
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8150bd4-8c61-475c-a0eb-e11b552f2aee.roa
File: c8150bd4-8c61-475c-a0eb-e11b552f2aee.roa (raw, json)
Hash identifier: PvqHFwz8P41Z4GKmFFvEWVXMstlImjqcoQsTKzHOQKY=
Subject key identifier: ED:53:79:87:48:6F:21:3A:11:55:77:2D:F0:B1:E5:AF:1E:9F:C2:8C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 73E87CAFB83CCFF9E1FDBC0B4868FECF3B561859
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8150bd4-8c61-475c-a0eb-e11b552f2aee.roa
Signing time: Thu 02 Jul 2026 00:00:07 +0000
ROA not before: Thu 02 Jul 2026 00:00:07 +0000
ROA not after: Wed 30 Sep 2026 23:59:59 +0000
asID: 14618
IP address blocks: 16.15.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e8:7c:af:b8:3c:cf:f9:e1:fd:bc:0b:48:68:fe:cf:3b:56:18:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 2 00:00:07 2026 GMT
Not After : Sep 30 23:59:59 2026 GMT
Subject: serialNumber=e8963f1ee154746a8f203cfbe6e787b43b37f9d691f803299cd55c571f74511e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:ea:fe:4c:d6:e3:95:a0:f2:4a:a0:53:7c:
61:c3:22:e3:d8:77:3f:d2:a8:23:9e:de:8e:6d:46:
5c:df:62:45:26:1f:30:91:4d:0f:19:61:92:4a:9f:
c3:a4:f1:0d:41:eb:fc:cf:56:bd:e5:4f:d3:ce:d5:
15:ff:4c:df:7b:f0:b2:dc:0b:a0:3b:52:e0:34:eb:
c9:42:2a:dd:f1:c2:c8:96:0f:25:96:ec:bc:73:48:
5e:2d:74:3d:0e:ef:71:24:17:4f:e2:05:fa:c5:a6:
25:9c:fb:f6:c3:e3:06:19:ce:0d:67:19:b8:93:a3:
a2:28:70:17:0f:e5:85:09:43:be:47:d5:86:70:67:
29:63:17:29:79:62:6b:13:93:4f:ab:f3:2e:93:86:
f4:bb:6d:4e:dc:ed:8d:fe:93:b7:cb:d0:8f:e1:82:
45:55:e1:dd:8d:2a:ae:7c:f3:39:19:5d:bc:e8:fb:
bd:9d:54:6d:49:5d:13:37:9a:ea:db:fb:75:13:f5:
07:ad:2c:08:55:d5:c1:74:82:d3:be:74:ed:aa:1b:
50:8d:a1:61:5c:20:4f:6b:1d:72:77:04:cf:d0:50:
79:28:50:a3:77:3e:52:e4:de:49:d1:04:0b:37:c9:
8c:ba:72:8d:6c:72:b7:63:d1:46:69:95:27:e2:de:
ff:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:53:79:87:48:6F:21:3A:11:55:77:2D:F0:B1:E5:AF:1E:9F:C2:8C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c8150bd4-8c61-475c-a0eb-e11b552f2aee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.15.172.0/22
Signature Algorithm: sha256WithRSAEncryption
59:84:dc:52:f3:6d:79:40:48:b6:3e:96:68:28:8d:cf:10:2b:
da:f1:e2:0a:8e:49:bf:66:f6:95:05:87:6c:d0:d5:d6:a2:1a:
84:40:22:fb:3a:04:9d:f4:49:31:6b:f2:df:a6:b7:c1:1c:51:
46:f7:57:88:a8:b1:25:9b:ac:e5:18:bd:09:04:1e:49:15:33:
f1:eb:bc:e4:1d:28:20:dc:9c:aa:cc:b0:3f:57:c0:29:c5:1b:
c8:0c:1d:99:28:84:2f:66:91:c4:44:f6:60:75:41:98:9b:31:
f6:62:32:87:c9:ce:a0:44:a3:8e:ff:35:48:e8:a0:b9:d0:0b:
cf:62:32:e8:9b:47:55:34:b9:40:bc:ff:10:99:c3:1d:e2:cd:
79:b0:ba:67:db:e7:ef:d4:c8:59:5d:cc:50:08:80:f3:b1:a6:
06:65:82:a3:5b:ee:58:f3:92:6c:32:fb:23:1f:2b:53:58:95:
04:25:0e:94:ba:0d:7f:d6:cf:73:4b:f2:80:63:d8:65:d2:4a:
67:f7:f1:66:f6:45:57:8c:17:52:8d:6d:28:86:3f:2a:6d:dd:
77:32:df:8f:ab:59:44:06:42:5c:a2:0a:5e:5e:28:10:2a:82:
ae:8e:69:c6:fb:ad:be:67:a2:db:42:9c:fc:86:b2:a3:d5:18:
f6:ef:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:17:55 2026 by rpki-client