
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79d97ae6-4dc6-4e86-bbc3-a6ce660cffd7.roa
File: 79d97ae6-4dc6-4e86-bbc3-a6ce660cffd7.roa (raw, json)
Hash identifier: CW1fKMCpduNvNqQIxXgYe1eV5syR+QgFLckX0A7471E=
Subject key identifier: 1E:B5:00:39:B1:D1:EA:FB:8B:4B:D2:F3:7A:6E:EC:E8:2D:58:F6:45
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3919EF80FCA1A55AB00337E56493908E51979403
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79d97ae6-4dc6-4e86-bbc3-a6ce660cffd7.roa
Signing time: Mon 20 Jul 2026 01:00:05 +0000
ROA not before: Mon 20 Jul 2026 01:00:05 +0000
ROA not after: Sun 18 Oct 2026 23:59:59 +0000
asID: 7224
IP address blocks: 54.25.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:19:ef:80:fc:a1:a5:5a:b0:03:37:e5:64:93:90:8e:51:97:94:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 20 01:00:05 2026 GMT
Not After : Oct 18 23:59:59 2026 GMT
Subject: serialNumber=c1598f171d04f6c285c7e56e9e398d89e28cbce32abdc8aa53b265fe1e8ede9c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d3:a4:c5:46:ef:6e:9c:96:75:c8:2f:63:5b:
1f:4c:66:26:bc:e8:09:b4:0c:f4:c5:8b:38:dc:ef:
7e:ad:bf:cb:7b:2e:6e:ba:d8:44:60:a9:61:36:73:
81:44:65:f7:5b:08:ef:e4:f1:a9:04:aa:4e:74:80:
3f:a1:24:23:fa:50:f4:36:9d:9c:23:3a:63:6d:e9:
6b:4e:52:21:dd:3c:1c:ef:89:2b:68:2a:4d:5d:3e:
ce:c8:ca:25:41:67:cf:ff:76:b8:fe:bc:16:30:d7:
a7:8f:be:fd:80:e8:67:1d:7d:01:ad:07:14:18:33:
2d:7e:ce:ae:4a:63:76:50:3b:0b:b5:99:60:92:ea:
4b:76:38:51:93:19:f2:f4:7f:aa:fe:d6:1f:73:2f:
0a:38:80:60:48:84:5e:24:43:92:35:b2:f8:92:34:
62:76:97:f6:35:3b:e6:b0:f0:32:bd:7b:d0:40:2c:
c9:f9:e0:75:2a:36:a2:5b:d8:83:b4:f1:b9:a0:2d:
78:9b:94:2e:e3:cf:7f:1b:9e:91:8a:e5:d1:f5:78:
c5:64:56:0f:00:9f:9c:87:0f:a9:2a:64:ab:eb:f0:
c3:4b:bd:a7:0f:c7:3b:bc:d2:67:38:50:c0:62:34:
c7:a0:42:14:00:7f:dc:86:b8:f4:72:b2:c1:49:7f:
ad:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B5:00:39:B1:D1:EA:FB:8B:4B:D2:F3:7A:6E:EC:E8:2D:58:F6:45
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79d97ae6-4dc6-4e86-bbc3-a6ce660cffd7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.25.12.0/23
Signature Algorithm: sha256WithRSAEncryption
12:8b:f4:fb:b0:7b:26:72:b0:bb:d6:e0:91:07:3c:e4:7d:21:
f2:ca:ec:93:d7:bc:a1:b5:28:98:56:2f:30:b2:d3:86:e0:e0:
f7:ad:35:0d:af:cc:62:94:ab:b8:b9:e5:9c:0b:2b:33:52:f6:
29:69:0f:06:05:fe:50:97:4e:f9:40:b3:3e:dd:52:e5:a7:79:
0f:bd:18:57:e4:db:ec:c8:c2:32:d3:08:e9:61:56:a2:52:ce:
73:fb:42:02:6e:cd:f5:33:ae:de:82:1e:78:65:81:7c:00:d5:
67:bb:95:69:b9:6c:05:89:ce:5f:53:67:0e:3f:f1:47:03:01:
5d:33:7b:8a:05:00:4a:95:37:91:9b:4e:35:b0:a2:c2:09:07:
f9:44:2b:4f:58:bf:de:98:ba:9a:dc:38:af:2e:7c:62:6c:35:
59:9d:29:59:2b:26:6c:a3:29:1c:bc:71:a5:99:c7:53:92:ea:
43:7c:3c:72:8b:c5:da:ff:01:8a:58:10:79:da:b5:27:69:37:
5c:62:40:fa:22:a1:e2:49:5c:2a:59:ae:e4:93:04:da:fb:00:
15:01:60:14:64:a5:d7:63:1a:4e:41:3d:dd:05:6b:58:be:7d:
7b:38:a6:73:4e:61:79:b5:bd:aa:bc:f8:1c:66:1a:55:04:5a:
26:a1:1a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:42:39 2026 by rpki-client