
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9da330c-0bd7-48d2-a30f-06354eeb87e5.roa
File: b9da330c-0bd7-48d2-a30f-06354eeb87e5.roa (raw, json)
Hash identifier: brp/RYm1qNoD7vxtDCBMjJ69KALFfaaIoz0FJy1O3cE=
Subject key identifier: 79:C4:36:7D:C1:F4:18:E6:89:AD:8E:99:A0:EF:9C:76:F9:38:43:D9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 08B5C75F235000FBCAEABD4326CFBFDC58C7D810
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9da330c-0bd7-48d2-a30f-06354eeb87e5.roa
Signing time: Wed 05 Aug 2026 00:01:06 +0000
ROA not before: Wed 05 Aug 2026 00:01:06 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 75.2.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:b5:c7:5f:23:50:00:fb:ca:ea:bd:43:26:cf:bf:dc:58:c7:d8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 5 00:01:06 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=9b8ab42d1ddd2fafcef669e56cc318f3fe56e482d5a4922d03387b805cd1aee4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:fa:38:70:3c:e0:28:de:01:c0:c8:1d:a9:
9b:2c:74:59:90:f9:e8:07:b1:8e:23:13:3c:8b:35:
79:cd:52:ce:1e:e9:22:55:3c:6b:72:3b:f6:15:d2:
74:2d:38:ef:49:8c:4b:6f:b6:78:46:db:7a:8f:60:
44:2d:bc:c3:ce:c3:1d:20:c0:fe:45:0f:c5:98:9b:
de:1d:2d:d0:22:de:42:93:6e:51:c2:ff:bc:05:4a:
5f:d3:59:a3:8b:2e:72:22:3e:26:e0:41:66:2c:66:
d9:c2:74:3a:f5:26:50:b6:be:2d:c5:6f:d8:88:f7:
fa:a9:ed:31:80:b6:17:7b:4b:e5:22:f3:28:cb:a8:
27:bd:44:7e:89:92:db:43:60:a3:7f:f6:21:bb:98:
c6:6e:88:e0:55:b3:84:cc:35:b4:4a:e8:a8:d2:86:
4b:cf:3d:dc:e0:1c:d1:b0:0c:e0:d1:12:cb:cd:ea:
12:5f:f9:35:95:fc:0f:ff:e0:8d:ee:13:89:3b:f7:
dd:b1:8c:c8:34:cc:77:64:93:e6:2d:ec:56:42:93:
9d:5d:2e:8a:16:5e:9d:dd:4b:2a:78:b9:a4:db:05:
cf:22:9a:7f:55:e8:67:9e:a8:88:72:79:54:c8:a9:
39:69:fb:6d:7e:18:02:ce:2b:f3:18:43:e8:cd:15:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:C4:36:7D:C1:F4:18:E6:89:AD:8E:99:A0:EF:9C:76:F9:38:43:D9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9da330c-0bd7-48d2-a30f-06354eeb87e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.2.128.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:2d:fa:c6:5e:ec:0b:8b:31:56:21:7c:b1:9b:fd:7a:4e:81:
4a:a6:76:d4:0b:b7:53:2d:59:4b:54:f9:72:d5:66:50:90:77:
4c:9c:c0:ab:75:a6:3c:fc:68:60:b3:bd:e4:b5:b7:5b:16:44:
ae:64:8d:f1:f1:2b:66:e4:18:5e:de:65:e7:44:45:6b:b0:77:
5f:c4:f3:f1:b8:f7:4c:cb:53:06:59:89:eb:a7:cb:41:30:1f:
75:aa:f2:bf:82:b1:56:2a:33:3d:8e:cb:a8:12:65:d4:4a:4f:
95:b2:70:fe:49:bc:45:35:63:0c:bf:1a:fa:d8:75:03:ca:33:
e7:6b:30:02:d7:bc:0a:1b:63:49:be:14:58:10:ba:fc:e4:0b:
91:d2:58:bd:25:7c:a5:d5:0f:9f:eb:e6:85:4b:db:c5:6f:31:
2f:f5:92:cf:9b:89:02:c5:2d:43:6b:e4:89:bc:86:d2:46:94:
1b:9b:ac:66:80:99:cc:6f:83:41:04:39:97:26:82:b6:b9:ac:
3d:cd:2a:5b:73:01:34:d7:dc:f8:93:8b:73:16:22:90:d0:8b:
4d:c4:e0:30:62:8e:fe:ca:30:16:a1:a1:50:a0:fa:9e:12:32:
1a:1c:fd:d9:b6:b5:c8:67:d1:6b:2e:ce:2e:d3:17:6f:99:a4:
ee:2b:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:54:58 2026 by rpki-client