
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48a0b6fa-615d-434d-b543-f9f732d80dc1.roa
File: 48a0b6fa-615d-434d-b543-f9f732d80dc1.roa (raw, json)
Hash identifier: PJK99udntbk/XoVmPxJmPcD5llQEq8sq8fA2BCFSE+4=
Subject key identifier: 31:3D:68:0D:E8:C6:8C:30:12:DB:86:58:8E:D4:77:98:A7:23:9E:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 29030168164895755D5ABD0338F62D57501E3D85
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48a0b6fa-615d-434d-b543-f9f732d80dc1.roa
Signing time: Sun 17 May 2026 00:11:48 +0000
ROA not before: Sun 17 May 2026 00:11:48 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 199.205.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 18 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:03:01:68:16:48:95:75:5d:5a:bd:03:38:f6:2d:57:50:1e:3d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 17 00:11:48 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=66f0465178c7ec9bb63f484679cc5aea900c5be6e2e72165f75ba7e057bcd507, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6b:3d:2a:58:dc:42:8d:23:56:d2:9b:8d:56:
cf:2c:ce:e0:06:c1:a9:54:e8:79:74:45:d6:ec:63:
b7:21:52:1a:d4:dd:84:a2:19:c4:d3:01:b8:8e:7e:
d7:30:ee:d2:70:65:0c:ac:cb:39:f5:3b:e0:40:a6:
22:4a:d8:7a:58:2c:af:20:57:42:f8:96:d8:dd:ee:
69:41:78:64:c5:e1:ad:d3:ff:ad:91:82:e2:6a:d1:
d3:e1:93:cf:61:0a:c7:3d:8f:69:98:5c:15:49:40:
9f:40:41:10:90:99:3f:b1:4d:7d:96:9f:30:77:90:
f9:94:ce:87:8d:c2:4f:ba:1c:9f:b8:b7:6e:d4:68:
d4:2c:8a:0a:2f:a3:74:3e:1d:04:bf:93:ac:a3:8b:
fa:5b:bf:9e:2e:f9:86:cd:30:83:60:72:22:48:51:
8e:40:06:5e:50:1e:6f:6e:37:fc:5c:28:d5:e0:8d:
2a:be:e5:55:b5:3b:da:b4:3a:5b:70:dd:cd:54:e9:
de:1e:78:5f:90:c1:16:45:f7:0a:49:8d:14:7a:6d:
74:39:e0:3a:bb:d1:d0:c5:c0:c9:4d:ae:07:29:86:
26:b4:a0:fc:2e:ad:57:74:f8:47:21:85:1e:e4:2f:
67:7d:03:fa:93:38:3a:8d:df:e1:0b:68:e3:b6:2b:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3D:68:0D:E8:C6:8C:30:12:DB:86:58:8E:D4:77:98:A7:23:9E:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/48a0b6fa-615d-434d-b543-f9f732d80dc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:86:e2:59:97:be:83:87:77:50:30:84:31:5a:f5:1c:25:0d:
63:24:8b:0c:b2:b1:70:c7:a3:6e:9f:8f:83:bb:1d:ae:10:36:
bd:c9:66:fa:8d:fc:e9:18:52:f3:83:7f:eb:55:80:7c:ac:1b:
26:61:52:62:52:aa:05:5f:1f:8b:e7:c2:dd:9f:f6:62:c3:07:
09:b8:1e:e8:ee:f7:c9:0f:88:e9:cd:06:f3:0b:af:be:31:68:
71:5b:88:96:6c:f3:dc:f0:f7:30:2c:08:c0:1a:98:6d:e3:db:
b5:52:ce:86:28:5f:06:bc:f0:59:4d:24:c0:49:de:04:15:a4:
99:04:cf:40:10:28:3f:91:8c:7b:74:77:db:fa:b8:52:d4:8f:
2e:1d:fe:ea:85:6f:ef:9c:ab:02:0d:ab:60:c9:05:16:0f:9b:
1c:d6:a4:af:0f:53:ae:4c:f4:94:43:14:7c:2c:f5:10:e8:98:
dc:f8:9e:e2:3f:1a:e8:e0:f0:a1:4e:42:b6:75:4f:f5:c3:b4:
56:8b:32:2b:d7:9a:03:c3:6f:f2:78:6e:e8:52:c7:3d:bf:c2:
eb:a7:14:30:8d:45:fd:fb:fa:62:32:e0:10:a4:5c:55:92:81:
93:c2:e3:6f:68:63:0d:90:91:5d:27:98:8e:19:69:23:d2:89:
16:84:39:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 05:56:09 2026 by rpki-client