
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a073e-457b-4a4f-9f39-59ba5c5efc92.roa
File: 8d6a073e-457b-4a4f-9f39-59ba5c5efc92.roa (raw, json)
Hash identifier: wPxr6x7PDh4ntS2XTlX0bn+BazGkcWUlkq6N1B1aYGk=
Subject key identifier: B4:9B:66:1B:F2:5E:84:16:67:E8:AC:CC:E8:77:27:54:77:A7:6B:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6D9D420A8F4D3B361E8901DE9B1C19107C926B7D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a073e-457b-4a4f-9f39-59ba5c5efc92.roa
Signing time: Wed 29 Apr 2026 00:50:11 +0000
ROA not before: Wed 29 Apr 2026 00:50:11 +0000
ROA not after: Tue 28 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 158.80.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9d:42:0a:8f:4d:3b:36:1e:89:01:de:9b:1c:19:10:7c:92:6b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 29 00:50:11 2026 GMT
Not After : Jul 28 23:59:59 2026 GMT
Subject: serialNumber=767d813111852a34dd90f48002a1529ea065e1f73fa7b72ef04701c5ba599ab3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:7c:b7:bc:4c:cf:5c:3e:a8:d1:03:06:9c:
69:c2:03:87:30:ee:2b:ed:14:90:c1:f8:20:0a:69:
18:3f:78:00:3c:3d:fb:8d:88:aa:60:ef:04:89:24:
77:b4:ff:57:6c:6c:07:a2:6f:e2:de:24:b9:27:26:
d0:a4:2e:1a:cc:19:1d:79:e8:13:8f:10:d0:da:81:
a8:ea:7e:59:e5:f4:e5:c6:41:11:93:2f:01:2b:e6:
c0:f4:f5:df:07:69:8b:f5:52:59:3a:2f:a1:c9:1b:
14:22:99:e0:cf:88:d8:c1:d0:1b:d9:d7:e6:c1:ae:
bb:16:33:86:c2:3c:76:9c:4f:3e:de:42:f4:92:dd:
5f:8c:5f:7b:12:fa:30:7f:ff:ae:95:72:9f:81:cb:
67:45:f9:6d:0a:bf:d9:79:54:7b:37:bd:7b:48:fb:
b5:24:54:ec:62:e0:8c:5a:47:e1:4f:f7:b6:3d:33:
4a:28:3e:26:2f:5e:e3:cd:a1:eb:54:a3:35:50:70:
15:43:48:ec:9f:11:23:e8:2e:84:69:db:75:c3:75:
54:4a:a4:47:84:b2:60:d9:ab:08:49:27:33:d9:44:
7e:82:2a:c2:10:92:4c:bd:06:43:2e:a9:96:1f:a3:
2e:27:bc:b1:82:03:ae:cb:19:1b:5f:93:e2:0b:a8:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9B:66:1B:F2:5E:84:16:67:E8:AC:CC:E8:77:27:54:77:A7:6B:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d6a073e-457b-4a4f-9f39-59ba5c5efc92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.80.0.0/17
Signature Algorithm: sha256WithRSAEncryption
20:a2:63:d3:af:b5:01:aa:7b:49:e2:71:ed:3b:49:7f:4a:4b:
3d:41:b4:d0:f1:17:77:37:3e:e0:90:eb:e6:1f:c8:d0:a0:c4:
df:ce:de:00:9c:0f:88:cf:92:6f:83:1f:cc:15:6b:a2:85:cf:
09:36:a4:ef:68:78:44:5c:8f:1a:77:94:7d:99:6e:7b:e2:f4:
45:a1:36:7b:e8:8c:cf:5f:0e:29:27:1f:62:64:65:f2:6f:25:
14:e9:b1:80:75:61:c7:6e:3e:7b:4e:90:0a:fc:0e:f8:ef:e6:
1a:4c:6f:86:00:89:83:8d:40:43:27:fa:d7:1d:e4:65:09:9a:
68:65:64:db:07:45:02:e6:a6:27:f8:2b:05:3c:85:c9:7b:35:
67:8f:77:40:25:9d:bb:fb:6e:f9:0c:54:94:e2:b7:79:ef:8f:
08:8c:1d:e0:09:71:49:f6:e8:c1:86:17:0a:24:9a:c7:1b:af:
07:4f:90:46:a1:13:40:f3:1f:23:a4:db:84:d3:2e:b7:d1:9d:
08:5e:07:5e:19:0f:01:1e:38:7e:bf:9c:f6:79:56:f6:94:e4:
a5:00:fd:ae:ed:34:a5:bb:bc:e7:37:8f:3d:70:0b:4a:d5:17:
e2:a4:9a:48:32:ef:fd:df:9f:6d:c4:00:3e:5a:0f:5b:a9:e5:
ea:2b:98:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:30:48 2026 by rpki-client