
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1af78db-4e03-4986-b016-394c842266cc.roa
File: d1af78db-4e03-4986-b016-394c842266cc.roa (raw, json)
Hash identifier: h3U7pmmqvJPkf9zLqPxkjYKO4jW+I02e+P9GEvJ0p1w=
Subject key identifier: 9A:37:11:7A:20:2E:CB:B1:D9:39:7A:DA:B0:10:E1:ED:CF:A9:A3:7A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1C7BB0B73400027BCC2BD375627B6C584870BE16
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1af78db-4e03-4986-b016-394c842266cc.roa
Signing time: Thu 23 Jul 2026 01:20:58 +0000
ROA not before: Thu 23 Jul 2026 01:20:58 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.162.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:7b:b0:b7:34:00:02:7b:cc:2b:d3:75:62:7b:6c:58:48:70:be:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 23 01:20:58 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=eeca46a92e7abfb67cc37cebfd4940a6747d1df23b7e5c84126346843ad266f4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:92:40:11:7d:27:fa:9e:0f:c1:43:f0:76:55:
1d:80:1b:10:e9:1e:f3:85:9b:7a:3e:9d:80:29:3b:
4f:f6:c1:dd:f2:cc:35:39:d3:12:82:43:11:fe:7a:
9e:3d:84:36:b1:87:27:1d:1a:ba:ff:c2:c3:da:eb:
5d:fe:31:94:9a:8e:6a:99:44:3f:6f:c5:f2:02:42:
a2:44:a4:47:50:69:6b:2b:3a:54:8b:43:44:17:e4:
ef:ad:59:71:8a:39:41:4f:8a:e3:03:03:fe:28:c7:
0a:22:6c:7d:f4:e5:b2:38:67:0f:cc:01:ac:ed:7a:
b7:eb:6d:2d:86:7e:2d:c9:7f:10:52:e5:17:85:6b:
37:41:e6:c3:2d:f2:9f:28:eb:85:53:08:0f:bb:e9:
77:2d:0a:c6:e8:05:a0:ff:cc:02:f4:7a:c7:1b:d4:
4f:a1:4e:eb:14:9a:5f:03:e1:27:6f:ee:47:4d:bb:
8a:f9:35:b2:a3:b6:8e:89:2a:c6:51:c1:69:59:c7:
16:c4:70:53:d3:bd:b1:36:54:96:ad:2a:8e:08:a4:
32:5c:32:5f:70:cd:80:66:c9:15:28:72:11:a0:b3:
b1:a3:1e:55:48:2a:34:ee:7a:82:83:b7:e4:51:58:
39:9c:c5:97:6c:33:76:f9:3d:b5:6e:72:b5:22:d9:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:37:11:7A:20:2E:CB:B1:D9:39:7A:DA:B0:10:E1:ED:CF:A9:A3:7A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d1af78db-4e03-4986-b016-394c842266cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.162.80.0/21
Signature Algorithm: sha256WithRSAEncryption
d4:ba:27:15:b9:3e:c3:5f:5f:05:83:ee:ae:e9:3e:a6:68:5e:
a8:a5:bd:84:49:00:df:6e:1e:f9:6c:16:c7:30:1b:17:b9:25:
45:97:98:57:f6:db:78:66:0b:dd:1f:6f:e2:13:5d:9b:fd:14:
93:fd:af:1d:0f:52:d3:68:26:01:71:ec:89:ce:c5:13:19:c8:
ca:95:a7:bd:57:4b:de:f4:37:f7:a0:86:6c:36:61:84:26:55:
26:3b:42:0f:40:ae:a2:00:14:59:66:0e:08:e7:1c:67:11:1e:
7f:82:08:52:c1:20:69:eb:f0:a3:1d:55:61:47:e6:18:4b:41:
50:c7:1e:12:23:72:53:6e:ea:0b:ee:80:af:11:ba:59:fe:38:
e8:4f:12:6f:c4:33:66:8f:ae:56:33:a6:b0:fb:51:d0:23:28:
e8:e8:a2:d3:e3:b5:ac:1e:8e:20:6e:44:9b:ff:b1:ee:91:95:
07:9d:28:ea:8e:8b:d2:3a:74:58:20:38:08:98:b3:da:12:46:
0d:d3:b4:e1:79:7e:c9:63:1f:d6:14:b0:8d:03:6c:32:a9:0f:
61:d1:e1:10:79:6c:83:88:f9:92:f4:00:d9:39:9a:01:ca:e2:
ed:57:b4:a7:fc:5b:44:a9:3a:fa:fe:e9:a5:bc:d8:aa:68:57:
96:84:b9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:43:44 2026 by rpki-client