
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80c452dc-effd-446c-b6eb-9d13759e7287.roa
File: 80c452dc-effd-446c-b6eb-9d13759e7287.roa (raw, json)
Hash identifier: H/7oZJ8RyN+PcJgAU7P51Lkm8j1o/ATx/LwzbXL9pb0=
Subject key identifier: 1B:3C:F8:E4:0A:88:55:F4:6C:1C:57:0A:ED:80:20:77:9E:CD:4B:C9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: E004A85F5B3AF650D8FE293501E2234434FD2C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80c452dc-effd-446c-b6eb-9d13759e7287.roa
Signing time: Wed 29 Apr 2026 00:41:31 +0000
ROA not before: Wed 29 Apr 2026 00:41:31 +0000
ROA not after: Tue 28 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 206.217.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e0:04:a8:5f:5b:3a:f6:50:d8:fe:29:35:01:e2:23:44:34:fd:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 29 00:41:31 2026 GMT
Not After : Jul 28 23:59:59 2026 GMT
Subject: serialNumber=a9724d4696662080d9f6eae0f0989bb2971fd7222078f2642d0a7d1de13769e5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a0:76:94:88:61:da:95:6a:f5:92:00:31:f4:
5f:71:17:51:fb:4c:07:04:9b:72:95:57:49:bc:22:
15:ca:2c:a2:86:ff:d7:33:65:c7:ab:fa:ee:ad:cc:
a0:6a:df:ce:4d:21:24:3f:c3:ea:d7:0d:89:f9:12:
76:5f:9b:51:7d:d6:e4:67:36:58:9f:d6:c2:64:14:
a8:4e:38:59:fe:5f:34:ca:e6:43:5b:7a:aa:a6:da:
a2:a7:89:fe:1b:62:5f:03:6e:8f:41:c8:75:37:36:
f0:10:04:c8:85:9d:ab:ee:cb:5a:e6:a8:0e:d8:5a:
0c:38:6e:67:88:93:01:5a:a4:1b:c4:93:dc:ba:19:
9f:8b:24:cb:d1:38:06:4c:01:60:28:6e:57:d9:5f:
00:53:a9:68:3d:93:e9:58:61:fd:2e:63:18:73:b9:
60:d4:73:64:3c:6a:88:55:25:00:ce:6b:09:df:95:
e6:9f:af:8f:43:3e:ea:dc:9a:6b:57:7e:ec:36:f3:
a4:3e:9f:77:72:7b:e8:cc:ec:6d:b0:4b:dd:20:dc:
71:81:b7:f1:15:d2:be:98:82:7e:a8:46:dc:6a:d8:
7d:ec:92:50:77:5a:d7:5f:65:a4:cd:a4:c8:4e:a2:
6a:80:0a:de:ba:21:f5:4e:75:5f:10:45:49:7b:82:
f2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3C:F8:E4:0A:88:55:F4:6C:1C:57:0A:ED:80:20:77:9E:CD:4B:C9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/80c452dc-effd-446c-b6eb-9d13759e7287.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.217.160.0/19
Signature Algorithm: sha256WithRSAEncryption
27:98:40:5c:66:13:86:14:83:c3:11:82:fb:36:7e:e2:00:47:
9a:02:96:b6:6f:6e:53:39:8a:ee:15:b0:11:e6:d9:a9:9e:af:
f4:cf:78:72:06:80:7c:5b:9f:ff:1e:8c:9b:3b:8a:f3:54:28:
75:ab:25:73:70:13:32:37:78:d8:df:7f:65:d5:9c:45:b7:a3:
b2:6e:22:ae:3a:2f:db:ff:86:89:d2:97:b3:58:ce:a2:c8:f4:
b8:5b:1e:78:07:9a:28:fd:00:6b:18:fd:46:a9:8c:a3:00:3f:
af:0c:93:d7:a0:2e:bd:c4:f9:08:49:aa:b0:52:74:23:b4:e7:
53:09:e8:21:aa:51:07:8d:19:9b:8e:8a:9b:20:56:05:9d:b5:
09:7e:f9:1c:90:0c:79:82:d5:02:a1:ce:14:40:9b:eb:08:9f:
d8:1f:1c:6a:d4:7c:26:4d:b5:7a:9c:ac:15:4e:1e:56:9f:e4:
94:be:53:3f:25:f9:e5:1c:84:65:9a:dd:0b:b2:b4:b7:80:63:
a9:e4:08:6e:aa:10:84:be:42:ad:67:39:24:f5:1f:8b:c7:9f:
16:4d:a3:92:48:67:2b:25:3d:66:63:a2:73:01:59:6d:19:09:
59:07:38:68:ca:f1:5b:1c:35:f1:a8:3b:a3:4c:4f:19:4d:48:
ea:cc:f7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:45:18 2026 by rpki-client