
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75f4e946-8096-4a85-b5c0-07ef274af962.roa
File: 75f4e946-8096-4a85-b5c0-07ef274af962.roa (raw, json)
Hash identifier: lm5oeyUKXPKswKg9zITjnFMAQ+UzKPl/2pNZp18wF34=
Subject key identifier: 65:F7:EA:02:B2:5A:82:EF:85:A6:AE:52:1F:BE:28:7B:05:C4:8E:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4CDDE7C843B304F16C726E663A20A7CAC1308BD5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75f4e946-8096-4a85-b5c0-07ef274af962.roa
Signing time: Wed 29 Apr 2026 00:50:41 +0000
ROA not before: Wed 29 Apr 2026 00:50:41 +0000
ROA not after: Tue 28 Jul 2026 23:59:59 +0000
asID: 14618
IP address blocks: 54.136.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:dd:e7:c8:43:b3:04:f1:6c:72:6e:66:3a:20:a7:ca:c1:30:8b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 29 00:50:41 2026 GMT
Not After : Jul 28 23:59:59 2026 GMT
Subject: serialNumber=5a5322823e02f966185cd657524a758048afd44733282cb90f7bc27c2d31fcf9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:c3:fe:0b:ae:50:7e:41:2c:b3:9c:84:57:
6d:48:c6:42:f3:52:b9:5c:39:d9:3b:60:a3:61:17:
42:53:21:35:ca:e0:a2:2e:0d:48:40:c7:3a:c2:2b:
a8:7c:fb:e6:6e:a1:cd:ed:79:29:c2:3e:58:ee:30:
05:77:ad:3c:e5:62:b3:9a:f4:64:af:0a:b1:53:24:
3d:1e:28:3c:78:c3:3a:fb:1d:53:20:65:ab:0a:e5:
99:7f:03:7d:36:e0:4e:0c:31:95:5e:44:68:1e:f2:
0d:e9:36:20:1e:ae:e9:87:99:d9:aa:25:dc:7d:6a:
4f:c1:3d:7d:03:aa:fc:21:f6:fb:2f:27:0f:22:2d:
ac:a7:8f:dd:67:e3:a8:11:fb:00:71:ae:45:2e:e8:
00:25:c1:64:60:85:d4:32:43:f1:06:d6:1f:bd:25:
25:cf:85:9d:cb:22:10:1c:f7:c1:2f:b8:2b:c3:66:
81:1b:42:dd:8d:0f:32:55:fa:f2:1c:e2:4f:c2:5f:
e0:00:4e:ea:bb:aa:48:f9:fc:3f:83:60:c1:43:59:
e4:bc:66:19:a9:de:00:59:58:de:c5:b8:28:43:5f:
69:38:f1:74:17:62:71:74:e3:c6:87:18:67:b0:84:
42:35:d9:82:0d:e4:b8:33:b7:14:85:54:30:e1:ad:
ec:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F7:EA:02:B2:5A:82:EF:85:A6:AE:52:1F:BE:28:7B:05:C4:8E:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75f4e946-8096-4a85-b5c0-07ef274af962.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.136.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:5d:77:74:ff:3b:cf:1f:b8:55:41:b7:c7:e2:1e:2d:91:00:
24:81:09:15:f9:a1:01:5e:d3:89:0c:b4:35:25:e2:24:3e:3d:
92:ff:ee:c5:49:65:66:34:e7:49:f3:65:b8:17:f2:eb:e5:89:
08:92:28:ad:06:ff:dc:21:a5:65:77:6c:ae:1f:c6:0e:19:c8:
3d:8c:40:e1:07:47:e0:c0:7c:6e:90:07:b2:c0:c9:0f:97:20:
a5:1e:93:52:33:9b:70:4c:a1:de:41:04:7f:b2:d3:e9:61:2b:
bc:4c:d6:75:79:19:13:21:61:3e:b2:a2:d0:74:31:4f:d0:78:
36:7c:f4:23:a6:5a:6c:ea:24:4a:af:90:74:d3:a1:ad:5a:94:
a4:dd:15:9a:0a:f4:e2:7b:94:84:02:67:b5:06:7f:e3:d1:51:
47:53:4e:5d:24:ae:54:ea:7e:60:41:32:e0:90:bf:63:78:31:
64:93:85:1e:d2:5c:5c:e9:e1:81:ff:77:08:46:7e:a5:c8:67:
b4:d9:43:5f:13:13:84:c5:c4:66:42:2f:22:96:e3:a7:2b:06:
f9:ad:78:d0:cb:2f:d3:e9:67:d2:07:96:71:a2:df:10:b7:1e:
e1:07:d1:cc:31:93:1d:31:b0:e6:e5:8f:88:49:6a:aa:5c:f3:
0d:45:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 21:38:31 2026 by rpki-client