
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75918b31-bcd3-4ccb-bc4a-aa290679e410.roa
File: 75918b31-bcd3-4ccb-bc4a-aa290679e410.roa (raw, json)
Hash identifier: OKJSVxMJU4auG+kIMRR8/bmwqdOUAeH8c5EAAn7NjYU=
Subject key identifier: 31:CA:E3:BF:9B:15:ED:4F:83:C9:3A:F8:BE:0C:9C:B9:AD:AF:3E:30
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7CFE0A3991FA255B83CE11269AA1C8F4B70AED54
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75918b31-bcd3-4ccb-bc4a-aa290679e410.roa
Signing time: Fri 31 Jul 2026 00:20:53 +0000
ROA not before: Fri 31 Jul 2026 00:20:53 +0000
ROA not after: Thu 29 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:fe:0a:39:91:fa:25:5b:83:ce:11:26:9a:a1:c8:f4:b7:0a:ed:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 31 00:20:53 2026 GMT
Not After : Oct 29 23:59:59 2026 GMT
Subject: serialNumber=2f6d93a51e3be019a833a0518859653785a3c0202c08d3032d21324cca2951ee, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:53:af:47:c8:d4:a5:1d:8c:03:fd:51:6f:
10:b7:67:b4:f7:cc:f6:90:8d:82:bb:de:1e:06:5f:
95:38:7a:44:ea:54:13:ab:ac:56:49:a2:f9:47:fa:
e6:0c:c3:b4:e7:1d:06:0a:b4:de:93:98:d2:e2:dd:
f8:29:8a:0a:ad:6b:52:e8:fd:d4:ac:65:02:92:ef:
40:13:82:fd:86:bc:6f:6e:f6:bd:4d:3a:5f:00:37:
1f:cf:81:ba:48:c9:eb:72:f2:6a:9b:dd:99:4e:25:
42:27:df:37:b4:44:bb:26:be:cf:24:44:4e:b9:7e:
bd:26:c9:76:33:02:cb:e0:68:a9:6c:0d:c2:dc:bb:
5b:46:15:6e:6f:8e:1e:20:25:27:00:9d:79:c1:75:
ab:60:d9:fa:03:34:6c:e2:25:91:2d:4f:01:20:21:
f3:45:67:b2:1a:96:b7:b8:ff:cb:c5:dd:88:f5:d3:
3c:93:cd:09:29:e0:39:ac:e6:10:10:3f:a4:b0:c0:
df:b1:20:40:69:03:7a:11:6c:9c:a6:92:75:c6:ca:
e4:a1:63:3e:d5:98:22:09:8d:40:58:76:79:77:ac:
a5:87:cf:ea:ce:66:26:c7:8b:d9:2c:64:22:39:1b:
82:11:4a:c3:2e:ac:5c:45:8e:1d:17:19:40:c6:e3:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CA:E3:BF:9B:15:ED:4F:83:C9:3A:F8:BE:0C:9C:B9:AD:AF:3E:30
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75918b31-bcd3-4ccb-bc4a-aa290679e410.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.99.0/24
Signature Algorithm: sha256WithRSAEncryption
71:dc:56:52:6b:1d:88:c8:b7:1b:5d:1e:f6:48:1e:59:a4:f6:
26:a0:45:14:b6:0b:2b:11:e4:28:cb:a5:5b:b7:37:d4:5e:82:
28:5a:00:9d:33:57:24:32:91:6d:38:f0:d7:04:b6:b8:59:b5:
68:b6:ee:f0:cf:00:ba:08:52:21:aa:83:25:b9:d7:37:ae:4d:
a1:e4:5e:5c:70:aa:ef:77:a7:1a:53:b1:5f:b1:30:fd:2a:8d:
83:1c:e4:7f:74:d4:ae:d2:05:d7:30:84:58:63:e4:42:6c:5c:
98:df:7e:37:07:cc:38:45:a4:84:6c:55:96:88:e4:b6:58:72:
92:01:f7:c5:ab:98:06:cb:99:67:68:13:7a:5e:95:06:fb:7e:
3d:10:9b:63:b4:bd:62:91:c1:4b:71:3c:d4:bc:25:07:3a:79:
7c:5d:eb:b5:1e:a2:81:e7:fa:e6:0e:3d:f5:eb:1b:67:1a:bd:
9f:28:85:46:c7:17:02:19:3f:52:0b:15:14:91:99:b8:9e:22:
b3:c3:63:d3:0a:cc:e0:cb:94:5f:6f:28:c3:6b:bb:19:57:27:
0f:9c:f3:10:bf:30:69:60:53:ef:46:f7:6c:27:49:5f:71:3f:
3c:e3:c8:af:5f:28:25:4a:4f:08:0a:c7:c3:bf:ef:48:e5:84:
70:7c:4c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:21:17 2026 by rpki-client