
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7652b847-2f97-4bb0-a7c5-dcaa27632eed.roa
File: 7652b847-2f97-4bb0-a7c5-dcaa27632eed.roa (raw, json)
Hash identifier: 9S6ua+xCZg4o6iTBJE0xf70netijhwmkEycGso4x0sk=
Subject key identifier: 40:B5:6C:08:FC:8E:C9:4A:94:C8:53:2D:F1:79:1D:21:D0:EF:90:A1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2DD87A5436D68B0A3B451F83173DA89573F543D4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7652b847-2f97-4bb0-a7c5-dcaa27632eed.roa
Signing time: Mon 27 Apr 2026 00:11:21 +0000
ROA not before: Mon 27 Apr 2026 00:11:21 +0000
ROA not after: Sun 26 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 129.239.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d8:7a:54:36:d6:8b:0a:3b:45:1f:83:17:3d:a8:95:73:f5:43:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 27 00:11:21 2026 GMT
Not After : Jul 26 23:59:59 2026 GMT
Subject: serialNumber=136c0e9e521afe1db1d879c5e1487824eb2048c66ce7b71b21034f5ebdde62d1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:99:06:4b:b5:41:5d:96:6d:ce:eb:92:47:
6f:8e:9d:ad:df:4a:f3:c6:cf:e8:87:e3:23:65:53:
a7:bf:25:06:6f:9a:73:3c:c4:d3:e1:a8:44:11:35:
35:a3:3f:fb:15:25:43:9e:03:ed:4b:dd:4b:25:96:
72:b9:08:7c:8a:8c:9a:3b:0c:76:ca:b4:c8:0b:d2:
b2:11:e8:e5:f7:fc:63:5e:58:5b:f0:0f:6f:a5:77:
f5:ac:37:d3:11:e7:6d:21:7f:c2:8d:ff:7d:3a:c3:
99:23:bb:6c:66:68:3a:51:35:92:4c:c1:26:c1:0f:
55:e7:fa:10:7f:1a:82:b9:98:b3:14:6c:c8:05:8b:
15:60:18:84:61:04:73:f5:42:ee:39:02:7b:05:0b:
99:9c:11:7d:8b:81:e6:dc:f3:f4:59:75:50:86:e1:
f9:43:6a:b8:7b:18:23:d7:b2:6f:5f:32:e9:37:0d:
d0:71:57:9d:bd:f4:86:6c:dd:48:1a:05:72:67:11:
86:48:6f:ec:3c:45:9c:75:33:56:a2:50:76:85:81:
a8:ab:aa:17:ff:b4:8b:31:5d:68:44:7d:7f:87:55:
9a:8e:46:e9:32:9b:ab:81:1e:19:f5:74:55:91:3f:
7b:2a:6c:1b:a5:77:7c:08:b3:e7:ab:ff:0e:a9:08:
ff:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B5:6C:08:FC:8E:C9:4A:94:C8:53:2D:F1:79:1D:21:D0:EF:90:A1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7652b847-2f97-4bb0-a7c5-dcaa27632eed.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.239.0.0/16
Signature Algorithm: sha256WithRSAEncryption
06:a1:ed:f4:fc:5f:6c:0d:37:40:a2:9b:6a:7a:e0:12:c1:79:
a2:d2:00:5a:d6:fa:ee:6c:c7:9d:d3:78:56:f3:00:6d:90:39:
8b:13:ef:db:f9:e8:ba:ed:c4:1d:3b:68:36:eb:bf:db:1b:cf:
fd:d8:02:85:fe:f1:aa:9b:21:34:78:c3:51:bb:93:8b:33:67:
ba:06:c8:77:3e:c7:44:70:d2:75:56:8d:83:b9:e8:83:a9:8b:
b6:09:6e:b7:73:cf:1d:35:73:7f:f7:44:dd:7e:a0:f8:2e:a3:
1c:5a:c4:80:ed:f8:b6:02:2d:72:bf:9b:4f:1c:d2:cf:f1:0f:
b4:6e:db:41:d5:af:0b:94:44:07:90:be:dc:17:c4:c5:4b:7f:
1b:7a:03:e0:54:c3:9a:dd:e8:3e:a9:0a:c5:b8:c8:31:5d:4b:
48:87:0b:5e:40:b3:37:15:1c:cf:bf:d9:8f:33:dc:b4:45:17:
ce:4f:ae:38:ea:c5:34:c6:98:71:31:f1:fd:ea:99:18:0d:97:
38:00:11:d5:74:e5:cd:e7:30:17:ee:9e:cd:1e:94:a2:05:71:
80:1c:e3:f3:29:98:8f:52:f5:82:be:d8:02:96:d6:aa:8e:cb:
72:6f:d9:2b:7e:8b:a2:32:48:12:77:29:de:ba:f4:2d:a7:c9:
77:e2:bf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:27:48 2026 by rpki-client