
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9efedb5e-e5a9-4c3f-bc39-369b3f0c2b65.roa
File: 9efedb5e-e5a9-4c3f-bc39-369b3f0c2b65.roa (raw, json)
Hash identifier: JY/GhZUBc8Nix+Ewhqg9aBoSd63bH9QH/wKGzubXW4A=
Subject key identifier: 38:81:E0:4A:72:9C:FD:0D:59:CB:20:CD:C0:F9:A9:59:BB:EB:62:7A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6B5B2F6D7CC3DFA323154CE3C6F9392298611FC6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9efedb5e-e5a9-4c3f-bc39-369b3f0c2b65.roa
Signing time: Fri 01 May 2026 01:00:35 +0000
ROA not before: Fri 01 May 2026 01:00:35 +0000
ROA not after: Thu 30 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 70.232.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:5b:2f:6d:7c:c3:df:a3:23:15:4c:e3:c6:f9:39:22:98:61:1f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 1 01:00:35 2026 GMT
Not After : Jul 30 23:59:59 2026 GMT
Subject: serialNumber=53a604dd3373245314c98b5fc764986328d360a5d54d7c875950102a9fa69393, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:06:da:68:00:ef:66:b6:e1:52:b4:e5:16:
08:0f:b2:26:46:ee:03:10:88:60:d9:c3:57:ea:32:
11:d2:a4:c4:63:d6:69:2f:63:80:d8:fa:fe:07:87:
3b:91:98:8c:91:d2:2f:a9:da:58:42:1e:3c:08:69:
45:55:49:50:bd:0d:5a:19:92:37:1f:d4:99:e5:38:
8a:f5:66:fe:30:d1:7a:8d:d2:12:d3:70:4e:00:4c:
50:dc:ee:23:5a:e9:33:58:4b:8a:16:12:57:07:ee:
ba:78:c0:09:f2:50:3f:e8:ba:8c:c9:ff:39:52:04:
a4:26:4c:f0:28:71:2e:32:fb:9a:ea:b0:45:1f:2b:
5d:42:7d:99:0a:fa:d4:b4:97:b6:4a:60:70:65:fe:
15:17:4d:fb:ac:f9:42:43:e4:a2:53:f9:81:60:41:
7e:b1:04:cd:44:a8:5b:7c:40:01:69:eb:a6:69:a6:
60:c9:53:c5:22:b1:09:ed:b7:b2:66:57:43:fc:bf:
f0:b3:9b:76:f5:79:2e:0c:55:36:95:48:b5:aa:71:
4d:33:03:a7:b1:dc:ef:f4:35:ef:a4:c9:ba:c9:3f:
67:8e:43:6a:04:30:1d:db:47:73:02:7e:ba:2e:35:
42:0a:a4:b0:8d:d7:96:36:9f:9b:db:52:4c:29:74:
bd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:81:E0:4A:72:9C:FD:0D:59:CB:20:CD:C0:F9:A9:59:BB:EB:62:7A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9efedb5e-e5a9-4c3f-bc39-369b3f0c2b65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.232.96.0/20
Signature Algorithm: sha256WithRSAEncryption
c8:7b:1b:d8:da:fa:f6:cd:8b:de:19:95:e0:6e:b6:06:66:09:
96:76:d9:53:0a:51:66:3e:8d:dd:f0:39:8d:ba:fd:c3:63:30:
28:e6:e7:d6:8a:b5:a5:74:4d:c1:ee:81:6d:b5:26:06:59:37:
aa:30:aa:7d:4e:4d:52:6e:fa:2e:fc:d2:53:d0:fa:f4:d5:64:
26:4b:37:f8:f7:f4:53:73:2d:6c:d8:28:43:a0:3b:97:50:1d:
6e:80:7b:3d:f6:bd:fe:bb:8e:56:d3:1a:48:0f:91:70:b5:ea:
d2:a1:6a:72:de:e3:ec:ba:9b:fd:6a:7a:bb:87:21:bf:96:19:
5e:36:33:c7:8e:88:d2:ec:3f:5c:4e:07:b1:7b:4d:d3:30:88:
35:78:fd:63:66:a9:04:23:c6:67:aa:5f:b7:be:26:05:1c:9f:
df:b0:72:cb:fb:00:22:e6:16:a5:50:9c:21:b8:d6:89:0a:9f:
06:0e:fe:2b:93:9f:94:64:33:23:0e:a0:4d:f3:0f:70:d0:8a:
32:19:75:38:cc:5c:5b:8f:19:d5:81:e3:55:8a:bf:c1:4c:0e:
c1:d5:01:39:8f:fc:26:87:85:d4:60:19:9f:1b:1d:fe:a8:3d:
6f:02:47:21:65:80:5f:6f:63:e7:0f:2a:46:f5:43:86:9f:88:
ce:7e:af:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:11:32 2026 by rpki-client