
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/929a3b2b-92c7-45f2-905b-1ffb4708fcf7.roa
File: 929a3b2b-92c7-45f2-905b-1ffb4708fcf7.roa (raw, json)
Hash identifier: +6UyYQYv+0HaE/2/IDx8dw2l4gAxqR1oF5yj6CRCL/o=
Subject key identifier: 83:98:40:57:6D:C7:D3:3C:44:53:A3:75:84:39:3A:F2:6E:DD:93:23
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 527ABD347CCB7FAD57762B00E19D92760122C427
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/929a3b2b-92c7-45f2-905b-1ffb4708fcf7.roa
Signing time: Wed 29 Apr 2026 00:51:16 +0000
ROA not before: Wed 29 Apr 2026 00:51:16 +0000
ROA not after: Tue 28 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.249.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:7a:bd:34:7c:cb:7f:ad:57:76:2b:00:e1:9d:92:76:01:22:c4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 29 00:51:16 2026 GMT
Not After : Jul 28 23:59:59 2026 GMT
Subject: serialNumber=1dfb646e0cf04085c3ef7c58bc0b756ff082b781f81954c128a742cb07e5f599, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:98:2f:99:79:38:42:67:49:a2:88:40:2b:cd:
2f:a1:6c:8f:35:33:c9:77:c7:6c:a1:31:0a:a7:7a:
f8:4d:4d:95:14:c1:9e:1f:f5:b6:df:9b:a1:fb:d9:
4c:1e:d0:f5:b7:65:ce:83:8b:33:c9:ea:d4:7a:3b:
45:c8:72:f7:1d:1e:d5:dd:c1:db:ec:c2:60:dd:6e:
94:ef:f8:eb:92:89:c8:c5:d9:d2:15:ec:d6:36:68:
c5:89:c6:d5:4b:8d:e9:d5:3f:8d:96:cb:b2:ec:45:
69:11:75:57:a5:65:11:45:d0:e6:fe:a4:7a:6e:99:
93:78:df:d8:61:b5:08:35:da:11:8d:ec:17:81:7b:
37:6d:c5:05:7e:51:14:e8:2e:92:6e:82:45:0e:a9:
48:fc:77:a9:77:08:d2:d2:d0:27:5f:46:e6:fe:79:
25:7d:dc:05:1a:62:69:52:5a:bb:3a:67:ab:f9:c3:
2a:6c:43:22:5a:10:3e:4c:3e:02:1b:b0:bb:0c:3d:
be:23:8b:a0:5c:df:8c:b2:72:00:7d:e8:93:f2:59:
7f:47:c9:aa:26:73:ca:e3:29:25:8c:5d:a7:f4:6f:
55:97:b4:85:5e:a9:39:da:66:6d:59:5e:e1:1d:63:
39:3e:ad:73:71:20:be:5a:81:67:26:3b:8c:81:7c:
36:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:98:40:57:6D:C7:D3:3C:44:53:A3:75:84:39:3A:F2:6E:DD:93:23
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/929a3b2b-92c7-45f2-905b-1ffb4708fcf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.249.0.0/16
Signature Algorithm: sha256WithRSAEncryption
81:15:0d:b1:9f:28:d0:79:71:37:13:6f:c2:be:a0:ca:08:16:
9c:b3:6f:a8:ec:c3:08:5b:a5:29:5b:22:1f:eb:b4:9f:f4:f1:
00:be:87:78:e1:5d:5c:54:e9:03:99:7d:09:49:7d:f4:1e:08:
a5:05:52:92:1f:e7:88:60:a7:41:51:7d:c0:16:7f:33:ed:02:
14:bb:ea:2e:d2:87:66:3a:0c:98:76:8b:a5:fb:e1:c4:e6:1d:
a2:d2:65:e3:a7:7f:0b:62:6a:8c:d3:fd:77:71:71:1d:ec:39:
6a:70:68:71:c5:ee:0f:4f:b0:ad:f4:19:72:4d:82:57:82:71:
03:f2:5c:48:10:71:db:7a:41:8e:3e:73:da:6e:6a:9d:4f:2b:
4d:99:1d:47:ef:1b:46:cd:2d:27:0e:b8:d1:d3:6a:f0:08:9c:
5c:04:27:21:ee:a8:24:85:a6:60:5b:f9:b5:d9:a5:9e:44:64:
03:eb:d9:0c:ff:29:37:eb:9c:c7:fa:9b:59:e9:be:8e:19:2c:
27:c9:0e:ca:9b:cc:2b:e2:be:aa:f2:2c:4b:19:48:eb:a4:25:
8f:ff:82:64:06:80:62:9b:6c:ae:3a:23:60:c4:33:bd:e6:8d:
db:91:c5:c7:13:f7:71:e7:db:db:32:37:2d:d6:db:1b:87:66:
0d:c5:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:03:29 2026 by rpki-client