
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3758fba7-c8f2-41af-ba8c-b0ef59e3d405.roa
File: 3758fba7-c8f2-41af-ba8c-b0ef59e3d405.roa (raw, json)
Hash identifier: Y7uLTZ9uT9udgMyYoV9luB15JVhQMZHr9Moea2qgfPo=
Subject key identifier: 4E:DF:27:A5:6F:05:10:FF:5E:8A:A6:E9:B3:B4:B2:2A:47:5C:F9:69
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3D4D36CD9EF6D36DE946842DAA4F51BE509C30B9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3758fba7-c8f2-41af-ba8c-b0ef59e3d405.roa
Signing time: Wed 29 Apr 2026 00:10:33 +0000
ROA not before: Wed 29 Apr 2026 00:10:33 +0000
ROA not after: Tue 28 Jul 2026 23:59:59 +0000
asID: 14618
IP address blocks: 56.54.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:4d:36:cd:9e:f6:d3:6d:e9:46:84:2d:aa:4f:51:be:50:9c:30:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 29 00:10:33 2026 GMT
Not After : Jul 28 23:59:59 2026 GMT
Subject: serialNumber=0a46daf1dbdec34b73b09d7f63f56aaa56ee3f0a09d5fdc81fa049bce6e32620, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ae:45:4d:73:3b:74:f8:b2:e6:44:90:90:09:
66:a2:cd:23:e5:0e:2f:81:64:10:59:c3:71:2a:91:
b6:f7:8c:aa:98:77:06:21:0f:92:65:9a:11:5d:da:
e7:fc:c8:5d:10:27:a6:d7:ad:cb:b8:78:3c:30:6b:
dd:0e:df:0c:29:8c:9f:32:51:bd:43:24:7d:b9:5b:
06:e8:0e:94:a5:1e:5b:5d:e6:43:f6:aa:1e:1d:a9:
5b:45:be:38:e9:c5:19:e1:b1:80:57:0c:c0:39:2f:
d9:73:5e:c1:7a:f6:ef:ee:77:f1:be:ba:75:91:f4:
37:12:ce:e8:5b:2e:17:66:86:ce:99:b7:b5:9c:73:
ab:59:d2:e8:38:1e:9c:78:3c:d5:12:33:4d:b9:42:
6d:4a:01:72:2c:32:84:8e:af:6c:4a:78:74:f7:47:
1b:5c:49:a8:7b:b9:13:fc:3d:e4:f0:19:36:26:d3:
05:12:57:08:b6:8e:50:af:28:77:9c:85:fb:ec:c0:
53:01:89:59:da:ec:6c:60:2c:d8:29:3e:6a:d7:14:
19:85:2c:67:3e:a0:c5:94:78:fd:af:50:bf:29:92:
48:5a:21:50:a7:ef:af:6e:0b:1d:ba:8b:01:3f:fe:
d8:46:3b:e0:a7:df:37:96:6f:29:07:52:7c:06:3d:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DF:27:A5:6F:05:10:FF:5E:8A:A6:E9:B3:B4:B2:2A:47:5C:F9:69
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3758fba7-c8f2-41af-ba8c-b0ef59e3d405.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.54.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d5:67:75:e0:f8:76:31:f5:3e:a1:0f:7b:e5:b1:2f:ba:a8:4a:
2e:41:4a:79:46:53:55:1c:51:fc:51:23:2c:da:94:d3:fd:cd:
c1:82:b2:19:d2:7f:82:17:77:bc:26:00:eb:bb:dd:41:11:af:
d8:86:1e:e5:73:63:17:78:a6:93:f7:66:8c:ea:11:74:3b:7e:
91:49:f1:c3:56:37:4a:61:ce:0c:1f:b8:1b:35:07:d1:8b:8f:
b8:8b:3b:11:7e:d9:17:b5:86:c2:c9:b7:bb:e5:5e:42:9e:b6:
b4:77:0a:ef:cc:b2:d7:f7:91:e5:97:22:71:c9:ed:92:6f:fb:
5d:a4:58:43:6f:68:a2:1b:fd:28:f4:25:35:48:50:c3:f7:29:
c2:72:a5:be:06:b3:44:82:c2:9d:bd:6c:d5:c0:da:1b:a0:14:
3d:69:56:3b:f5:7d:a6:c7:93:b2:2e:5b:07:0b:87:be:03:6a:
4c:d9:15:cb:bd:7b:0b:e5:6d:ea:71:f2:b9:c9:4d:f4:ea:5f:
04:e2:38:14:9a:f5:9e:ec:90:b4:2a:f1:1d:2f:0e:a2:77:ee:
6b:77:37:8e:3c:d5:72:7e:13:96:6e:0b:17:07:0f:b2:4b:ac:
5d:21:58:a2:d2:46:d1:e3:c2:71:9a:0c:00:22:4a:88:c0:a7:
35:7e:b5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 21:37:56 2026 by rpki-client