
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4edb771-ec0f-400b-84fc-81d5688f849d.roa
File: c4edb771-ec0f-400b-84fc-81d5688f849d.roa (raw, json)
Hash identifier: 7vUmItuU+redWickEMSFfNV1508n8uqDPUnDp0lc1u0=
Subject key identifier: 3E:DC:27:9E:A5:E6:AA:91:E6:36:1F:31:20:BA:65:ED:BD:76:5D:B2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7C00A71DD92587852CD522E1E1B52C002EEF0624
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4edb771-ec0f-400b-84fc-81d5688f849d.roa
Signing time: Thu 25 Jun 2026 21:17:21 +0000
ROA not before: Thu 25 Jun 2026 21:17:21 +0000
ROA not after: Wed 23 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 64.66.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:00:a7:1d:d9:25:87:85:2c:d5:22:e1:e1:b5:2c:00:2e:ef:06:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jun 25 21:17:21 2026 GMT
Not After : Sep 23 23:59:59 2026 GMT
Subject: serialNumber=e82e91f8ab1dbf17d9cc72034725e876922345e53a579bbc3773478fe4893229, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cf:a3:6e:72:ed:92:83:0a:2a:0a:09:ac:0e:
25:eb:cb:a8:5a:60:b7:18:d0:e4:97:a7:16:bf:b2:
8b:35:97:ab:1b:ce:3b:01:bf:a7:04:54:52:5b:99:
14:63:03:21:38:c1:21:1b:c9:d1:e2:1d:7c:e4:7e:
55:25:42:36:92:c0:f2:42:ec:73:a4:5a:6a:9e:97:
73:63:73:e3:3a:48:0a:eb:6d:ff:1e:ff:c0:d7:09:
ad:63:40:2d:f4:36:81:2b:7b:fb:a4:d8:2f:a1:26:
42:b4:80:67:c4:ff:a6:61:30:ca:d0:9a:96:35:48:
de:91:83:06:b9:c1:0d:e7:ba:4a:2c:cc:ed:29:4a:
d9:1b:e1:05:62:39:38:33:5a:6c:91:92:89:2f:84:
2e:5a:c3:57:5c:8c:7e:80:e1:d6:2a:8f:b2:23:3e:
01:91:e0:2c:bc:ac:ef:58:70:b8:33:3b:d3:f9:18:
6d:dc:84:f0:86:8b:2b:cd:19:fb:5a:50:6f:49:78:
22:57:57:3b:25:5e:23:8a:93:7d:0a:de:85:84:ff:
3f:f8:c2:55:9d:f9:83:af:a9:5e:a2:f8:9a:35:cd:
ee:43:cf:36:5a:f9:b5:ba:7c:2d:8c:26:50:df:7f:
12:54:cc:ed:da:76:34:2e:72:e4:d7:56:6a:90:f8:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:DC:27:9E:A5:E6:AA:91:E6:36:1F:31:20:BA:65:ED:BD:76:5D:B2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4edb771-ec0f-400b-84fc-81d5688f849d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.66.131.0/24
Signature Algorithm: sha256WithRSAEncryption
71:97:f9:56:5f:01:8e:a6:8c:12:b8:84:83:5d:2a:fc:ef:40:
69:2b:e7:a0:aa:ed:e4:ae:29:f0:76:04:d0:b1:bb:90:66:43:
bc:df:2c:9d:c0:1c:96:4e:9b:eb:fc:71:f8:57:95:48:6e:a9:
91:3f:cc:06:78:15:40:65:5d:8b:bf:ee:ea:dd:56:7a:49:8e:
f5:01:25:0c:bd:db:74:fe:a9:95:ef:de:5d:b3:98:1a:fa:c9:
5f:1b:b0:db:b4:fa:a8:13:ea:8f:8a:98:77:ea:e3:8b:b4:73:
bd:87:72:ef:22:fb:8a:10:9c:4a:a2:02:53:54:7b:ff:1a:2b:
6e:ac:a3:d3:56:11:88:e7:6b:c4:fe:26:e8:f7:b7:43:f0:2a:
95:e9:c0:e3:33:e0:59:c0:9c:67:f6:2d:70:f6:93:d7:f9:3b:
ad:27:0a:1c:76:6a:90:06:a0:1d:23:fd:1e:38:48:5f:46:32:
0b:3e:f7:07:af:2f:b1:e5:70:a5:45:e9:e6:65:67:4d:0b:13:
22:aa:ba:7f:1a:d0:e9:f4:5d:82:90:44:d9:9e:2e:f6:af:80:
55:83:1b:39:fc:34:e2:6e:2b:f3:6d:6a:d9:03:27:f5:65:32:
93:9f:89:cd:3f:dc:9d:5c:8f:ff:f3:4e:aa:f7:2e:67:9a:54:
3b:dc:ae:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:38 2026 by rpki-client