
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b743625-8ab8-4d1f-a5ee-b2657bad3209.roa
File: 7b743625-8ab8-4d1f-a5ee-b2657bad3209.roa (raw, json)
Hash identifier: SFzW75fzjJ3m5JbU1Vpwaty/NZEwhd8w4Qehx0gaPNc=
Subject key identifier: BD:11:AD:D7:C6:60:E3:05:77:52:4D:80:C4:29:38:4D:DA:C0:0E:A3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 78B9F53E2C453A8AC8D8E5B3A9C1FE3307F5501F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b743625-8ab8-4d1f-a5ee-b2657bad3209.roa
Signing time: Mon 27 Apr 2026 00:11:16 +0000
ROA not before: Mon 27 Apr 2026 00:11:16 +0000
ROA not after: Sun 26 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 128.167.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:b9:f5:3e:2c:45:3a:8a:c8:d8:e5:b3:a9:c1:fe:33:07:f5:50:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 27 00:11:16 2026 GMT
Not After : Jul 26 23:59:59 2026 GMT
Subject: serialNumber=ffab11d5e5024b9ccccd9a089c7259c0dfb9659e2b34543ac71a06cd0de6c3d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:59:94:1e:52:a4:ae:2d:35:ff:d8:cc:57:19:
5f:f7:04:74:21:c1:21:a7:5e:6e:75:25:d2:02:d6:
ca:be:ce:b1:6a:d8:76:ac:72:0c:27:97:f6:7f:d2:
d8:21:fb:80:73:2e:bc:7e:25:51:9f:6b:bc:1e:2e:
b8:81:9a:28:83:a5:0d:8d:0e:d0:0a:51:00:a5:41:
dd:de:8a:3c:9a:f5:f8:7a:8e:08:d5:d5:47:3f:bb:
73:19:7c:73:e5:7f:e2:be:bb:e2:ba:bd:3d:95:30:
c7:da:f4:90:b9:98:e1:38:73:d7:5f:6f:02:30:d0:
ae:63:9b:d7:a0:54:0b:7e:21:5e:da:d5:ff:4b:db:
c1:36:a3:e2:1c:e0:1a:59:2b:ef:ae:c8:be:b3:3e:
eb:3e:61:1a:55:f4:3a:76:56:a7:81:12:55:1c:2f:
6c:7e:30:99:b7:77:4c:45:d8:29:d6:c2:b1:4e:21:
a1:a3:98:56:81:3e:44:1f:8d:d8:79:1a:d3:8e:5f:
17:08:c4:60:68:75:62:32:45:78:bc:53:6c:da:88:
4e:27:6f:4e:0c:80:9d:81:5e:06:9c:ab:10:3d:64:
77:49:e6:d2:20:3c:64:64:f2:de:a6:24:a8:28:62:
d6:da:20:a3:b6:68:c7:c2:83:79:b7:b7:58:fb:e8:
07:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:11:AD:D7:C6:60:E3:05:77:52:4D:80:C4:29:38:4D:DA:C0:0E:A3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b743625-8ab8-4d1f-a5ee-b2657bad3209.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:54:b3:48:34:68:59:87:06:a0:24:4c:13:23:2c:cb:10:b1:
67:ea:ed:b2:d5:01:d8:d5:88:f1:46:35:db:e5:eb:46:1c:32:
fe:7e:db:8f:e7:88:33:d4:9c:ad:93:cf:05:15:95:f9:ec:8d:
b3:53:f5:59:74:05:ad:b4:83:ef:51:eb:11:86:56:1e:70:e4:
31:85:05:f4:c7:05:5e:3e:55:4e:6e:88:32:7a:99:93:a4:b7:
09:0f:dd:64:db:62:3a:45:5d:fa:ce:0e:29:e6:9c:fc:01:4f:
89:c0:61:48:4c:31:22:fd:42:87:69:5e:1c:02:8b:3d:c7:ba:
b2:81:6f:dd:7b:a1:88:e2:c1:b9:78:8f:5a:5c:69:99:21:a1:
3e:06:bc:2f:a1:a7:7c:ac:24:dc:29:25:18:c6:42:8f:c4:8f:
a7:3a:c5:4b:48:96:33:2f:43:a5:93:73:6a:f9:7b:1c:77:34:
7d:5c:cd:87:ac:f6:34:cf:db:17:ca:db:36:55:c0:e5:c3:a3:
db:51:f9:ad:e8:14:c3:f4:33:33:ca:6b:8d:19:12:ff:1d:80:
07:7e:cc:80:3d:fc:1d:1a:23:e5:c4:d8:ae:5e:10:58:4e:b4:
fb:65:40:5f:e0:7b:ec:de:be:21:a0:63:59:db:78:0f:46:78:
d5:29:36:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:35 2026 by rpki-client