
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa
File: 3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa (raw, json)
Hash identifier: HNSxbGp883Ituk9Vf/n10FQoIA5+FjTTa2MVbg3LNo0=
Subject key identifier: E8:CB:82:E0:2B:72:EB:DC:FF:59:F0:A3:A5:0B:0C:70:5D:04:24:3F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 70F971CAE767776ED6BC3228533C7FA1A5773CF2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa
Signing time: Wed 05 Aug 2026 00:10:08 +0000
ROA not before: Wed 05 Aug 2026 00:10:08 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 69.107.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:f9:71:ca:e7:67:77:6e:d6:bc:32:28:53:3c:7f:a1:a5:77:3c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 5 00:10:08 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=771e34dec38cab4f2619b98d12096494ef3342e531df3bc39b7cb96f4008bec8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:86:ed:df:69:f2:05:e2:d5:b0:47:87:07:cd:
e8:68:26:77:06:00:73:b6:83:d6:d6:18:54:b3:85:
de:54:33:24:9a:28:5c:55:40:8a:63:ee:89:26:fb:
25:72:17:08:41:5d:5d:ec:d4:20:c8:13:d1:88:4b:
a1:dc:c4:98:12:ed:15:61:d0:79:46:89:86:9f:fe:
93:42:7b:a4:87:c2:33:d3:71:a1:ec:22:5e:05:b3:
4d:93:f1:57:8c:08:f2:c7:66:f5:83:f5:25:96:53:
68:c7:cc:84:32:d7:d5:95:05:a4:1b:51:63:e5:01:
71:b4:24:6e:1b:43:36:52:0f:0a:d5:62:17:e7:5e:
c3:d2:72:a8:9f:47:f4:22:57:79:15:3e:20:cd:f0:
68:96:4a:76:cf:e6:38:37:f5:60:57:3f:2c:d7:62:
44:bb:5b:02:bf:04:ad:db:17:e1:15:33:ea:09:27:
fc:cb:06:2e:de:0a:c8:5c:cf:17:32:48:88:65:97:
3b:7d:ac:16:9c:ea:54:6e:f6:5b:f2:dc:72:e1:4c:
43:82:d6:35:0e:6f:b3:67:dd:e9:ee:96:d5:e3:2b:
8f:e1:c5:0e:b8:20:0f:75:cb:32:dd:db:c6:7c:41:
38:4d:41:94:e7:0a:39:ac:8a:e3:a8:d2:a7:cd:0f:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CB:82:E0:2B:72:EB:DC:FF:59:F0:A3:A5:0B:0C:70:5D:04:24:3F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3259b213-f7c1-41ae-bac6-e8c5fb358f08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.107.0.0/18
Signature Algorithm: sha256WithRSAEncryption
12:61:02:06:49:64:2a:cc:55:a3:33:13:c0:fa:2c:62:02:d3:
6e:5c:bb:ad:bf:c6:a3:c7:cc:3e:18:5e:83:29:f7:bf:e1:ed:
0d:13:ee:3e:36:5c:0b:7f:61:76:77:e8:6c:28:a5:90:f6:51:
72:be:7f:8b:47:08:c8:a0:ef:c0:2e:e0:5d:98:98:85:77:a4:
9f:84:df:5d:96:84:5e:e0:3b:4b:47:39:ea:a9:ac:75:72:1b:
c9:62:e2:6b:2b:67:44:92:ee:77:2e:0b:77:a9:70:f9:4f:95:
29:a7:ed:ce:c0:61:33:25:e5:96:4d:c2:d2:45:3f:d4:5b:6f:
53:c4:3f:84:1a:ac:ee:86:d2:11:c9:20:ba:56:ff:b9:a2:89:
91:22:8f:e5:c2:cf:03:5d:a6:83:f8:24:fb:ac:04:ef:8c:79:
e0:50:30:9c:d6:b7:a2:96:fc:d9:f2:2f:1b:6b:e1:97:2d:17:
c9:44:28:41:71:ca:37:86:a5:e0:1c:17:f5:d6:76:ad:1e:70:
00:6c:f3:86:39:fb:0e:cb:30:0c:17:f0:93:fd:98:a5:75:2c:
02:6f:56:7e:31:36:97:a0:e2:a5:2d:6a:54:f8:9d:2d:13:a4:
21:c5:d4:d8:e1:ed:08:8a:34:e8:3a:1d:e5:44:4d:29:35:fc:
87:45:77:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 05:52:05 2026 by rpki-client