
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a94c130a-04e5-4527-b789-2c013779be00.roa
File: a94c130a-04e5-4527-b789-2c013779be00.roa (raw, json)
Hash identifier: vMhwTCzDg1sNAPqbzOAw0j4sbIsdK34pYcnzcBhJdq0=
Subject key identifier: 44:AA:50:B4:49:51:22:79:70:08:92:24:16:C3:12:D2:B5:14:F2:32
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 215A7C8967D3E63F1D87EFF1351D519FF824A062
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a94c130a-04e5-4527-b789-2c013779be00.roa
Signing time: Tue 21 Jul 2026 01:11:21 +0000
ROA not before: Tue 21 Jul 2026 01:11:21 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fea:c080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:5a:7c:89:67:d3:e6:3f:1d:87:ef:f1:35:1d:51:9f:f8:24:a0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 21 01:11:21 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=3608a1baf2385bba7792e5da0c349ee641ae8251461eed7c9bb17bcd3ee3da48, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d4:38:aa:f2:9d:3e:58:6c:a7:99:83:df:a3:
ad:0e:9e:a1:69:a3:f2:9c:74:9d:a6:10:1f:48:1f:
24:c8:a1:59:9a:81:09:02:c4:af:aa:24:c5:6d:14:
38:77:53:41:fe:f2:6a:1c:85:06:9e:3f:27:41:9b:
0c:7b:70:7a:a9:02:d8:dd:dd:19:d4:4d:a1:d7:28:
3c:18:b5:dc:60:1c:17:65:46:ee:54:db:67:d5:08:
99:37:9a:32:bf:b4:63:80:dd:86:77:88:09:c1:b4:
5c:0d:5b:9b:20:f5:69:06:2d:61:2c:49:ac:50:3a:
c8:1c:bd:7a:64:bf:fa:0f:4b:1d:e8:cf:84:3a:d3:
5f:ec:68:aa:9b:f8:35:ab:6d:c1:6d:86:1e:74:57:
4c:5c:2c:d4:34:6e:94:a7:7d:ad:3c:72:fc:fe:cd:
1d:c3:db:77:b2:76:b1:40:44:58:c9:bf:71:fe:ac:
e7:08:e1:67:47:da:14:dd:d7:0c:4d:0e:0b:80:7b:
5a:17:31:1f:c3:f1:8b:1f:d6:6f:ad:4a:f0:3e:72:
ae:9f:e1:0d:d1:9c:1e:38:11:79:f0:bc:fe:54:53:
56:6b:85:e2:10:88:bc:0e:d4:99:69:76:bb:6c:bc:
96:92:b2:bc:22:00:17:b0:c5:07:b6:4d:2d:44:0d:
6f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AA:50:B4:49:51:22:79:70:08:92:24:16:C3:12:D2:B5:14:F2:32
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a94c130a-04e5-4527-b789-2c013779be00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fea:c080::/48
Signature Algorithm: sha256WithRSAEncryption
1b:97:e7:71:c2:dd:fc:50:fd:c8:d6:25:4b:08:a4:25:c3:02:
3d:30:ee:7f:97:9d:e9:b7:1d:ca:0f:b4:5b:f1:62:6b:a1:66:
f4:36:2a:98:94:01:c0:2b:68:fb:21:55:ef:f6:76:2c:42:88:
d4:f8:ae:be:77:76:82:95:26:dd:db:1e:7c:f5:d7:cf:d4:14:
59:c2:7f:ac:e2:df:19:1e:80:94:0e:0b:11:e2:dc:6d:31:5e:
60:c4:b6:fe:07:18:6f:79:f8:57:86:a8:13:8b:ca:ac:6b:62:
7c:cc:35:76:b3:1a:e1:3d:ea:d5:a7:86:f3:55:43:5e:98:60:
87:24:82:2c:ed:08:e3:1c:3c:b8:9d:2f:a3:1c:c1:4c:e3:2b:
99:be:ae:87:1c:45:ef:14:33:ec:0d:5f:74:df:b6:9c:58:82:
0a:95:39:e2:f1:2b:69:b6:3d:98:74:a4:19:ff:1d:b6:2d:cf:
82:fc:27:c5:fa:b9:15:c6:d6:7a:13:58:eb:f3:60:3f:d4:18:
cc:c8:09:7b:fb:ec:c8:4e:58:37:c0:14:45:f7:b1:2f:e9:7a:
dc:43:8b:84:d6:0b:af:9b:9c:47:11:17:b0:d5:0b:0e:9f:52:
11:fe:24:17:fc:79:9d:de:01:eb:79:89:74:92:ed:09:17:89:
1e:3d:0b:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:55 2026 by rpki-client