
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3e5c3e9-aa42-4985-be70-fcc8302efb8f.roa
File: b3e5c3e9-aa42-4985-be70-fcc8302efb8f.roa (raw, json)
Hash identifier: oxwofyxf4SJHgGbty5WiPxNSX6fPmbKEa/e2DhDA5fs=
Subject key identifier: 0C:7D:A0:64:5B:C2:C3:ED:E0:01:A0:85:F3:31:33:77:F7:2D:BB:30
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 467243D7B91D952032ED2D014AA46EA18C351C1A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3e5c3e9-aa42-4985-be70-fcc8302efb8f.roa
Signing time: Fri 31 Jul 2026 00:51:29 +0000
ROA not before: Fri 31 Jul 2026 00:51:29 +0000
ROA not after: Thu 29 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:72:43:d7:b9:1d:95:20:32:ed:2d:01:4a:a4:6e:a1:8c:35:1c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 31 00:51:29 2026 GMT
Not After : Oct 29 23:59:59 2026 GMT
Subject: serialNumber=e5f29a5003537884c9af34f87f7bfae0b83780d8fba53ffe905ec7602d6cedb8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:d7:25:88:2c:f2:85:1f:9f:8a:18:af:ca:
64:2f:48:7a:da:7b:af:ac:ef:9e:c4:5d:f5:e2:db:
6c:1f:ee:42:82:d5:ea:dd:1d:18:ab:c4:a6:9f:47:
1e:2c:38:f6:85:b7:77:4c:00:72:a2:42:c7:5f:c4:
26:f5:5b:b4:20:b2:b6:06:7e:e4:e6:a1:62:c0:68:
1e:fc:a1:84:68:78:1b:15:a8:f8:13:88:a5:f3:9a:
79:9e:bd:41:42:fa:b0:ab:4d:a4:6b:0d:22:b2:83:
18:f3:c2:0b:9a:6d:ea:a9:a9:eb:d9:79:ac:9c:d7:
43:9b:91:e1:51:f3:fe:64:98:1d:4a:a2:97:9d:aa:
20:bf:45:eb:2e:92:f7:a4:5e:e8:04:60:30:99:73:
f4:4f:6d:c9:b7:a2:bd:e8:68:ea:c7:12:0a:16:6f:
30:ec:e9:9e:a3:31:1d:39:4f:c6:a6:79:02:60:66:
30:bf:b2:ea:d4:59:1a:4c:50:f1:ed:ce:8e:b2:1e:
d4:2d:77:bc:0d:27:5b:18:ed:4a:ad:c0:94:eb:b4:
1b:10:52:03:b4:b3:c4:1d:16:57:ab:36:96:06:16:
20:7c:ed:19:80:5d:6b:af:46:c8:f3:4c:ea:b8:ba:
a7:6b:8b:64:62:f8:ec:51:8c:df:7b:9b:06:92:ad:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:7D:A0:64:5B:C2:C3:ED:E0:01:A0:85:F3:31:33:77:F7:2D:BB:30
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3e5c3e9-aa42-4985-be70-fcc8302efb8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.24.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:58:7c:d0:b8:92:af:89:03:15:30:e5:69:4d:7b:4d:d9:7c:
66:df:24:21:ad:ca:76:79:a8:c7:de:23:2d:32:83:56:e1:86:
e5:1c:51:17:13:82:15:03:85:38:3a:ad:b6:3f:ca:19:4d:c1:
29:05:9e:ac:4d:bc:92:4b:83:af:27:15:f9:25:cf:b9:73:91:
a3:03:a8:f0:b6:90:e8:76:84:21:b3:88:af:93:d8:f2:c2:17:
0c:3a:9b:fd:00:34:a3:bf:18:dd:c4:cb:2b:1a:93:06:d5:b1:
46:8e:66:99:a9:b6:0e:46:bd:0b:94:2e:d7:9c:ce:f0:eb:e6:
ca:14:21:76:a0:58:b9:b7:3e:c4:1c:4d:25:34:0a:61:79:5c:
51:b7:91:29:92:d2:f3:9e:03:6b:1c:ea:bf:1a:82:d8:55:4e:
7b:bd:f4:fb:29:e7:2d:77:69:30:bc:6b:f1:a1:55:45:c2:7b:
c7:a7:01:e5:c3:c7:cc:26:25:57:13:44:89:3a:64:4d:af:54:
1e:3d:b8:a0:40:42:7f:d2:bd:98:f4:9e:7b:2e:88:96:3a:c3:
dd:c8:84:64:7d:43:ad:c9:d8:78:2b:94:78:7d:d9:49:bf:49:
27:f1:ca:39:2d:0a:64:6d:c5:19:bc:e4:76:1e:23:42:8e:f7:
45:62:77:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:43:57 2026 by rpki-client