
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fda046a-2a54-4c39-b039-3924168c38b4.roa
File: 5fda046a-2a54-4c39-b039-3924168c38b4.roa (raw, json)
Hash identifier: a4GrdoAPyfnCmrQBsXKZDqR3eFtDGJ5CbEj9JIQREUA=
Subject key identifier: F6:4C:A4:05:C4:C0:9D:62:93:05:17:F2:5A:EC:35:6E:0E:23:F7:9D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2AE6B59AB259E01F40C1F5323497F879DB78E956
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fda046a-2a54-4c39-b039-3924168c38b4.roa
Signing time: Fri 01 May 2026 00:21:31 +0000
ROA not before: Fri 01 May 2026 00:21:31 +0000
ROA not after: Thu 30 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 16.146.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:e6:b5:9a:b2:59:e0:1f:40:c1:f5:32:34:97:f8:79:db:78:e9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 1 00:21:31 2026 GMT
Not After : Jul 30 23:59:59 2026 GMT
Subject: serialNumber=df2e8f3be4794f5a5f937fcf86525377185f492061331b31b90491a5163bd90b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:b4:4e:9e:7f:ec:9f:1f:b9:31:45:03:27:
cb:5c:9d:9a:2e:7f:11:6c:3c:e2:49:ed:23:9b:c5:
be:c3:85:30:88:7b:f6:09:7a:77:60:14:06:02:ce:
91:da:70:1f:cc:ad:aa:5c:76:09:86:8d:03:c3:10:
7e:3b:3f:03:56:ad:eb:4f:30:87:7d:81:70:56:5d:
71:64:3b:bd:99:86:cb:49:a1:0c:26:85:a1:f4:ec:
41:76:9a:c4:bd:63:a0:55:a8:14:50:99:ed:66:8f:
75:eb:70:6c:8b:74:a5:cb:48:fa:4f:52:8e:ce:ff:
19:c9:5f:ea:5c:80:62:6c:df:2c:24:15:14:f7:7b:
7e:27:1d:3d:1e:4c:fe:6f:6f:40:bd:47:63:ac:b8:
1c:dd:ec:76:fd:40:c1:06:94:d0:5f:6b:ef:b2:d5:
43:40:75:4d:51:d4:37:4e:9e:97:98:51:a1:f0:85:
f7:0f:a8:e2:26:eb:e1:0b:b8:6f:35:b0:25:b9:61:
3d:a2:7c:d0:74:c5:be:14:6a:04:ac:80:dc:2e:d4:
59:f9:59:db:ee:1d:ca:03:8d:28:14:47:52:28:b1:
94:b9:dc:2f:58:2a:8d:34:c4:19:df:8e:26:dd:f0:
5a:cd:6a:c7:99:22:82:d4:2a:23:52:7c:92:12:93:
b6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4C:A4:05:C4:C0:9D:62:93:05:17:F2:5A:EC:35:6E:0E:23:F7:9D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5fda046a-2a54-4c39-b039-3924168c38b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.146.0.0/17
Signature Algorithm: sha256WithRSAEncryption
9d:13:94:4f:a4:b3:65:05:61:0e:e9:37:bd:b5:f2:81:ea:80:
c8:d2:16:17:2e:72:b0:20:14:95:93:c6:19:15:90:de:b6:07:
a7:6d:8f:87:2f:c8:75:91:eb:64:28:89:53:8b:02:fd:2a:ec:
96:3c:c7:d2:ce:b4:5d:29:1b:27:85:2e:e3:3e:87:33:bd:51:
bd:c1:4a:1c:7b:44:f4:82:33:d3:1c:1b:ee:1d:07:a0:a7:21:
2a:0c:f7:e9:8e:d1:c1:73:ba:e0:58:e0:2b:30:47:94:68:cd:
82:4c:51:4a:7c:e2:6b:df:71:73:14:d9:fb:74:bb:bc:74:0a:
22:8d:80:55:2e:12:38:ac:c4:a5:d9:00:c0:07:df:7e:d2:82:
2b:e3:08:fc:69:c4:22:c6:00:8a:4f:bd:ad:c0:98:dd:44:20:
5d:00:01:56:77:2e:40:5e:da:11:e0:15:3f:f2:18:23:71:24:
37:8f:e7:20:77:06:0a:d0:a9:39:09:b1:17:e8:fb:65:6a:b6:
13:37:6a:48:96:bb:ab:94:5e:1a:7b:85:e8:3c:3d:1c:f2:4f:
42:82:30:70:c5:e6:ef:9e:3e:67:fe:b0:bd:60:08:72:7e:8e:
52:1a:53:fc:45:20:4a:7d:18:6a:8c:96:58:60:9f:32:03:5f:
02:05:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 21:39:51 2026 by rpki-client