84:48:fb:82:7a:98:5d:e1:ac:e5:b4:69:37:4f:d7:c1:
ec:b5:05:bf:61:6a:d0:fb:04:68:d9:10:3a:2b:68:4b:4b:7e:
98:80:e8:25:9d:28:07:b5:e2:bb:d1:ae:ef:9f:fd:d0:48:2d:
1f:e6:47:3c:db:52:95:a1:52:78:8d:40:aa:03:16:96:4b:60:
e3:8a:81:ee:5e:40:5d:a6:55:9a:f8:c3:37:77:a8:d5:c1:74:
c4:a8:e5:90:69:9b:6b:35:9b:51:85:fe:13:e9:4a:8f:14:de:
f0:6b:64:46:d0:c2:53:ab:43:ae:85:cb:2e:89:06:bc:48:d1:
4b:d1:69:b9:31:ac:0e:ab:c8:02:0c:ee:0d:06:4c:48:61:5e:
5e:c4:20:62:1a:75:6b:5e:57:cf:a3:9a:63:ab:34:05:79:7b:
9e:f8:cc:e0:77:08:00:07:4b:48:9a:fe:59:dc:80:af:58:8b:
e8:fa:a2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:34:53 2026 by rpki-client