
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/addab3a4-528d-4764-8d7c-b6d1ce1f8551.roa
File: addab3a4-528d-4764-8d7c-b6d1ce1f8551.roa (raw, json)
Hash identifier: DItuVbyIAsgmLQU0hmTagF//zq/H+BzInt9CbgHS+Ac=
Subject key identifier: EA:6B:FF:52:A8:8E:3C:46:6A:75:46:D9:B1:7E:A8:F7:CF:E0:FB:08
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 017B9AFD117B54FCF56DE5C5061909952894EA89
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/addab3a4-528d-4764-8d7c-b6d1ce1f8551.roa
Signing time: Sat 18 Jul 2026 00:10:09 +0000
ROA not before: Sat 18 Jul 2026 00:10:09 +0000
ROA not after: Fri 16 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.7.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:7b:9a:fd:11:7b:54:fc:f5:6d:e5:c5:06:19:09:95:28:94:ea:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 18 00:10:09 2026 GMT
Not After : Oct 16 23:59:59 2026 GMT
Subject: serialNumber=fbb22dc224dacefd42f891d0f0b24680a7fa48aaf7e1c8afcee3dbd98cff9566, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fb:c6:17:a5:75:cc:e1:86:d1:f5:eb:8d:ef:
cc:6a:bd:b0:be:a7:b9:72:54:74:fc:c8:53:fb:24:
a5:36:8d:9d:4b:07:da:25:71:6f:6f:c7:e7:37:37:
97:2e:88:71:49:f2:fe:ba:ec:4f:f0:c6:58:65:59:
ff:27:57:a4:1a:91:f0:69:58:b6:2e:f5:24:65:56:
8e:69:ad:01:d5:c7:4c:99:05:c1:4e:41:51:da:6b:
58:73:a3:7b:33:58:53:bd:cf:54:1e:51:bb:2b:2c:
8c:5d:b9:1f:0e:98:31:16:96:ce:d8:37:e4:50:99:
63:52:4b:21:45:cc:d4:80:17:58:3c:38:21:ca:45:
f7:2b:47:98:a2:ab:3e:bf:46:4b:48:3a:84:80:58:
e6:c9:bb:8e:40:b7:09:68:78:84:85:99:ab:6e:98:
23:79:00:15:c7:a8:f9:f5:17:80:42:0c:bc:98:b6:
bf:9c:2b:66:d0:98:dc:3b:ab:6e:fb:6c:d9:2d:cb:
2d:41:24:5c:f4:86:68:24:07:5f:eb:be:f0:c9:c3:
1f:44:b1:bc:cb:4c:5d:b6:51:c9:a0:17:6a:ce:a2:
61:24:75:9d:ee:ab:67:72:23:0b:68:71:ef:50:fa:
21:13:5c:13:24:29:c8:a0:f3:cd:5b:4e:17:f9:1a:
48:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6B:FF:52:A8:8E:3C:46:6A:75:46:D9:B1:7E:A8:F7:CF:E0:FB:08
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/addab3a4-528d-4764-8d7c-b6d1ce1f8551.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.7.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c0:b2:e6:c4:52:35:9a:9d:7a:68:71:5e:12:dc:7e:e9:cb:0c:
09:c6:02:da:e5:f3:25:77:be:66:09:68:70:b7:fa:a0:01:5f:
e9:8d:1b:11:0b:6f:1d:cb:c3:00:b3:b9:b9:7a:f4:15:53:5f:
dc:f5:a0:47:3b:be:50:dc:83:ec:37:60:d7:c3:2f:23:dd:ec:
e3:f2:4a:8c:a9:dd:2b:eb:07:8f:22:b5:fe:d8:55:92:a6:83:
67:8f:38:bf:13:ed:cd:b2:48:a7:8b:dc:b7:5e:47:df:0c:ac:
b8:d2:6f:9e:ac:78:0b:48:57:06:9f:8c:a8:25:95:4e:bd:a3:
da:65:5a:ef:a2:bd:d3:ee:db:a3:96:07:56:30:b6:38:4c:a7:
c6:ec:3e:96:1d:66:f6:dd:e5:54:b7:58:6e:f5:68:a7:54:33:
9c:fc:21:d5:98:08:9a:8a:8a:e3:c8:16:01:b3:76:21:e3:0c:
85:d0:55:e2:47:fd:74:56:a7:14:ff:b2:54:f0:d4:c1:fd:5d:
a1:76:bd:88:cb:e0:4c:27:da:85:3f:85:d1:93:2d:46:6f:50:
08:7d:24:31:43:36:73:40:04:99:dd:66:21:72:0f:32:5f:d2:
79:3a:4d:13:70:f4:e2:c8:af:fb:c9:6c:11:a0:ff:46:17:45:
4a:49:69:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:15 2026 by rpki-client