
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8854f7ca-e0f6-48cc-9e77-8916afc163d5.roa
File: 8854f7ca-e0f6-48cc-9e77-8916afc163d5.roa (raw, json)
Hash identifier: FVOhXbIhS76JlF7d79US4rpsUEHSRgsdCDPamesWBMY=
Subject key identifier: 5B:67:FC:B9:6C:28:C0:29:DA:3F:10:D4:AC:1B:DF:5F:27:87:F2:9C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63F14A0CE7C479612E15C5FD9CFCD4284E21462D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8854f7ca-e0f6-48cc-9e77-8916afc163d5.roa
Signing time: Fri 17 Jul 2026 00:00:05 +0000
ROA not before: Fri 17 Jul 2026 00:00:05 +0000
ROA not after: Thu 15 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 20.129.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f1:4a:0c:e7:c4:79:61:2e:15:c5:fd:9c:fc:d4:28:4e:21:46:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 17 00:00:05 2026 GMT
Not After : Oct 15 23:59:59 2026 GMT
Subject: serialNumber=ee1264e42630ba6791fb490360d15375e10794299cbbc791c0a4992afae020c4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9a:23:b5:e7:56:9d:c6:33:d9:ce:8b:54:de:
dc:13:fe:b4:e4:44:db:44:5f:11:cf:fa:25:fd:1f:
9d:f4:d4:eb:d8:1b:4e:27:e8:91:1c:f4:f7:8d:66:
6b:f0:9e:70:c3:39:e3:dd:38:2d:c9:0f:c3:05:3a:
f0:1c:07:e6:3a:0b:44:4d:f6:38:d9:e6:5c:ab:41:
53:19:e0:f9:ea:40:be:7b:ab:27:b5:15:4d:33:44:
f4:07:e4:0e:9c:f0:52:00:37:b2:0d:03:9f:7e:f0:
f2:6d:1e:e4:3a:fb:c1:3b:40:b9:b1:60:c1:5b:88:
06:3f:aa:28:09:af:c7:51:ed:2c:e1:0b:65:bb:af:
27:ba:44:43:22:b0:0d:97:c4:86:fd:b4:85:96:ba:
6d:90:7c:18:3f:e8:38:d2:40:ff:13:b5:ef:b9:d8:
15:71:c4:79:c7:02:50:31:d7:54:96:c6:36:17:68:
56:b3:96:09:27:54:8c:04:ad:f5:16:84:c7:f6:c2:
6c:24:08:e0:62:01:79:83:85:66:0c:c7:dd:ac:51:
12:b8:5a:0e:74:21:f3:ab:20:cf:0f:01:21:b0:d8:
6a:5b:c4:27:f4:3c:06:10:5d:16:a4:54:66:12:ee:
b8:ed:51:9c:39:16:3e:ef:b6:11:4f:c7:c2:45:02:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:67:FC:B9:6C:28:C0:29:DA:3F:10:D4:AC:1B:DF:5F:27:87:F2:9C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8854f7ca-e0f6-48cc-9e77-8916afc163d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
20.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:38:58:99:44:35:7a:80:8f:4c:dc:85:18:5f:28:9e:99:6c:
de:37:76:a6:52:41:07:65:53:e1:eb:14:81:89:3c:08:d7:fb:
dd:49:2e:10:62:ed:e2:d7:52:ea:41:77:25:81:9d:08:b9:f9:
a1:a7:70:88:e8:09:71:cd:e9:f9:8c:0b:a3:dd:6d:1d:ee:0e:
48:8e:93:59:ac:8b:65:c2:e9:f7:05:c9:0d:7d:47:12:a7:3d:
b0:5b:a7:c5:b6:dc:dd:06:c1:0d:27:9b:5f:5f:39:ea:03:68:
30:1f:27:bc:df:23:a9:fd:57:b7:e6:e4:3c:72:d0:08:ae:df:
e5:4a:38:67:19:02:f9:7d:6a:a0:e1:26:d2:94:13:b6:6e:12:
4f:1d:9d:9d:3a:31:9f:4e:84:b1:7c:7b:a9:9a:c2:5a:82:3e:
20:62:c7:66:89:e8:86:fa:b7:a7:f5:cc:a0:c6:3f:66:11:94:
d5:77:bd:1c:c2:43:cf:36:11:c4:65:79:1c:bc:ea:73:9b:42:
08:34:23:b3:e4:7b:0f:7c:86:05:dc:32:c1:b1:76:63:e9:4c:
c1:d5:4d:c8:4f:57:43:78:04:78:9d:90:95:ed:ca:37:34:30:
4e:92:9c:3c:a1:02:b5:a8:06:bf:33:d2:81:84:f9:fb:48:cf:
24:d2:1d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:34:50 2026 by rpki-client