
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4776d63a-2288-4d01-9160-72cbaac6b556.roa
File: 4776d63a-2288-4d01-9160-72cbaac6b556.roa (raw, json)
Hash identifier: Hx+RQ+VHMVFvVyKIHM8ik1gEvSBLXDIG8BB4XfIUPvE=
Subject key identifier: 86:46:55:D9:AD:53:63:E4:BC:EC:1A:20:FF:71:EF:DA:FC:EB:19:41
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 242975D2237AA333444E1F18E3542BA22602DB44
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4776d63a-2288-4d01-9160-72cbaac6b556.roa
Signing time: Tue 28 Apr 2026 00:10:10 +0000
ROA not before: Tue 28 Apr 2026 00:10:10 +0000
ROA not after: Mon 27 Jul 2026 23:59:59 +0000
asID: 14618
IP address blocks: 15.224.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:29:75:d2:23:7a:a3:33:44:4e:1f:18:e3:54:2b:a2:26:02:db:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 28 00:10:10 2026 GMT
Not After : Jul 27 23:59:59 2026 GMT
Subject: serialNumber=110ed3edf056ae53063b340bb5b57dcc22cb0b765c854ce3b94f40d40cedfe44, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:2c:5a:05:3b:e5:24:fe:99:50:05:c7:8a:
88:36:28:3e:4f:4e:7b:86:25:4c:55:2f:26:20:06:
2e:5c:f0:f1:20:48:01:ab:f0:fa:86:6c:75:a1:67:
de:a6:cc:0d:7b:cd:a8:85:86:3e:dc:9d:05:a6:71:
86:d7:b3:4e:6a:8b:4f:cb:d7:15:83:97:29:7c:05:
4a:d8:1a:db:f9:26:4b:f6:fe:f2:9c:83:da:03:7a:
5b:17:44:de:ce:a8:9e:76:4e:9b:7c:3f:b3:0d:dd:
35:fd:41:29:e4:c1:28:52:f6:5c:54:88:2c:ee:45:
08:a2:33:dd:3e:3c:8c:26:ef:72:d3:5a:65:93:3d:
80:a9:f9:82:4f:5f:a1:be:b9:8c:1c:71:94:e8:91:
6b:80:31:d0:b7:5a:5f:10:bc:a9:46:3d:46:c1:e7:
31:24:2a:ea:a5:e1:de:c0:a4:3b:91:a8:2a:7e:8a:
96:35:5d:ba:4f:d0:0b:96:9e:c4:b4:20:12:6a:9c:
e3:b8:2b:07:71:f2:10:c6:37:74:9c:72:4f:f8:96:
60:b5:21:f2:19:16:a9:28:19:32:3d:57:3c:06:8d:
32:f9:cf:f8:15:09:05:ed:18:2c:a1:db:0c:30:b2:
03:55:96:52:57:c0:a7:cf:56:2a:d7:db:5b:bd:81:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:46:55:D9:AD:53:63:E4:BC:EC:1A:20:FF:71:EF:DA:FC:EB:19:41
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4776d63a-2288-4d01-9160-72cbaac6b556.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.224.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:17:9d:a7:f3:07:a0:23:f1:c2:b3:91:61:70:56:72:94:7b:
1d:66:5e:a1:fe:32:3a:9f:89:0d:af:ef:36:ce:69:7e:69:38:
7e:b3:dd:37:2a:49:18:7b:b5:f8:ff:e2:43:31:6d:06:2e:88:
1b:c4:e9:f4:99:47:8b:c1:24:b3:e1:7e:0a:1a:bf:e5:55:2d:
ed:0f:fd:83:eb:45:c4:ff:4e:18:7f:d7:11:bd:a8:49:2a:d5:
fc:63:e8:1a:de:fb:de:f9:9d:25:db:87:d3:ba:a7:4d:4c:fa:
80:f3:81:a9:c4:9f:71:36:57:58:5a:d5:45:fc:d9:41:21:28:
c0:90:ed:d0:2a:c4:df:c1:77:7f:76:16:8d:82:4f:23:38:7a:
e7:2d:2e:05:f3:04:5c:8b:3d:1e:56:bc:90:23:15:3d:09:cd:
61:41:79:bf:ce:ee:5b:a2:65:ed:c1:09:ef:b8:a9:e5:a1:b6:
af:43:66:4b:ad:13:7c:47:29:8c:c1:19:1a:ad:84:e4:6c:ab:
57:da:a6:87:fa:e6:2f:3f:5a:96:50:07:d3:2d:05:19:ea:11:
bb:0d:12:8c:7e:02:f2:5b:6f:c8:1f:88:0c:a7:9d:fc:5a:7f:
2a:37:1e:70:a5:6e:ea:54:a8:f6:a8:45:75:b0:b9:67:fb:ce:
a2:5f:2f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 22:30:33 2026 by rpki-client