
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94760639-2712-4f50-9362-9ff9626e6a44.roa
File: 94760639-2712-4f50-9362-9ff9626e6a44.roa (raw, json)
Hash identifier: wu7yzRkoY3OPHUbCg2W+0kP3i9h7n3UlmaVCni8GExk=
Subject key identifier: 96:59:1B:EF:B8:DD:01:31:42:F9:D3:4F:76:09:FB:55:97:36:14:57
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2454CB3379EA0EA0A2AA3C2E7E8270BC4FB179ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94760639-2712-4f50-9362-9ff9626e6a44.roa
Signing time: Mon 20 Jul 2026 00:11:29 +0000
ROA not before: Mon 20 Jul 2026 00:11:29 +0000
ROA not after: Sun 18 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 107.152.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:54:cb:33:79:ea:0e:a0:a2:aa:3c:2e:7e:82:70:bc:4f:b1:79:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 20 00:11:29 2026 GMT
Not After : Oct 18 23:59:59 2026 GMT
Subject: serialNumber=90d0e0626da6956876de62fb9f516ae6037ee3b7c9c149433ad4f76c52e9d1dd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:66:a2:b0:4e:d4:0f:a7:1d:d9:1a:9d:64:
31:4b:a6:e6:d4:1c:65:9e:97:98:01:72:49:c4:42:
da:d5:de:be:23:d6:6a:0b:c1:7d:1b:29:e6:5a:64:
24:06:8f:08:a1:19:96:5e:2e:a2:8f:1c:d2:39:8b:
83:23:5c:96:7e:d1:9b:8a:cb:f5:de:6f:f7:06:31:
00:cd:12:f6:fa:a2:09:fb:e3:7f:aa:e5:f5:a0:72:
a6:81:79:3e:4c:13:32:ac:26:f3:c9:81:3a:7e:fa:
e3:33:d3:d1:d4:1b:1c:7f:db:fa:cb:4e:9d:f6:d1:
de:47:1e:84:8e:34:1f:c1:c5:95:25:be:5f:47:62:
0d:5c:98:a7:76:10:d5:fc:c8:3a:17:4f:f1:27:f6:
47:03:92:95:e2:8e:a8:9f:76:87:79:c2:b9:11:f4:
f0:db:b3:74:cc:f0:9c:5b:87:35:44:7b:4e:c2:20:
1b:3b:db:e5:17:67:b5:1a:63:b5:93:1e:98:1c:7b:
68:c5:0a:15:43:53:27:39:fc:cd:04:16:08:d3:3f:
e3:11:7d:c1:7f:2a:85:ce:1d:69:7b:c6:9a:3b:ca:
18:7d:38:b4:d8:59:73:c2:2a:26:c0:88:bc:cc:c7:
f8:95:95:33:4a:56:5b:84:f3:f5:9b:2c:91:c3:e0:
e1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:59:1B:EF:B8:DD:01:31:42:F9:D3:4F:76:09:FB:55:97:36:14:57
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94760639-2712-4f50-9362-9ff9626e6a44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.152.128.0/17
Signature Algorithm: sha256WithRSAEncryption
25:91:76:a2:f0:bb:08:31:3f:7b:b7:7f:d5:c7:1a:77:a5:e7:
70:da:5a:b6:8b:97:6f:ce:ac:c8:9c:02:58:a4:e7:27:31:da:
7c:d1:c6:18:cd:f8:55:23:c4:16:a0:80:1c:8c:6c:77:88:22:
6c:03:e4:ef:02:32:5a:1e:e1:63:3b:5c:8b:35:63:76:c6:91:
d2:84:b0:66:66:0a:c4:28:4f:9f:0d:b3:5c:03:18:de:17:ef:
58:95:11:38:2a:34:9f:8f:97:6a:de:e4:3b:08:15:1c:ee:86:
33:21:5e:38:bc:0f:8b:4a:9b:98:d8:e7:0b:71:9f:ca:bc:66:
bf:74:59:eb:5a:ea:1b:88:ae:8e:56:57:86:08:d2:e2:4b:ea:
72:40:7c:64:43:79:9a:d1:9f:fd:cd:d3:65:fa:f5:c0:1f:f6:
d8:5f:2b:e3:88:ad:fb:67:50:06:18:c9:a3:3c:e9:5a:fb:ff:
5b:4b:e4:d8:86:d0:5c:54:38:e9:66:df:82:70:46:bd:13:2a:
34:70:5c:4f:ab:52:80:34:20:f2:3a:fe:71:cf:81:62:44:1d:
42:3f:d9:16:fa:17:fb:92:3e:ab:b8:d3:08:ed:d0:66:03:ef:
6b:47:c9:b6:3e:99:6f:32:6e:7a:fe:8d:da:4e:13:d9:68:69:
39:c7:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:46 2026 by rpki-client