
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a49f6254-9823-439a-847e-793e3ad908b1.roa
File: a49f6254-9823-439a-847e-793e3ad908b1.roa (raw, json)
Hash identifier: PDCQBvnJozQ+18RrLNYV409LRcTfcJlW6MUrLlRHlwM=
Subject key identifier: 61:6D:07:0D:1E:74:F2:00:E8:87:1F:7A:99:69:20:20:9D:83:6B:61
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2EA815F1A13FEED9CE5C1DFA699B1171F2FA7984
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a49f6254-9823-439a-847e-793e3ad908b1.roa
Signing time: Thu 18 Jun 2026 00:00:12 +0000
ROA not before: Thu 18 Jun 2026 00:00:12 +0000
ROA not after: Wed 16 Sep 2026 23:59:59 +0000
asID: 14618
IP address blocks: 16.22.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 20 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a8:15:f1:a1:3f:ee:d9:ce:5c:1d:fa:69:9b:11:71:f2:fa:79:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jun 18 00:00:12 2026 GMT
Not After : Sep 16 23:59:59 2026 GMT
Subject: serialNumber=de6030685017ad15e27ebf77fee3f4327e888c97339af90f40387083afb7cddf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:75:9e:db:02:91:74:57:d8:ef:a9:2c:96:5f:
08:65:dd:fd:28:0b:4b:43:4b:82:e5:7f:3d:c7:10:
a6:f7:75:c7:16:5b:9c:5a:49:ad:2e:81:56:20:99:
83:af:c6:15:7e:93:63:4d:43:b9:58:cd:7b:87:fe:
47:2e:74:2c:81:f5:2c:08:22:ec:0e:13:a7:76:65:
35:b7:68:bc:16:1d:e2:8b:85:91:12:66:77:e1:b0:
9b:f7:84:35:d0:4f:27:c4:c0:31:ce:28:f9:d5:3f:
47:3d:05:12:33:b3:2f:9b:86:5a:d0:e1:77:12:1f:
d3:6d:f9:f9:7a:b9:50:48:8a:05:f1:dd:11:e8:9e:
06:9e:04:6b:20:c2:d8:35:c2:f7:4c:ba:91:ec:c7:
ed:91:a0:72:5e:da:50:1e:5b:ae:18:6e:b0:67:cb:
98:81:86:35:4b:87:5c:73:03:a1:f9:de:1d:f9:19:
6b:0d:64:f1:8e:37:8a:1d:df:ea:de:be:0f:98:88:
f4:51:a1:1d:af:30:aa:b2:3a:cc:35:da:33:16:56:
3b:94:f9:f2:6f:57:c6:a1:07:90:ae:b7:53:5a:e4:
09:9f:ef:9b:c1:1b:d8:19:e9:4a:ed:68:0f:7b:07:
5b:95:e7:bd:8f:52:78:91:45:a4:41:8c:90:c1:59:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6D:07:0D:1E:74:F2:00:E8:87:1F:7A:99:69:20:20:9D:83:6B:61
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a49f6254-9823-439a-847e-793e3ad908b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.22.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:ba:d3:46:40:e0:39:c7:5c:88:37:e4:18:50:54:84:79:0e:
a7:b2:87:cf:62:28:d2:5b:61:34:0a:e7:b7:b3:6f:df:1a:ec:
88:28:fa:8d:9a:90:01:ef:c4:76:bc:2d:43:4c:47:70:e1:67:
33:6d:de:b4:94:3b:2f:f4:b8:2b:ae:cd:37:f0:b6:0c:80:74:
e3:ce:7a:71:cc:59:91:24:49:c9:29:35:cd:a2:72:07:c4:bc:
fa:90:cf:da:81:93:d1:b4:e8:e2:32:4d:cd:62:3d:74:41:05:
f5:0c:2b:f9:80:32:5a:11:0f:36:bb:62:92:ba:3e:17:48:bb:
3e:f3:1e:40:f4:2e:52:22:88:01:d9:cf:09:2e:f5:b8:46:10:
72:63:e7:52:b4:6a:e8:64:8a:5b:87:2f:3e:e0:3c:6d:77:2e:
1e:ad:da:e7:df:b9:3f:4b:23:bd:02:89:43:74:5e:33:ab:75:
ec:24:4e:f8:c3:cf:93:b7:57:2a:e2:27:de:aa:72:62:3e:93:
2a:f4:e9:75:e6:95:71:cc:62:75:7c:da:99:54:71:c7:c0:68:
94:fe:11:b4:0b:c3:37:f4:4f:df:11:ee:c1:ee:59:93:62:2f:
7b:74:d2:b7:6f:7e:c3:ae:d8:c5:6c:d8:49:c4:e9:7d:69:bb:
8b:55:80:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 04:01:58 2026 by rpki-client