
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ce24ee5-0314-48e9-a040-c64f60c904f4.roa
File: 8ce24ee5-0314-48e9-a040-c64f60c904f4.roa (raw, json)
Hash identifier: cc78ePO9pLaBpVVsc8KXqT4WfjgDC2avQqT3wOdLGXY=
Subject key identifier: 0D:CD:1F:CE:BF:0A:1C:E4:A7:30:4F:63:A2:79:2A:28:3C:7D:B6:EA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 121F572676C8CB17E437839DAB020DEDDB4BAD92
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ce24ee5-0314-48e9-a040-c64f60c904f4.roa
Signing time: Thu 18 Jun 2026 00:00:11 +0000
ROA not before: Thu 18 Jun 2026 00:00:11 +0000
ROA not after: Wed 16 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 32.236.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:1f:57:26:76:c8:cb:17:e4:37:83:9d:ab:02:0d:ed:db:4b:ad:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jun 18 00:00:11 2026 GMT
Not After : Sep 16 23:59:59 2026 GMT
Subject: serialNumber=b9fb30a0b4c75f3a675b0f605b8414018c841ef4810ad2c69170a0aa59217e13, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:b8:a4:24:10:72:b7:80:6c:e0:2d:18:1f:
58:eb:68:6c:2c:9a:4d:8a:7e:37:09:1e:a5:8f:67:
95:44:f5:e8:0a:63:e4:d1:75:af:cd:8b:6b:d7:31:
d9:01:3a:44:3d:37:14:a9:ef:ad:2b:ed:1c:0a:82:
4a:c7:d0:e2:f3:26:00:6e:53:85:cf:8a:67:1a:b4:
54:50:06:3f:cf:81:4a:aa:d5:f3:74:4f:dd:0a:06:
02:76:8c:ad:3b:17:d2:91:27:dc:e0:45:60:c0:2b:
74:7b:aa:f5:dc:88:04:b4:fb:ad:6b:e9:9e:84:28:
f1:77:0a:34:a5:1e:b6:f3:ea:7b:e9:a6:71:73:da:
5a:e0:2b:c9:a2:5e:7b:2a:c7:e6:83:54:94:6f:6c:
1c:26:44:fb:1c:2a:84:85:f1:89:b7:c7:05:1b:68:
b2:af:a7:db:20:69:b9:f3:0e:0f:6b:82:c0:8e:5e:
d9:15:b4:e9:6b:d3:1b:8f:17:40:c1:7e:b6:68:45:
d5:5f:6e:c7:69:43:3a:28:61:46:51:85:2d:42:b5:
fc:33:82:80:b7:5d:2c:f5:4d:55:45:9b:4d:da:3a:
67:4c:05:b2:fe:93:e6:8a:14:9f:c3:10:7d:af:bb:
09:c0:16:d4:05:b8:e6:60:2b:38:42:24:1b:e7:82:
eb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CD:1F:CE:BF:0A:1C:E4:A7:30:4F:63:A2:79:2A:28:3C:7D:B6:EA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ce24ee5-0314-48e9-a040-c64f60c904f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
32.236.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:e8:13:23:7a:eb:0c:62:c9:08:d6:0e:25:64:67:91:89:00:
25:13:3f:f9:21:54:1e:26:07:05:af:29:ab:d0:38:6a:4d:39:
7f:d5:e4:51:68:65:50:0d:b2:4e:43:e6:3a:d1:d7:2b:ed:ce:
22:61:35:d7:4b:a6:f6:e5:0f:f7:65:cd:2d:1c:94:0c:43:2a:
63:db:53:e1:e6:db:4e:8a:69:f9:24:8b:d6:73:d9:65:d9:66:
3d:d9:eb:68:a0:a0:c1:16:e2:35:1c:a6:06:d8:7a:74:25:c8:
4e:fe:51:f8:5b:dc:91:dd:a3:6b:e8:d0:9f:d8:ac:8f:89:bd:
c9:0c:92:88:3a:99:99:f9:17:de:75:12:db:87:b3:0f:1b:84:
18:64:05:35:58:d5:b9:89:42:a7:99:1c:dd:75:2c:9c:1d:be:
73:82:58:0d:9f:d2:c7:c6:06:5d:dc:95:40:70:fc:a5:d7:62:
b1:b4:ba:6c:ce:f6:06:79:f8:56:bd:bf:24:49:b8:89:56:c3:
ae:9d:84:9b:93:bd:fb:56:da:9f:f3:21:6f:0b:fa:87:36:2f:
38:c6:93:1c:cc:5a:5f:1b:61:6e:20:54:1d:5a:ba:c8:7d:06:
53:ff:76:c0:21:ac:35:fb:7b:17:a2:04:d9:18:b8:6b:db:ec:
e9:3e:cf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 03:58:50 2026 by rpki-client