
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4802a4b1-faa7-4bd0-b356-7bf85c5ef7f8.roa
File: 4802a4b1-faa7-4bd0-b356-7bf85c5ef7f8.roa (raw, json)
Hash identifier: S9hdjVyiIuv5h38vK4QCBKSlv1Iu5t6JESlfqzpSKig=
Subject key identifier: 1B:C8:0A:88:D7:A6:FD:8E:ED:F4:DB:79:9F:E9:8C:0E:27:9E:E2:12
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 281EF92331E31BEE874EAC351BCA540CA8F71361
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4802a4b1-faa7-4bd0-b356-7bf85c5ef7f8.roa
Signing time: Mon 04 May 2026 01:10:40 +0000
ROA not before: Mon 04 May 2026 01:10:40 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:1e:f9:23:31:e3:1b:ee:87:4e:ac:35:1b:ca:54:0c:a8:f7:13:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 4 01:10:40 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=cf6bd7c98c5585a4eada452af60f10008169ca679f89814cc697497827c1ac66, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:15:c2:eb:e8:0e:98:13:bc:02:ec:a1:19:
a7:85:4b:a5:42:04:60:bd:22:f6:fc:f2:93:be:81:
1b:ba:0e:fc:fa:25:aa:f5:b2:5a:d2:9b:99:ac:d6:
83:61:18:7f:93:ab:03:3b:b5:14:f0:03:0a:7e:8a:
13:aa:59:db:a5:2c:e7:7d:28:81:9f:0b:89:3b:52:
a2:b9:10:f7:01:7a:06:ce:24:20:09:50:31:1f:57:
cb:ea:a0:14:d5:e5:44:9c:c6:45:1c:5a:ca:0a:97:
8c:31:bd:21:25:d2:6e:c7:f0:91:6e:18:8c:37:b9:
23:35:7a:5e:a5:af:8b:91:85:3e:75:0f:1e:b1:e6:
9e:38:bc:7e:fc:75:d1:cb:57:50:1f:02:00:be:07:
12:41:e1:2e:3b:5f:e7:04:7d:05:e5:cd:82:68:38:
4a:08:39:e4:50:1e:bc:30:dd:6c:21:3d:a3:81:c0:
30:c9:af:61:77:3e:ac:10:39:e7:3e:a6:bf:7d:9e:
7d:f2:17:83:bb:b9:49:64:30:bf:c4:64:cd:9b:80:
e7:9f:7f:e0:cb:1c:a3:9e:bb:7c:9f:2b:60:f0:66:
21:41:b3:33:1f:8f:61:7b:13:87:2e:97:c1:50:20:
17:90:3c:a7:b5:41:a0:13:ba:f3:e0:8a:e7:c5:84:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C8:0A:88:D7:A6:FD:8E:ED:F4:DB:79:9F:E9:8C:0E:27:9E:E2:12
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4802a4b1-faa7-4bd0-b356-7bf85c5ef7f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.224.0/20
Signature Algorithm: sha256WithRSAEncryption
46:8b:d4:98:75:01:dd:5e:b9:10:24:3b:06:a7:50:bb:8c:70:
90:aa:58:ff:ea:b6:35:6c:79:3e:bd:bc:8f:e7:16:f1:f8:06:
50:c3:95:61:2a:8d:cc:75:a0:11:74:a9:68:48:3a:c6:c3:8f:
8d:be:6e:a1:ca:be:f2:04:a2:1e:92:24:73:42:72:59:49:da:
d1:48:da:fc:a5:d5:0a:50:60:c0:e2:34:1c:f4:06:30:25:fe:
5a:f5:61:fd:38:3b:38:15:1f:6e:e5:00:08:17:54:f6:1e:54:
a9:9c:44:56:5c:44:99:b1:4a:53:e8:8f:a4:3f:6b:e0:81:cc:
44:ed:0e:f0:e2:8b:8c:d0:70:ba:8d:49:41:85:72:72:e0:5e:
b3:77:15:ca:9e:3c:55:5b:5b:fe:e6:76:5c:7f:ff:ea:27:4a:
95:9f:a1:79:63:1f:06:e9:23:ab:c0:d7:62:e7:9f:3b:da:07:
29:ba:3d:34:9c:e3:97:85:4c:d5:11:ba:7b:fb:7f:f1:91:a7:
27:f1:a7:b6:c9:e9:b0:13:20:04:dd:5f:60:24:e9:1d:e5:82:
e0:58:23:92:c9:7e:0e:1b:7b:de:b2:e6:bc:b1:14:d6:89:77:
14:72:ae:30:a1:c3:8f:46:83:46:a2:68:85:61:7b:ee:fa:95:
d7:40:02:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:03 2026 by rpki-client