
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51296aed-a82d-4a1c-bdf1-af3d39a04a18.roa
File: 51296aed-a82d-4a1c-bdf1-af3d39a04a18.roa (raw, json)
Hash identifier: rO8a6iSh2JC45f9+ZomBWQ3mmvhh4JkaVqrjhTRnBCA=
Subject key identifier: 7F:1B:D5:EB:90:C2:65:6F:8D:DC:26:52:CB:C4:74:10:4A:1C:DE:26
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3884733AA4D205450043AF8ECAE66120B02D03D2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51296aed-a82d-4a1c-bdf1-af3d39a04a18.roa
Signing time: Sun 19 Jul 2026 00:00:44 +0000
ROA not before: Sun 19 Jul 2026 00:00:44 +0000
ROA not after: Sat 17 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 45.33.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:84:73:3a:a4:d2:05:45:00:43:af:8e:ca:e6:61:20:b0:2d:03:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 19 00:00:44 2026 GMT
Not After : Oct 17 23:59:59 2026 GMT
Subject: serialNumber=d2086ab39a4b3f562ab1afce225bf252f284dee45afc9c62c6be72c216616851, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2e:d5:c7:cf:36:88:7d:3b:a6:d0:51:ef:67:
41:82:66:b4:98:4d:0e:63:ed:b2:32:80:9b:da:83:
5b:6c:49:ea:6f:60:a1:b6:df:86:1e:b5:aa:34:72:
bd:9a:f4:25:9c:7c:08:ac:3a:7a:21:3c:ab:e1:5a:
41:0c:13:bc:29:9b:f0:1c:a4:94:0d:dc:de:68:0b:
81:7d:26:21:49:02:1e:fa:69:9a:3d:33:b9:02:9c:
4b:dc:83:5c:74:b3:9d:50:eb:7a:ae:03:2b:f2:93:
b1:3a:65:20:22:b2:b5:7a:59:84:92:1f:2b:3c:23:
30:6a:c1:3b:fe:92:7a:a1:c8:15:9a:ac:02:18:98:
1d:fe:b3:45:4a:30:03:fd:6f:79:d9:b9:c7:1f:7e:
bd:d0:0c:87:fd:96:db:de:97:66:34:e4:54:e1:09:
00:b0:69:1e:12:94:53:b3:71:40:1d:0a:84:a5:ad:
d3:08:a3:87:52:b4:63:db:17:5e:46:04:28:be:5a:
7f:48:34:dd:e3:61:bd:3e:9f:44:6b:30:ed:44:6b:
0c:03:1a:7a:bc:3e:e1:4b:b6:fd:34:87:bd:9f:8c:
ff:6e:1f:2a:50:94:c5:22:a7:ee:19:22:71:17:c4:
64:26:56:83:e9:59:1a:98:14:ed:84:cf:d9:fa:f3:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:1B:D5:EB:90:C2:65:6F:8D:DC:26:52:CB:C4:74:10:4A:1C:DE:26
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51296aed-a82d-4a1c-bdf1-af3d39a04a18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.33.176.0/24
Signature Algorithm: sha256WithRSAEncryption
45:04:97:35:73:cd:87:c0:38:d1:c1:28:5d:4c:90:51:0b:62:
15:e9:c4:89:de:30:8b:7c:8f:3b:fa:cf:ae:9c:8d:44:97:20:
d1:cb:5f:94:19:95:1b:dc:94:32:31:3b:f8:20:5b:df:58:96:
b7:f4:67:6b:c9:c1:97:ee:61:5e:c5:ef:de:2d:f8:b2:e3:7f:
3c:2f:6b:8d:f8:db:5e:0b:dd:24:f5:76:22:4c:16:2d:0b:98:
e0:1e:4c:e1:dd:05:31:09:33:c5:84:2a:eb:b5:9d:66:ab:02:
a1:54:91:19:c8:e3:21:7a:56:85:2d:a5:af:64:e5:17:3f:57:
ba:6d:da:01:35:ac:59:a5:d7:3c:32:07:03:bb:e7:c3:40:15:
36:aa:fb:3d:72:d3:c9:ab:da:40:e3:58:ae:cc:46:05:82:34:
a4:6c:b2:93:da:82:8c:3e:4c:e3:db:29:63:89:b8:00:17:50:
21:11:88:e3:63:95:f7:6a:8a:d7:fa:9f:70:e6:ad:34:41:66:
43:e2:53:f1:61:1a:b1:2b:14:0c:3d:38:7d:60:a8:8f:cf:e4:
5a:d6:50:f8:ca:fb:f9:ea:c8:2c:1a:73:c1:02:f4:da:dc:47:
89:99:f2:f6:71:63:cf:86:5f:ac:53:06:6a:c5:3c:d9:db:7f:
a5:03:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:17 2026 by rpki-client