
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52df3ae7-411b-4e98-8896-0a443cdbffe5.roa
File: 52df3ae7-411b-4e98-8896-0a443cdbffe5.roa (raw, json)
Hash identifier: la8m61NBVbnRHZZRrPgk6uHNw4LgeUv9os6Sr9LYjjU=
Subject key identifier: 6B:54:C7:1C:D8:81:60:2E:7C:89:FE:E9:3A:75:23:7E:75:AA:76:F1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 19F3CB04B72422ED822EB499193378EBFEFF3A30
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52df3ae7-411b-4e98-8896-0a443cdbffe5.roa
Signing time: Mon 20 Jul 2026 00:30:44 +0000
ROA not before: Mon 20 Jul 2026 00:30:44 +0000
ROA not after: Sun 18 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f3:cb:04:b7:24:22:ed:82:2e:b4:99:19:33:78:eb:fe:ff:3a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 20 00:30:44 2026 GMT
Not After : Oct 18 23:59:59 2026 GMT
Subject: serialNumber=6983af1725d7c7d7f8494ccefecfe1618e02dc719ccf4d2bcb3fdd132b4b9c53, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:b3:a4:7a:26:56:24:c2:2b:6e:5f:63:c8:
30:98:65:63:48:9c:ed:2d:39:7b:2c:9a:34:87:71:
58:fd:a3:94:10:6f:a0:5c:22:55:81:87:48:6c:a3:
70:50:8a:1a:9b:55:fa:00:29:ab:64:35:25:04:37:
a0:17:2d:a0:f6:72:70:aa:22:03:91:01:d8:49:0c:
1d:ec:00:5b:1f:f9:17:d5:28:dd:73:e3:10:d7:0a:
40:71:30:cd:e0:b5:ca:a3:1d:4f:e1:d2:d6:86:9e:
7b:4a:17:25:de:b7:18:b4:69:16:06:ef:47:9a:ef:
51:57:4f:5a:ab:d6:a1:b9:ad:b1:88:1c:16:eb:63:
02:84:3b:10:ef:79:95:c7:4c:60:7e:2b:80:31:1f:
f1:3c:16:13:84:b8:cc:25:06:8d:bf:3a:90:75:65:
40:68:82:08:55:6e:00:9d:ec:8c:a4:22:3f:d9:7d:
43:21:df:53:34:6d:bf:18:58:70:43:b0:23:9c:84:
a1:eb:17:8c:fe:06:12:c8:80:5d:63:9f:64:11:58:
2d:68:99:67:68:a0:9a:51:46:20:d7:76:f1:dd:ce:
f2:a2:17:12:9b:0e:f7:cd:91:37:9e:7b:5e:fa:e3:
d3:a2:98:6b:c5:19:11:d2:e1:4f:47:9c:d3:7f:3a:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:54:C7:1C:D8:81:60:2E:7C:89:FE:E9:3A:75:23:7E:75:AA:76:F1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/52df3ae7-411b-4e98-8896-0a443cdbffe5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.84.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ee:bc:03:62:2b:dd:0a:3c:49:12:92:fb:c2:57:fd:82:ce:
0a:2d:43:40:cc:a0:21:6f:c3:fb:1f:51:65:13:0c:94:11:a2:
b5:06:ee:84:7f:d1:42:93:fc:93:5e:47:fb:0e:f3:f4:71:29:
75:f9:c8:32:17:97:16:e3:36:c4:95:ed:53:53:e8:be:1b:92:
c6:ac:a7:c1:96:87:96:65:7f:19:a5:1f:13:fd:95:7b:22:8e:
10:34:8a:80:07:b9:77:40:58:e2:35:83:8b:c6:e8:3a:d4:5d:
f9:06:71:00:83:61:0a:40:f9:8f:d5:3b:71:23:59:06:67:c7:
e1:bc:12:c1:e5:d3:7a:40:2d:a9:09:c8:e9:82:14:5e:2e:92:
60:94:55:33:5b:06:95:df:d5:d3:e0:66:9b:6e:f0:6b:ed:93:
e4:09:ba:05:c4:12:60:37:72:8a:bc:18:59:26:55:5f:b4:84:
fd:76:ae:49:41:d0:ab:9f:fa:9a:45:75:8e:4b:3d:a7:29:7d:
d3:d6:3f:f7:3b:fc:2a:31:97:b1:b6:91:41:3c:65:0a:f1:a5:
71:c8:ea:a7:9c:35:49:30:1e:a1:01:40:e0:fb:49:59:0e:1a:
dc:59:f1:4b:da:22:d4:87:4e:79:e0:9c:21:e7:6b:a3:7f:e9:
d5:83:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:29 2026 by rpki-client