
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f5b1387-7bbb-4343-91e2-7123055c203c.roa
File: 7f5b1387-7bbb-4343-91e2-7123055c203c.roa (raw, json)
Hash identifier: 6J5l2rEvTT2aG5jS2fvYhVvcIQzL/MYQSHSyT8wPoMs=
Subject key identifier: 28:1C:C3:1C:C0:93:97:D0:48:27:A9:7C:43:48:83:16:A4:19:9F:82
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6C33B085CDC0F814308E180D9748C643E0935D06
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f5b1387-7bbb-4343-91e2-7123055c203c.roa
Signing time: Mon 03 Aug 2026 02:21:43 +0000
ROA not before: Mon 03 Aug 2026 02:21:43 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 157.175.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:33:b0:85:cd:c0:f8:14:30:8e:18:0d:97:48:c6:43:e0:93:5d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 02:21:43 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=bcb3c687384917ef262b6eb788432b615a75238bc763ae12a4123ecb88f69e79, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9d:ff:fa:a4:b7:1d:b0:af:c8:f9:c9:5d:bf:
64:54:6b:df:cc:fd:41:9a:0d:cf:82:5e:9a:ca:14:
68:e1:ff:66:f6:ba:32:9f:38:a4:5d:02:03:da:25:
9e:c2:4f:b8:e3:4c:f7:41:31:52:bd:44:e5:f5:17:
49:b4:87:ea:d1:e3:41:06:86:75:05:1c:88:e3:3b:
b1:37:84:e2:ae:bc:63:cf:c5:fa:11:39:d0:af:b1:
31:23:e1:bf:d3:bb:3b:ff:85:c1:e0:fa:94:cd:6e:
74:b6:bf:f9:39:57:bb:f6:d6:c9:8d:54:fe:47:ff:
ca:ad:26:12:9e:16:ce:8b:f2:9f:3e:1c:74:3e:ae:
f1:22:2d:51:c2:ce:62:3c:fc:86:a9:5f:72:e9:ed:
10:d6:9b:4a:c5:d5:99:5d:27:02:52:9a:6b:21:a9:
6b:a9:8c:43:ee:3d:01:dc:ef:8a:b5:6d:2a:74:bc:
71:d0:30:93:77:2d:77:56:b7:ed:fa:25:1e:68:28:
12:df:96:be:71:45:21:bc:8a:a9:cf:1e:3f:06:47:
ad:79:b9:20:83:10:41:8c:13:2b:bb:87:c8:34:8b:
a5:fc:df:8f:4b:8c:df:46:e9:a1:9f:71:8f:a6:6e:
b2:76:b8:b5:f0:33:af:9e:f2:e8:25:75:93:65:f5:
72:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1C:C3:1C:C0:93:97:D0:48:27:A9:7C:43:48:83:16:A4:19:9F:82
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f5b1387-7bbb-4343-91e2-7123055c203c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.175.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:4c:21:6e:2d:2b:0a:63:8c:53:7c:6c:f2:d1:c8:b4:f5:c2:
15:12:1e:53:e4:15:40:30:28:c9:99:a0:b2:fa:4b:d6:74:b9:
9a:9a:f4:ac:ff:c7:de:c0:f1:eb:12:6e:58:b0:f5:5d:fa:49:
7c:27:cb:a7:46:f4:1c:7b:b7:a4:d1:0e:08:4d:81:9d:8f:9b:
f6:b7:78:4f:a6:63:79:a9:88:b7:0d:62:d6:0e:ef:06:d3:8e:
be:70:25:5c:33:be:e7:5a:84:d7:c5:da:f8:73:a1:63:ef:42:
ec:bb:6b:5d:da:c6:69:70:d8:2d:15:74:7a:84:72:c5:dd:b6:
b9:68:df:21:d8:25:51:3f:ea:e5:81:8c:84:b2:51:c3:e7:30:
e2:f2:bf:c4:55:81:cd:2f:82:b0:25:68:cb:93:89:e0:d6:1f:
04:06:cc:6f:0a:e7:6b:66:28:f6:a6:35:35:84:05:e1:df:26:
06:0a:c0:b7:38:d3:d3:46:a3:da:cf:aa:eb:19:d7:74:40:97:
57:16:3e:87:02:43:d2:08:2c:99:e4:2e:6d:48:c5:5d:3a:62:
b9:b9:10:d0:d8:82:31:70:8c:4a:81:07:81:81:7d:22:88:ab:
32:d4:94:32:74:1a:09:7d:e4:67:53:01:81:81:ec:fd:d6:74:
c4:87:bc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 06:57:14 2026 by rpki-client