
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa
File: 58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa (raw, json)
Hash identifier: URIuTyJLP2EdLDfVTC5R41nin5ov1Hsxo0r8dYKMO5s=
Subject key identifier: 30:14:68:EF:07:2C:A8:BC:5F:18:55:EA:73:38:E3:45:DD:F8:EB:CF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3F589D7396154237FB472FB7472D1312D17E08E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa
Signing time: Sat 18 Jul 2026 00:20:04 +0000
ROA not before: Sat 18 Jul 2026 00:20:04 +0000
ROA not after: Fri 16 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.114.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:58:9d:73:96:15:42:37:fb:47:2f:b7:47:2d:13:12:d1:7e:08:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 18 00:20:04 2026 GMT
Not After : Oct 16 23:59:59 2026 GMT
Subject: serialNumber=0febc676771602b64e4191168595932aa3263b22ab763460626327477c93136a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:9b:22:70:7e:21:54:c4:17:4e:bc:b4:58:
55:58:6f:bd:b7:d2:67:40:7e:e3:b4:4e:76:af:60:
1d:3f:57:97:20:b7:bb:4d:a9:1a:55:97:40:e7:79:
e8:8c:c0:0d:31:0f:aa:7f:0e:2e:3f:26:bf:bc:85:
17:34:fa:8e:38:b0:24:b1:bd:5c:70:13:a5:23:06:
b6:23:da:0b:7d:9b:04:a8:ed:8a:26:cb:ac:30:14:
2d:fb:67:7f:2a:3e:27:7d:63:71:94:ba:d4:77:86:
d7:4d:1d:c3:5b:be:cd:32:fe:1e:15:de:76:ef:05:
98:39:ce:2f:58:10:1a:7f:18:08:1b:6b:d0:94:1f:
c6:4d:c0:49:35:3b:f4:a0:9e:0c:0a:72:6e:e1:02:
9d:83:cd:ea:74:92:25:ca:ce:ed:3c:8b:87:08:33:
72:01:d6:8f:32:87:25:f9:36:e0:ca:bc:c7:0a:64:
57:0f:32:00:99:d3:1f:11:6b:a7:4e:08:c6:f3:33:
f8:77:f1:22:77:1d:73:5b:32:e9:7a:41:2f:3f:74:
b8:33:eb:11:bb:30:02:ff:15:69:c3:eb:6d:43:0c:
5d:c4:ac:0a:f7:64:62:2b:4d:62:35:8e:e8:73:62:
b0:bc:fe:bd:c4:9e:de:9e:ef:a1:f7:17:ce:df:62:
f5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:14:68:EF:07:2C:A8:BC:5F:18:55:EA:73:38:E3:45:DD:F8:EB:CF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/58b96c78-954b-41c2-87ff-4cf8f7be9e27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.114.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:33:e5:0b:8d:10:a4:97:5f:ae:9c:f3:26:8d:28:b3:76:37:
65:bb:7b:cd:bd:2c:aa:33:ee:af:08:42:30:53:e1:8e:13:cb:
3d:07:13:14:a9:ec:27:4f:3e:46:cd:f6:eb:c4:61:d9:ef:08:
8c:f7:68:70:81:fd:47:b7:ad:4e:ef:8f:f0:84:13:5b:7d:84:
65:6c:cd:b7:c8:0e:de:6d:f9:43:e5:f9:dc:0b:ce:be:f2:e4:
f7:6b:d0:c5:44:2a:94:ad:ba:e3:49:ee:3d:64:3e:d2:b1:23:
fe:7d:cd:a9:3b:be:67:cd:10:41:c4:c3:f6:3e:50:cd:df:79:
66:a1:2d:09:dc:dc:2d:67:93:39:49:80:49:62:98:74:b6:16:
36:31:93:15:1c:ae:1f:2c:a3:b7:2b:0d:2d:12:26:4c:f2:92:
74:0c:4d:32:8b:85:0a:77:6e:74:fb:79:29:9f:0b:88:a5:72:
46:78:7d:4f:f4:8c:87:74:4f:d5:b5:99:9a:6a:49:d3:28:56:
78:74:49:d2:28:b2:ee:af:37:c3:0d:2a:c2:ba:c0:67:00:4a:
c2:01:c2:ff:c8:61:4a:3b:88:bd:25:97:fb:df:50:96:27:1e:
e9:17:e9:17:67:59:44:6f:b3:b0:20:e0:1b:2c:e0:c4:fe:94:
be:69:05:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:46 2026 by rpki-client