
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b954fc-cbe6-4a3b-8d6d-72a5ae3df2a9.roa
File: 24b954fc-cbe6-4a3b-8d6d-72a5ae3df2a9.roa (raw, json)
Hash identifier: pb6ae7X25jm4FNbYWUtcHNHEryzj/4FI26X5CpRwJ3o=
Subject key identifier: 4D:F3:7E:0E:76:52:F3:CC:53:CF:5F:4E:B3:43:AA:3A:3B:29:27:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3271B11323E6FE58065858D885967BD98157B662
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b954fc-cbe6-4a3b-8d6d-72a5ae3df2a9.roa
Signing time: Mon 27 Apr 2026 00:10:14 +0000
ROA not before: Mon 27 Apr 2026 00:10:14 +0000
ROA not after: Sun 26 Jul 2026 23:59:59 +0000
asID: 14618
IP address blocks: 13.193.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:71:b1:13:23:e6:fe:58:06:58:58:d8:85:96:7b:d9:81:57:b6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 27 00:10:14 2026 GMT
Not After : Jul 26 23:59:59 2026 GMT
Subject: serialNumber=8b90163a91ae79b3ed5bfb6db9b112fd73b3c6c61be317e6fbce4f6c20993ca3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:47:45:4c:34:af:6e:a1:fc:ea:3d:25:21:4c:
01:13:62:6e:76:46:16:a9:32:9c:ae:6a:e2:f4:9a:
70:04:88:da:72:76:4a:00:f7:db:87:4a:fa:1c:48:
57:95:4e:88:9e:f6:bd:21:d9:f6:55:e6:a9:20:ff:
9c:59:f7:b1:97:80:73:cf:d0:7b:1b:e0:05:04:67:
05:d0:ac:c5:10:80:fe:94:f3:29:88:18:12:1d:ec:
79:5c:ac:3f:68:83:ea:f0:a4:a7:9c:78:3d:77:86:
0b:fb:99:64:20:4d:dd:1a:ab:c8:a5:c5:a3:99:af:
69:2a:9d:8d:b6:24:ad:ce:07:51:cd:2b:f4:d9:9d:
73:7c:70:ba:df:6d:76:5b:05:74:e7:f2:f6:0f:92:
51:aa:fc:23:09:72:38:d3:e3:a6:28:43:39:93:bf:
e6:7c:4e:d4:e4:0e:fc:a8:a1:7b:ff:65:e8:ed:9b:
c0:a3:32:54:d7:8c:9f:2b:cc:10:23:d4:2f:e3:76:
e0:7d:9a:bb:af:b1:74:74:6c:c1:71:59:21:b3:fe:
32:0b:32:73:e6:8f:3b:4c:01:1e:54:30:af:f9:60:
aa:5a:6b:55:3e:56:9c:af:be:63:55:4b:9b:f0:5a:
fe:4c:94:b1:78:6f:87:fe:ea:bd:b3:f9:63:b1:a1:
cd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F3:7E:0E:76:52:F3:CC:53:CF:5F:4E:B3:43:AA:3A:3B:29:27:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/24b954fc-cbe6-4a3b-8d6d-72a5ae3df2a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.193.0.0/16
Signature Algorithm: sha256WithRSAEncryption
12:26:c0:9c:c8:77:33:69:15:76:ff:71:96:0a:9d:14:5e:35:
cb:b2:88:ac:4d:3c:4f:a1:83:5d:c7:d4:c8:b0:03:90:c1:ab:
6c:34:1f:66:21:8e:e2:c7:20:4f:b8:49:82:1e:1a:75:8c:27:
62:00:ec:a3:8e:da:2b:45:ab:ce:13:3d:5d:10:e7:67:4f:60:
54:aa:21:79:6f:6b:61:ae:04:7d:53:eb:d0:d2:c0:e8:7d:67:
9a:0f:3a:8d:ca:05:5f:b5:43:d4:a7:9c:bc:39:c6:66:ef:70:
a1:88:ff:04:88:da:1c:07:0f:00:95:bf:b9:23:4b:53:ad:c1:
d0:16:c1:11:c8:cf:14:09:a0:81:ec:58:07:f3:2c:20:9b:fc:
8c:d7:7d:f2:eb:89:4e:17:5a:f6:af:81:58:13:e0:63:f1:91:
40:22:f8:ef:0a:f8:2c:62:85:11:83:82:72:c0:73:8f:a2:d8:
84:e7:cf:5d:0b:15:db:cc:3c:c7:2d:e4:f8:a9:d9:63:f6:93:
bb:af:1a:fe:e7:4f:10:ab:d8:67:22:5a:3e:64:e8:a1:c8:fb:
65:7a:8c:0e:65:72:84:df:b7:13:38:37:b0:4e:1d:e5:76:b1:
b2:d8:d0:84:7f:c7:ad:30:0a:f4:bb:7b:af:a8:48:a3:04:d2:
e2:4f:9f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 21:37:18 2026 by rpki-client