
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b321cf91-4773-42bb-b05a-a6eee24370ac.roa
File: b321cf91-4773-42bb-b05a-a6eee24370ac.roa (raw, json)
Hash identifier: viDfl1b5zIh31R25SXJ0UkLgBOD22rkseeFGS0CkPqA=
Subject key identifier: 09:C2:82:0F:09:7E:30:0E:37:5E:83:C2:67:4D:59:81:ED:83:12:9E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 27741D7FC427B9B26B8BB37057C0D6F44BACF486
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b321cf91-4773-42bb-b05a-a6eee24370ac.roa
Signing time: Mon 27 Apr 2026 00:10:09 +0000
ROA not before: Mon 27 Apr 2026 00:10:09 +0000
ROA not after: Sun 26 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 135.140.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:74:1d:7f:c4:27:b9:b2:6b:8b:b3:70:57:c0:d6:f4:4b:ac:f4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 27 00:10:09 2026 GMT
Not After : Jul 26 23:59:59 2026 GMT
Subject: serialNumber=3a02d7ee86d92c14df10c3facfffc9642cdac63d29950b00ff0f5b017bddf91e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5d:75:4f:d9:54:3e:5a:7d:56:bd:06:9e:58:
ee:10:69:9f:6e:ee:bc:32:05:62:5e:43:9d:c9:29:
b0:67:33:17:63:10:e6:42:26:75:13:25:97:97:f4:
73:a4:e8:6e:95:64:ae:04:9b:47:04:4b:6f:51:19:
65:30:98:33:2e:d0:c5:c4:ac:dd:98:6c:64:17:cc:
bd:eb:7b:4f:9b:87:e1:d5:e5:97:8c:87:de:3d:95:
14:81:dd:00:7d:7d:47:c3:52:fd:77:01:cd:47:7e:
77:fa:48:7a:af:65:33:76:b9:b1:38:07:50:2f:08:
b1:44:39:67:9e:fa:89:f8:5d:56:fc:94:78:9d:36:
bd:79:78:bb:a9:8b:14:17:17:5a:d9:38:94:1b:07:
45:7c:7f:dd:e7:44:5c:ae:69:44:6e:c1:91:5b:aa:
d5:f8:f9:73:51:00:69:39:08:38:86:0c:d1:78:d3:
63:39:2b:90:e0:ea:01:23:9b:bf:4f:71:cf:2a:e3:
85:06:cf:26:a1:61:cb:50:15:48:3a:7a:4f:4c:22:
d2:6a:0f:57:09:2d:cb:1a:8c:46:99:f1:32:26:9b:
9d:be:be:7b:00:b1:ef:a6:a6:49:f2:8a:2c:05:a7:
84:12:2d:24:2c:18:b6:2d:a2:20:ec:ec:0b:f2:30:
11:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C2:82:0F:09:7E:30:0E:37:5E:83:C2:67:4D:59:81:ED:83:12:9E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b321cf91-4773-42bb-b05a-a6eee24370ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.140.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b4:6f:63:b8:65:bc:64:cf:64:99:d8:3b:dc:be:38:8f:b5:69:
04:c3:29:65:5b:27:21:ef:d0:07:4f:56:26:2e:2c:dc:80:5f:
96:05:4d:41:f8:2a:bd:c1:d6:11:81:2f:4b:cb:ad:29:1d:bf:
4b:39:67:32:25:46:14:3b:8d:10:9e:a2:5a:31:da:cd:5a:73:
4d:3a:ec:7e:8f:4c:55:ed:9c:22:ce:ed:94:f8:e5:42:7d:bd:
99:86:55:fe:f8:0b:f0:ca:1f:44:1d:80:e7:6e:dc:a0:ef:72:
83:01:34:cb:c1:65:98:66:93:3b:19:27:f7:dd:02:21:8f:15:
b6:4c:54:b9:45:89:79:91:49:43:02:c5:4b:bf:74:71:2b:60:
d2:bb:e8:cb:23:c9:60:a6:e0:d2:8d:13:3e:11:01:d3:44:99:
67:e0:76:7d:df:33:11:5e:3f:52:e3:cc:2c:2c:3a:07:fe:b9:
b0:50:41:85:67:f3:98:98:ff:5b:8e:a4:48:04:21:4a:89:d6:
24:ac:52:21:d9:dd:2f:33:2d:0d:b7:2d:de:1c:2a:ed:5e:f3:
4d:1b:09:8e:e0:47:43:be:ce:ce:5f:2c:a0:9c:59:ef:ef:f9:
19:c5:33:37:be:20:48:28:cc:fd:fa:2e:05:5a:ce:be:50:9d:
be:6b:90:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:39 2026 by rpki-client