
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2279a492-73db-41f0-98ae-bd6039e89d3b.roa
File: 2279a492-73db-41f0-98ae-bd6039e89d3b.roa (raw, json)
Hash identifier: x8XF6UlWQjkNthL9Arb/30vtLgom05zPUxl8hQT+7u4=
Subject key identifier: DD:C8:6A:EB:C8:04:1A:20:6E:ED:CE:81:0E:97:66:3A:C3:76:09:CC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 136F03AC1FA0D9708634F36D9B61F5B2390BCC3B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2279a492-73db-41f0-98ae-bd6039e89d3b.roa
Signing time: Mon 27 Apr 2026 00:20:26 +0000
ROA not before: Mon 27 Apr 2026 00:20:26 +0000
ROA not after: Sun 26 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 134.31.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 02 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:6f:03:ac:1f:a0:d9:70:86:34:f3:6d:9b:61:f5:b2:39:0b:cc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 27 00:20:26 2026 GMT
Not After : Jul 26 23:59:59 2026 GMT
Subject: serialNumber=f4a9d1aca35870f9de85615285a56903160edb9be9b42b546b875771515aa127, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:33:ba:ce:26:0f:bd:2e:5a:47:98:43:4d:47:
33:29:98:3b:eb:79:49:5e:4e:9e:db:98:71:67:da:
96:b4:3f:d0:36:d2:fe:04:f6:a2:86:57:1c:58:c7:
e1:c3:a2:64:54:c1:36:fa:87:87:75:6d:1e:69:57:
da:ba:e6:f7:7f:18:98:f0:ed:d5:93:e1:da:4c:4d:
41:d4:36:12:ad:ff:39:c3:1d:53:37:92:28:1e:43:
16:12:f5:22:ba:ef:a6:16:01:78:f5:1e:c5:6c:d8:
f1:6c:3c:a6:54:79:37:50:c6:df:8b:de:d0:73:cf:
4b:9e:5c:89:94:4f:fa:f8:6f:31:1a:61:86:70:8d:
0b:76:11:34:3e:85:f7:4e:c1:2e:e2:67:35:7d:7c:
98:6f:9b:2d:87:21:89:00:60:c5:1e:57:f1:e0:a5:
38:db:5d:29:9c:b3:d5:06:7d:49:0b:1e:c9:a5:81:
83:0c:aa:be:e0:a2:5b:22:13:04:35:da:6d:52:0b:
7e:3c:77:8d:85:72:36:08:80:f3:4e:1d:f0:34:fc:
5a:c7:8b:80:48:d1:86:36:25:0b:bd:a6:47:d2:4f:
0c:98:da:b2:2e:fe:f1:2b:64:df:dc:fb:72:3d:d8:
96:ff:e8:5d:b7:95:59:b7:b7:57:b7:c2:61:e5:01:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C8:6A:EB:C8:04:1A:20:6E:ED:CE:81:0E:97:66:3A:C3:76:09:CC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2279a492-73db-41f0-98ae-bd6039e89d3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.31.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:b8:52:70:e4:22:53:74:cb:65:86:91:30:2d:a7:b6:19:76:
88:5e:c0:5b:8e:a8:ef:9d:20:3d:97:8c:2f:02:90:82:4e:1f:
df:b4:e0:f1:82:d4:2d:5f:97:5e:19:db:f7:eb:94:86:9d:53:
4e:98:3e:68:82:4c:14:e6:35:9a:d3:44:5f:24:14:df:3b:da:
82:9f:5d:c6:06:4a:3d:b6:f7:8b:5c:8f:67:2c:6e:ef:12:a0:
c6:a8:17:53:d8:1a:0c:7e:ea:7e:09:56:57:e9:16:66:f3:ec:
0a:2b:8d:a9:f5:c0:66:8e:b2:84:79:bf:4b:51:86:7b:4d:86:
51:e5:fe:81:32:fb:2d:24:8f:8e:8b:68:cb:a1:b0:e3:a3:51:
48:d9:28:f0:b2:83:33:8c:3b:6a:d7:b7:92:7f:2c:fe:e9:fa:
ed:c1:a7:84:af:c4:83:84:da:56:f5:65:9d:34:9b:fd:9e:96:
9f:09:cd:b5:4c:1f:d7:22:5e:65:df:5c:00:40:64:63:5e:bd:
a0:0f:1b:b5:13:45:e3:f9:7a:f3:6c:a1:c4:17:68:e4:d5:1b:
5e:28:76:1a:0e:ce:c0:5a:74:7b:81:9e:ed:83:dc:b1:a6:c5:
0d:7f:96:db:04:cf:c1:49:fb:4c:86:0a:dd:d2:57:83:0c:cd:
e6:be:4b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 06:14:45 2026 by rpki-client