
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69ea5e37-ad95-4815-8e82-1aa4f4f37ec6.roa
File: 69ea5e37-ad95-4815-8e82-1aa4f4f37ec6.roa (raw, json)
Hash identifier: QS9hJFrblAEcPhhiELsxSLW4Xlu+1I941uWCIquhboI=
Subject key identifier: E7:C8:3A:5B:D1:37:FD:F0:9F:0C:E9:E3:9E:57:7F:B3:77:5D:F2:CF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 69BCF7A6D2B344B25DEE3182BBE140E686233406
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69ea5e37-ad95-4815-8e82-1aa4f4f37ec6.roa
Signing time: Thu 23 Jul 2026 00:10:05 +0000
ROA not before: Thu 23 Jul 2026 00:10:05 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.160.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:bc:f7:a6:d2:b3:44:b2:5d:ee:31:82:bb:e1:40:e6:86:23:34:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 23 00:10:05 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=7f942680e38c498597355f2603defd69ac794dfea5f02a52b1d409a3c720164e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:37:ec:26:40:4c:45:2c:e8:21:0e:c8:e3:
89:19:7f:48:e6:2e:93:74:65:4d:8e:90:f8:b4:19:
af:8d:4a:f2:b6:89:ba:83:32:82:43:7d:05:1a:cf:
65:08:4d:4c:6b:63:af:46:5e:41:9d:34:3b:47:9d:
6a:8d:ff:a5:36:57:5b:13:65:13:34:3d:15:f1:b1:
2e:75:5f:0c:47:5a:98:48:62:42:71:39:98:df:6e:
8a:51:c7:97:54:b2:72:b0:d3:fe:38:02:0e:7f:bf:
12:a5:62:2b:68:28:5a:37:19:44:e7:21:7f:c6:22:
89:b1:45:5e:0c:e4:b4:1c:fc:9e:1c:11:33:04:07:
8c:5f:62:de:90:47:71:f5:88:29:9c:a0:2b:55:8f:
d3:4c:c1:09:29:c6:0c:0a:ed:59:99:85:8c:3d:c1:
66:44:3d:b6:73:85:77:0f:17:d0:4b:a3:0d:fb:3c:
c6:4e:5b:a6:10:d3:f1:80:23:a7:a8:44:e3:86:78:
90:59:66:70:13:b0:b2:ac:00:e8:d9:8c:58:de:d3:
49:6c:3d:67:b1:55:11:b4:0a:84:f9:c4:63:62:01:
3e:80:81:9c:31:f4:8a:d7:09:a8:62:1c:1a:26:14:
16:f3:85:a7:dd:06:59:fc:97:51:6e:36:1a:c9:db:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:C8:3A:5B:D1:37:FD:F0:9F:0C:E9:E3:9E:57:7F:B3:77:5D:F2:CF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/69ea5e37-ad95-4815-8e82-1aa4f4f37ec6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.160.32.0/21
Signature Algorithm: sha256WithRSAEncryption
32:f4:80:b9:5c:49:4c:1a:a2:97:f5:12:8b:aa:19:0a:c1:63:
88:59:27:54:7f:a5:41:07:5e:0f:2a:d5:12:95:52:44:0a:9b:
e0:ed:29:2c:d9:03:56:ff:42:5b:95:55:f4:33:a3:7e:91:03:
95:c4:dc:b1:dd:61:29:33:cc:cd:a5:ba:d2:0b:0f:24:44:15:
df:6f:f0:66:dc:b7:c2:41:9c:49:4b:24:e8:d5:95:47:de:3e:
37:f4:64:25:f6:17:d3:28:31:83:2e:a6:e8:ba:57:a4:b9:6b:
5f:ee:c3:f5:cc:51:83:74:b5:c9:40:d9:22:98:06:97:6b:dd:
2d:9a:9f:22:f4:5b:e0:56:72:52:32:00:a7:4a:75:93:9d:b4:
67:ae:c4:ce:dc:8f:b0:01:7f:35:1a:44:ed:9c:d7:29:ae:c4:
14:6a:58:67:7c:cc:38:c7:b6:12:86:8f:f5:e3:d1:fc:5d:35:
ac:cc:5b:a6:c2:86:f7:be:13:31:29:27:91:80:84:fb:50:e1:
8b:59:66:8e:87:36:1d:49:1b:f9:64:3b:2c:3e:53:8e:ca:7c:
b2:3b:48:3e:fb:37:39:08:15:6a:c5:e2:1d:48:8b:8a:07:f7:
06:ac:2f:d0:9c:1e:ae:92:43:36:42:bd:f7:90:da:f4:6c:a5:
2b:ff:34:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:49:58 2026 by rpki-client