
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc5bc94-7e1f-4624-a0e0-c51944553aae.roa
File: 7dc5bc94-7e1f-4624-a0e0-c51944553aae.roa (raw, json)
Hash identifier: EbQOCQql4n7lEhgYcA17pWTch/EdoOCrtD/oxVO1S5w=
Subject key identifier: 7F:05:C9:B9:B4:36:81:62:DE:11:A0:7F:29:20:D5:9F:BB:F5:30:FE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3B7E94A98C2FAA0A821C1A838596818369308383
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc5bc94-7e1f-4624-a0e0-c51944553aae.roa
Signing time: Tue 12 May 2026 01:21:27 +0000
ROA not before: Tue 12 May 2026 01:21:27 +0000
ROA not after: Mon 10 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:7e:94:a9:8c:2f:aa:0a:82:1c:1a:83:85:96:81:83:69:30:83:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 12 01:21:27 2026 GMT
Not After : Aug 10 23:59:59 2026 GMT
Subject: serialNumber=85f24bc5177dae1d762d55814104c2d18828dee78735bf3a47dbcecbaf6fe89a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:35:8d:57:4e:32:c5:9e:a3:31:2d:89:86:
e6:f6:22:4c:8e:4e:d8:21:3c:50:ff:94:60:47:f1:
ca:47:9b:f4:5c:01:66:41:63:f6:36:d6:fd:6f:82:
57:54:8a:7f:b9:02:2d:0a:35:36:22:07:e6:71:1c:
fe:24:31:4e:b5:c3:13:03:97:ef:f6:3f:94:58:eb:
d0:9b:cf:b3:cd:dc:9d:89:8f:d9:6d:9a:a6:ec:72:
34:58:2a:21:78:51:b2:53:5e:46:fc:1b:0e:dc:db:
f1:47:9b:8c:93:31:74:bb:42:97:7c:ce:73:03:cc:
8f:5f:1c:bb:8c:59:77:85:46:1f:7b:32:bc:b3:05:
c3:06:31:73:12:af:8b:5a:8f:f7:9c:06:53:39:36:
34:0b:a0:5a:26:46:32:fe:25:f6:9e:83:85:58:fb:
97:7c:a8:72:10:58:28:41:18:fb:f9:14:ef:fd:86:
af:a4:35:ba:33:65:41:f5:46:d2:0c:fc:86:d0:09:
33:a7:3e:76:62:0c:1a:11:65:3d:4e:16:28:5d:44:
b0:99:a2:b3:0d:71:45:f4:77:16:3e:10:9e:91:92:
38:96:1a:38:d4:fe:71:5c:93:fb:17:4d:56:90:a7:
58:a9:de:8c:55:5f:ea:5a:cc:23:a1:25:f5:17:a4:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:05:C9:B9:B4:36:81:62:DE:11:A0:7F:29:20:D5:9F:BB:F5:30:FE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7dc5bc94-7e1f-4624-a0e0-c51944553aae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:d5:a5:ab:d6:30:ce:7f:a9:a6:e5:09:41:ef:c3:c0:02:3b:
2f:e1:8f:06:1c:1c:0e:ac:6f:09:2d:63:b6:6a:0a:38:a3:0d:
d2:76:4d:67:66:05:04:06:2c:e1:78:1a:46:c5:94:03:8f:8d:
6b:6a:89:00:c7:e8:37:fe:2b:8a:88:ef:05:89:b7:e3:fd:53:
14:a2:e2:3f:4d:41:4b:fa:4b:19:be:2d:64:54:4b:1f:a3:3e:
2d:eb:d8:bc:c6:7c:e4:8e:20:7a:e0:1e:4c:20:ed:46:2a:18:
29:81:08:d0:d2:1a:50:68:50:68:f7:04:2a:d6:88:ab:ae:8f:
f6:4d:51:38:d4:b1:fc:ec:45:54:1d:1c:1a:c6:d9:8d:22:a3:
ce:05:28:f8:0a:db:ad:20:56:3e:d0:b3:f7:5f:ba:0c:34:c2:
a8:65:c2:0d:a4:79:f8:7c:a4:a2:71:cf:41:83:03:08:e5:2d:
1d:7d:18:bc:df:fd:9f:4f:7d:10:a6:ec:7a:05:ff:3c:37:ea:
6a:7c:9f:0b:75:7b:c7:64:93:2f:62:a6:63:2b:71:97:f9:c8:
43:19:c3:e7:9a:88:70:e0:ac:6e:1e:57:5f:40:cf:68:ec:48:
6b:28:75:a6:1d:81:c2:9e:2e:90:1b:0e:0f:7c:26:1a:d2:18:
fe:b2:6a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:35:57 2026 by rpki-client