
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60e798f1-2c72-4195-b34c-7c1c6171e9a3.roa
File: 60e798f1-2c72-4195-b34c-7c1c6171e9a3.roa (raw, json)
Hash identifier: qiU27Uwy/S51z7fVokzQILPzDSPk8V/K1qNsH6qjv9k=
Subject key identifier: 5A:7D:6A:7D:55:D9:9B:AA:C2:C1:FB:8F:D0:99:BF:37:5B:D2:91:48
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5231B352E597A092A224C5079FDCBBB39978E2A4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60e798f1-2c72-4195-b34c-7c1c6171e9a3.roa
Signing time: Wed 06 May 2026 00:11:39 +0000
ROA not before: Wed 06 May 2026 00:11:39 +0000
ROA not after: Tue 04 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:31:b3:52:e5:97:a0:92:a2:24:c5:07:9f:dc:bb:b3:99:78:e2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 6 00:11:39 2026 GMT
Not After : Aug 4 23:59:59 2026 GMT
Subject: serialNumber=3be30fedb557e7bacb531914837df0b8ee67e21e2ad20db5ed1ba46e06f58dac, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:f0:98:0e:ef:f9:2c:fc:05:c2:26:e7:12:
62:50:ce:b4:42:0d:b9:cc:45:85:f7:bb:07:e6:f7:
e7:36:a5:9e:c3:c1:fe:2e:d8:2a:d8:66:d6:3f:12:
2c:56:af:f2:d4:df:67:fa:ff:b6:b5:89:a4:59:cb:
9c:61:c8:7e:9b:2c:11:fe:78:c9:9d:cc:1f:9e:03:
48:11:bd:5e:bc:75:98:6e:a7:33:8b:1e:ba:ef:a4:
48:7a:2f:e4:7f:dc:4a:17:6a:58:8e:99:ec:64:53:
9a:65:22:db:3f:8a:bb:a4:2b:91:41:0d:dd:5c:7e:
8e:c9:76:3e:ea:de:10:5d:ce:f7:e1:8d:75:21:d9:
df:ca:20:c4:8d:d2:5d:c3:f8:a5:63:6d:a4:ba:d3:
f3:80:4c:c6:f7:4f:c2:9d:2e:83:40:7b:2e:f2:0f:
eb:84:b5:82:d9:8c:ee:5b:3f:21:01:ca:22:64:9d:
8b:a6:ff:ea:2e:81:fd:fb:cf:82:bb:15:07:2e:47:
85:cb:5d:6e:a6:21:25:2d:d0:0f:93:b3:8b:9d:5e:
3d:26:b4:6a:10:d2:9c:93:1b:60:b7:62:bd:99:6a:
48:84:44:4d:1b:a4:ef:18:ac:3d:1f:8b:4b:6a:fd:
a4:99:17:6c:d6:be:47:0e:d0:24:20:d7:ba:17:43:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7D:6A:7D:55:D9:9B:AA:C2:C1:FB:8F:D0:99:BF:37:5B:D2:91:48
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60e798f1-2c72-4195-b34c-7c1c6171e9a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.175.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:96:a7:fe:9d:3d:5b:d9:4b:87:41:60:33:d5:d9:23:3d:0a:
c7:c5:1b:63:e8:0a:4d:a3:84:f3:90:25:ac:96:5d:80:5d:56:
42:ac:96:b8:a0:96:ae:e0:6c:3e:12:c2:bd:36:0a:52:06:4d:
fb:4d:a2:f8:c0:47:62:7e:f1:24:3a:fc:76:bf:ea:e4:15:0f:
b3:be:4b:fc:50:0d:38:1d:ea:95:d9:1a:2b:27:7a:2d:16:52:
dc:61:3a:17:32:eb:fe:6a:97:2e:1b:03:c6:0f:ac:c6:3d:6d:
f4:b6:2e:e0:e9:fc:10:e2:f2:1a:5c:c2:32:82:7a:02:cb:21:
fa:55:4c:f8:67:24:06:93:0d:17:7d:a6:07:ef:f1:5d:6a:09:
48:43:bb:6e:28:8d:88:d6:35:11:a7:8a:bf:aa:a0:28:fc:61:
f8:c5:0c:5b:75:b2:c4:c9:c5:ef:91:2d:be:e6:8a:e6:15:ec:
65:41:66:f1:e7:1c:8d:14:57:73:94:55:a2:93:e9:e6:54:d8:
ca:8e:c0:65:21:47:b0:32:7d:c3:c9:a7:73:0d:8b:6a:e4:b7:
17:06:99:5b:ce:c4:8c:c8:fc:c2:58:db:33:9d:fd:94:cb:f5:
a8:a0:f8:3a:a2:85:b5:62:ee:4c:05:71:23:3e:d2:a4:aa:f3:
a4:bb:16:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:52 2026 by rpki-client