
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48af1dfe-0e61-4862-8ae2-75b053bcc924.roa
File: 48af1dfe-0e61-4862-8ae2-75b053bcc924.roa (raw, json)
Hash identifier: 3VHFukLgmtTe3h6GtY5lD8CUjCP85wt0LCt1OJECMz0=
Subject key identifier: 25:F1:AF:D0:26:A7:5A:10:43:6C:35:E9:20:A9:14:AF:C8:70:D5:EB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6B4222CF3734DC895C74F910797E2B2DC95E1057
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48af1dfe-0e61-4862-8ae2-75b053bcc924.roa
Signing time: Mon 04 May 2026 00:21:28 +0000
ROA not before: Mon 04 May 2026 00:21:28 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 44.215.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:42:22:cf:37:34:dc:89:5c:74:f9:10:79:7e:2b:2d:c9:5e:10:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 4 00:21:28 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=df427479c0c0c0adb978ee237985f90b6d59ea937f901af7b5eb91da6763b873, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3d:51:d3:10:5a:dd:ea:9d:0d:59:e0:7d:8a:
c0:82:53:a9:ac:e3:44:d9:d3:85:59:37:50:f0:5a:
88:73:a9:cc:94:be:c5:b2:93:d2:74:9e:f2:c9:85:
f3:03:59:8f:32:7c:db:1d:dc:65:7d:87:67:74:1b:
82:c4:c2:26:a6:dc:7c:ef:65:65:32:17:93:a7:f5:
f8:d4:63:df:84:70:02:09:f5:2b:e1:e7:52:08:22:
4a:28:26:8f:eb:16:fd:46:5b:0b:7f:b3:d2:77:20:
8e:c6:f8:cb:25:ac:f4:33:a3:8f:bc:69:6c:04:a6:
b3:ec:2c:5b:10:de:f0:9d:f9:fd:28:3d:ab:f4:59:
87:05:d8:f0:be:1d:5a:65:c1:cc:e0:3f:9e:e1:87:
9b:e3:aa:bf:50:da:d7:93:9b:1e:af:90:a4:c6:8d:
0e:06:5c:93:73:44:5a:63:69:1d:80:f7:49:91:eb:
70:be:8e:3d:4b:8f:df:00:c5:ad:e6:6b:d4:b5:4e:
f7:e1:8c:f1:a8:d4:24:f8:5d:cf:37:85:13:57:50:
b7:df:68:83:82:8a:58:cd:e1:0d:0f:e1:5e:dd:90:
7b:0e:4f:02:d3:37:52:0a:7e:43:1b:ce:5d:72:5d:
60:80:dd:3c:2c:39:80:f9:ae:3b:a9:35:00:a8:22:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F1:AF:D0:26:A7:5A:10:43:6C:35:E9:20:A9:14:AF:C8:70:D5:EB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48af1dfe-0e61-4862-8ae2-75b053bcc924.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.215.136.0/22
Signature Algorithm: sha256WithRSAEncryption
be:9b:89:d4:9a:01:0f:1f:ff:b4:ea:29:1b:3e:cd:ca:8c:ba:
11:fd:31:a8:7b:2e:c5:30:bf:9c:b8:40:2d:b6:a2:42:f3:92:
2f:05:6d:2a:bd:62:fd:f0:f2:2a:fa:68:97:b9:bb:f2:11:b2:
4e:d3:c4:b9:e5:d0:1d:e6:49:23:52:dd:36:81:fa:04:34:99:
10:fd:ec:7d:80:3d:28:c6:7b:25:92:a5:6a:20:ad:44:b4:04:
eb:31:71:04:eb:1d:ec:97:6e:b0:dc:e8:fe:26:bf:a6:4f:eb:
41:80:56:96:4f:e2:15:e7:75:89:97:ee:59:0d:14:8d:ce:68:
e8:94:aa:97:5e:e9:d8:88:d4:74:ae:95:2e:94:a5:ad:35:20:
bf:d3:71:16:6b:7d:45:2d:2e:35:a1:2d:a6:9c:ec:66:42:6c:
8b:d8:89:4b:1b:43:66:bf:37:0a:34:7c:fe:2d:6c:c4:c1:4a:
ef:17:da:93:d8:55:a8:21:6d:17:76:48:d8:95:f8:e5:fe:a0:
ce:8a:05:a0:b9:6a:1b:5b:bb:29:2e:b1:c2:96:df:84:ff:dc:
41:92:02:c6:0d:83:18:9c:29:b0:52:78:dc:dd:9b:f3:2f:a1:
37:4d:e6:ff:a4:f1:fb:3a:cb:fc:45:b5:29:97:85:6e:7f:89:
4c:af:a7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:36:04 2026 by rpki-client