
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/342b16eb-59d4-444a-a8d5-604675472c36.roa
File: 342b16eb-59d4-444a-a8d5-604675472c36.roa (raw, json)
Hash identifier: +7FaYvPprmYKktla+vly7mHwog7eXL6iyLhPGEFT3lQ=
Subject key identifier: DD:77:B6:50:A9:81:77:F8:21:1D:62:CD:35:F7:20:58:64:1F:86:6C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 05B344B5869537640EBAD490A1F0C3B3F7D83B73
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/342b16eb-59d4-444a-a8d5-604675472c36.roa
Signing time: Mon 04 May 2026 00:00:41 +0000
ROA not before: Mon 04 May 2026 00:00:41 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.162.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:b3:44:b5:86:95:37:64:0e:ba:d4:90:a1:f0:c3:b3:f7:d8:3b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 4 00:00:41 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=f485a4a34dfa1ae4e6d90cfc3c4c3c74e7af9a3547e950078495bb7de81951e1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:8a:05:0d:27:82:3d:43:f5:2b:45:82:70:
19:71:22:36:b0:0a:f7:26:3f:79:10:17:f9:eb:7b:
16:a7:7d:9b:05:1d:7b:28:64:90:55:27:55:38:7f:
0c:51:28:4d:9f:10:80:c9:ae:78:0d:c2:8b:ee:43:
b5:80:0f:f8:02:ef:fc:25:42:06:bc:22:5d:f1:fa:
32:f6:e5:f5:69:e9:87:ac:36:18:46:d7:9d:05:b0:
bb:30:eb:aa:b3:35:d5:3a:80:29:22:0c:84:6d:2d:
34:00:a0:2b:76:6e:a6:30:35:19:69:f4:f1:ac:2e:
72:db:f6:34:de:71:1c:a4:32:4d:26:dd:63:b5:69:
c4:44:92:84:f9:92:d8:83:bd:cf:27:33:55:90:85:
85:87:a1:a4:4a:c4:00:ab:f5:47:3b:ee:b9:d8:01:
87:06:9a:54:2d:a0:51:9a:5c:1a:a6:3f:9b:6c:49:
fb:d3:58:c3:74:2c:5a:86:fd:08:a2:5b:bc:81:54:
d2:f9:af:76:d6:25:0c:1d:bb:15:2d:0f:af:03:3a:
15:0e:24:75:0d:b5:7a:70:93:fc:0c:a5:48:fd:9a:
da:a7:5f:ed:02:16:15:1b:6b:18:f7:f0:94:d3:d4:
77:ea:1d:4e:90:7d:d1:8a:0c:d5:b8:94:06:d3:91:
6d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:77:B6:50:A9:81:77:F8:21:1D:62:CD:35:F7:20:58:64:1F:86:6C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/342b16eb-59d4-444a-a8d5-604675472c36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.162.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b6:6e:ce:aa:fe:8d:29:b3:16:40:01:5d:02:15:2f:62:ca:7b:
ac:c9:ad:48:d6:55:13:9d:41:dd:51:5d:a2:69:ed:89:c3:0d:
5a:34:6d:30:f4:7e:b7:e8:8e:28:51:e2:a0:dc:a2:6b:f0:6c:
5e:54:eb:d5:bb:34:04:4c:5a:2c:a0:fc:98:2c:08:98:e4:da:
13:8a:c3:37:60:02:01:b6:d2:8f:56:ce:ec:1e:1d:31:d1:e4:
95:36:4c:9c:d4:4c:1b:05:17:80:bb:d8:a2:36:42:aa:dd:d5:
08:59:f1:fa:df:9d:ee:ff:88:e5:39:86:17:24:aa:d3:c7:c4:
07:06:d7:c1:c1:95:68:1f:03:be:33:13:b2:26:21:d8:13:0a:
67:8b:ee:6a:86:3a:19:bd:bb:ee:13:b1:dc:53:a9:eb:61:47:
ff:09:07:ab:af:44:20:1a:be:c1:7e:38:0f:92:02:a6:1f:fc:
5d:f6:25:71:d7:e8:d2:90:ee:3d:d8:bc:da:e6:62:3d:cf:30:
0c:75:75:4e:13:f8:69:4b:6d:ad:b6:85:23:ef:86:cf:88:ac:
a8:7b:c4:00:f2:f0:54:6d:57:6f:1a:3b:c8:25:93:f5:1d:86:
0c:38:3b:79:3e:21:6e:dd:1d:b7:c5:2a:e1:86:ab:6c:67:0e:
59:c3:0b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 21:38:57 2026 by rpki-client