
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b1ffe85-ed35-4a64-8c21-c5ac967bf1b9.roa
File: 6b1ffe85-ed35-4a64-8c21-c5ac967bf1b9.roa (raw, json)
Hash identifier: AIQfRzPDt+3khp8hqUkyrzuWljiejS904TYeZaf8gJQ=
Subject key identifier: 7C:04:26:DB:B6:8C:F4:99:72:EC:D5:85:54:59:A2:EE:6E:32:F1:8D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 217A1C9BF1D0622963C511192BA2F7420DC6387C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b1ffe85-ed35-4a64-8c21-c5ac967bf1b9.roa
Signing time: Mon 03 Aug 2026 02:11:16 +0000
ROA not before: Mon 03 Aug 2026 02:11:16 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 204.236.130.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:7a:1c:9b:f1:d0:62:29:63:c5:11:19:2b:a2:f7:42:0d:c6:38:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 02:11:16 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=ce334e30f91f29f1c6f39e27d14fcd081c0fc8b514b3464c14b08523db934027, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:55:44:5a:07:73:ed:2c:f0:dc:a8:b1:a5:
d4:80:7e:57:27:3b:00:d9:27:4f:92:64:60:dc:4b:
2c:f6:22:9a:d7:05:08:28:fa:47:d2:0b:ac:6b:51:
a6:80:b5:fe:2c:4c:e6:6f:a1:be:bf:81:48:bd:33:
a7:48:8d:d4:82:10:f9:65:93:c5:d1:6b:6f:e6:1b:
97:1e:4a:93:e4:22:c6:86:85:b9:7c:43:75:ee:26:
c0:5f:fc:34:0b:c3:df:8d:d8:d0:35:3c:8e:7b:c9:
ee:10:da:6f:20:ca:22:45:47:a8:d8:cc:c9:bb:ec:
8f:cc:ff:9d:a5:61:e8:82:45:67:54:77:0b:5a:00:
8d:9b:a4:87:3c:d1:dd:85:10:c4:be:2c:c7:76:d4:
70:d4:f9:c9:24:1b:e1:21:e1:f2:f7:c2:60:69:ef:
98:39:a8:13:32:9b:09:cf:0e:d2:c5:6f:ed:7e:a2:
e4:9e:66:a5:d2:8e:99:a0:35:56:70:de:08:0a:82:
45:54:10:b9:33:4d:12:8e:09:d6:b5:8b:e4:f3:85:
ad:bf:00:2f:f9:eb:6e:98:9d:f6:32:e7:4b:8c:e0:
7d:97:be:2e:21:eb:e6:8d:67:69:f5:40:26:48:66:
69:21:d3:51:de:2b:fd:64:7e:f2:85:4c:12:be:bb:
cd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:04:26:DB:B6:8C:F4:99:72:EC:D5:85:54:59:A2:EE:6E:32:F1:8D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b1ffe85-ed35-4a64-8c21-c5ac967bf1b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.236.130.0/23
Signature Algorithm: sha256WithRSAEncryption
33:88:e3:63:28:97:34:3c:8c:33:9a:97:7f:a4:61:9b:7c:a7:
f2:5a:60:4a:ee:e2:de:0c:5f:a1:8c:b7:3a:3e:b2:47:1c:11:
83:b4:2c:2a:7f:a3:ff:9a:4e:99:00:91:47:5c:a0:56:91:52:
80:d5:aa:e7:34:22:c2:2c:5c:3a:cc:04:7a:a8:cc:bc:e1:71:
38:51:68:84:02:49:e0:13:75:81:27:97:4c:81:8d:66:42:c1:
4e:67:62:2e:ee:e9:82:82:0a:1d:67:1b:89:b9:78:81:c0:94:
c5:2b:ea:1f:10:03:cb:53:e7:c3:26:29:d9:04:b8:13:7a:f6:
1c:9f:40:f6:1d:41:0d:9c:57:9c:ab:12:05:f0:fd:1f:e1:61:
53:e8:c0:4f:66:b4:15:4c:ba:af:f5:8e:ea:7c:77:90:1b:ea:
c3:82:32:0e:5e:9b:f0:fd:81:23:c1:90:de:31:a6:d1:21:f7:
29:8c:df:61:e7:16:c1:56:bb:b2:9c:43:84:0b:3b:ca:f5:f5:
fa:5d:66:24:15:af:e1:c3:dd:0a:20:27:6a:9c:bb:61:82:0d:
8a:49:2b:8b:0f:f3:18:df:4d:37:be:36:24:64:42:de:bf:e0:
ff:24:24:c5:52:74:f2:13:8a:a5:be:a1:fc:60:1e:7d:08:6b:
a1:92:36:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:42:23 2026 by rpki-client