
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9db0cab-638c-4829-8755-ee8f012ccb19.roa
File: a9db0cab-638c-4829-8755-ee8f012ccb19.roa (raw, json)
Hash identifier: vyiQf1+f6MuenPDPc6sd2/8+We43cwwpQgm93SdQITI=
Subject key identifier: F4:5D:F5:E6:1D:E2:50:ED:04:AC:F6:5C:0F:FA:94:F8:12:90:CA:A2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E0670E57C35D2B827C94073772B141FE2611CA8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9db0cab-638c-4829-8755-ee8f012ccb19.roa
Signing time: Mon 11 May 2026 00:40:34 +0000
ROA not before: Mon 11 May 2026 00:40:34 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:06:70:e5:7c:35:d2:b8:27:c9:40:73:77:2b:14:1f:e2:61:1c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 11 00:40:34 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=c75b78c3fb283d1af204537e91c51d71f84f5c7a3d2cdd8c7f2eba3407c8f0a7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1f:84:4f:58:95:59:08:a2:03:76:81:44:3d:
6a:ce:03:f5:c0:f9:25:57:09:eb:02:44:81:74:9b:
6b:7a:a4:2a:c2:ef:c0:1d:fa:76:dc:c7:f9:bb:a6:
e8:28:39:fc:7e:ef:69:74:59:28:c1:46:a6:e9:1f:
01:8e:66:63:ad:cb:d3:4b:30:ce:41:68:7b:92:5d:
ec:10:cd:47:b1:a4:12:20:8c:fb:e4:7c:17:fe:2b:
0e:e1:fc:66:90:c0:ee:a8:2f:03:44:3c:8e:8b:7d:
ae:76:8f:5a:6c:c9:8c:41:b5:b5:b3:63:e8:24:6a:
72:77:d7:b7:9d:64:16:08:29:4a:7a:a4:88:e5:0b:
6b:9d:ed:21:e1:af:7e:a0:79:9a:1c:7c:de:65:1f:
dd:cd:4b:31:ee:34:f0:ad:b0:57:9f:4e:c4:09:30:
9f:b4:6b:b2:e1:fc:28:bf:95:70:d9:75:f3:19:f1:
91:c0:85:e2:7c:f6:26:f9:1a:cc:ee:0a:54:78:0b:
92:41:56:7e:c7:92:08:fd:d5:b7:bb:af:aa:cc:a3:
26:9c:04:e8:48:5a:67:9c:dc:7a:de:21:af:dc:88:
a4:ac:cd:ba:7f:85:2d:2f:48:18:84:09:fa:df:ce:
2e:26:6b:5c:85:47:5b:21:d5:e0:07:9b:dc:b1:51:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5D:F5:E6:1D:E2:50:ED:04:AC:F6:5C:0F:FA:94:F8:12:90:CA:A2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9db0cab-638c-4829-8755-ee8f012ccb19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.36.0/24
Signature Algorithm: sha256WithRSAEncryption
10:0b:ab:0c:1e:a8:b2:dd:62:2e:17:19:45:7b:ca:fd:33:06:
fd:60:21:a3:0d:49:17:61:58:9a:6a:dd:f4:ca:68:75:75:fc:
90:6e:39:6e:0e:ed:91:5a:f7:d5:76:88:92:2d:f6:d3:9d:14:
be:c2:87:cb:3d:ad:63:8b:97:42:85:1f:ae:a2:83:e1:8f:4e:
38:e1:60:22:64:a1:fd:84:9f:a8:9f:c3:5a:16:f9:45:7c:d4:
51:83:8a:59:a9:37:18:2f:ea:c6:43:69:c3:af:33:df:0b:2b:
31:8a:ed:b9:9d:70:ef:04:cc:e0:22:68:f7:4d:7d:a5:4c:ed:
9d:7b:aa:09:15:11:e1:44:63:30:90:e1:5f:ed:6f:49:3a:e0:
8b:20:77:b3:c8:cf:57:71:63:bc:91:84:1b:87:2e:89:56:fb:
b8:11:e4:a2:fc:c8:b8:22:7b:0d:b1:c4:09:1d:f0:5c:13:e5:
0c:ab:9b:46:fa:88:73:c0:af:e7:46:64:36:c8:9d:3a:4e:d6:
d4:c8:de:c5:eb:c3:a2:59:f7:b5:de:1e:77:d5:54:5b:65:15:
14:7b:7f:50:27:f8:70:d2:a4:ac:3f:20:4b:04:32:44:21:2f:
f9:23:f3:63:a2:dc:35:74:53:ef:e1:85:d3:e3:48:98:e9:20:
0e:a5:5e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:58:58 2026 by rpki-client