
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd34ece0-f157-47fb-bb96-b193c7e8966c.roa
File: bd34ece0-f157-47fb-bb96-b193c7e8966c.roa (raw, json)
Hash identifier: ekTSBGaH8T135Rj3dr/n7bCBSCn1kJ+ga8RBcHGsf+I=
Subject key identifier: 75:FA:06:05:C9:34:D3:C6:CE:E3:5E:25:F4:5C:80:97:04:E1:EA:8F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 43D13E821C3636AFBDEF7018EB0525860436AB2F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd34ece0-f157-47fb-bb96-b193c7e8966c.roa
Signing time: Thu 30 Jul 2026 00:20:08 +0000
ROA not before: Thu 30 Jul 2026 00:20:08 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:d1:3e:82:1c:36:36:af:bd:ef:70:18:eb:05:25:86:04:36:ab:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 30 00:20:08 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=c5cfdb258a5c532c1da66f6cd89dae8f42d485517a38f540b2917a80e62d5557, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:73:b0:67:1c:f1:80:d8:97:77:f7:89:d1:20:
f3:00:2e:b2:41:d1:55:5e:7a:24:f5:db:ca:54:7f:
cc:c3:bd:dc:74:a7:1a:07:6a:ed:53:9a:b1:15:dc:
e8:74:33:0a:c0:48:47:6c:d5:bc:be:46:ff:ab:23:
ab:2d:02:39:df:37:59:6e:92:57:57:d5:73:97:80:
6b:09:aa:73:5c:87:60:0b:ec:f4:09:a0:b5:8e:97:
49:d3:cd:9e:c5:a0:f4:0e:2e:9b:38:d5:3f:d8:3e:
96:ab:04:55:33:a5:5f:52:10:b3:81:8a:21:f7:eb:
15:fb:8a:ff:4e:cf:c4:5d:18:75:d0:26:bf:a9:4e:
d5:8d:76:5d:b8:5b:83:d0:9b:5e:c1:9b:eb:e1:e1:
8a:43:03:d0:b9:bf:9e:5e:19:6d:1e:fd:93:3a:1c:
f1:9c:08:07:93:d8:ba:d7:dc:74:9e:43:81:a3:ac:
4d:c7:ec:9a:f7:88:b8:49:c9:76:cb:48:a6:e2:0d:
f7:b2:db:ff:72:eb:1d:90:25:ae:44:41:2d:0c:20:
a9:56:be:2e:2c:4d:e7:c9:56:11:25:9e:6b:b1:27:
67:d3:69:f3:20:0c:7e:92:f7:69:8f:07:1f:bd:dd:
42:40:98:ac:96:7a:7f:20:9f:1f:a0:57:f9:0b:b1:
b3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FA:06:05:C9:34:D3:C6:CE:E3:5E:25:F4:5C:80:97:04:E1:EA:8F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd34ece0-f157-47fb-bb96-b193c7e8966c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:9e:86:3e:7b:af:45:94:fe:00:02:7c:56:4c:5b:cb:5e:23:
19:8e:8b:af:00:43:2e:ca:8d:fc:71:bf:84:65:4d:5c:29:48:
bb:38:7e:78:b8:23:ef:fd:e2:85:fc:f5:a8:83:5e:91:34:1b:
3e:5f:78:b1:57:91:78:68:8d:30:c0:e7:ec:f8:30:63:ef:f6:
c3:ed:2e:b3:6d:bd:68:b5:55:46:ae:2c:81:ce:49:48:39:91:
6f:90:d5:c8:d0:fd:15:58:f8:ef:66:03:77:e5:04:58:1d:60:
e2:40:2b:16:48:df:15:2e:2f:42:ed:3b:0f:18:9b:fc:bc:b1:
06:9a:c2:6f:43:2d:68:94:1b:c0:7d:dd:33:b6:94:86:56:ad:
25:b8:95:fe:91:a1:1e:b1:31:7f:ce:e8:a9:de:b4:3e:17:dc:
66:e3:e5:f2:8d:90:43:0d:5f:bf:be:1a:6a:f5:4e:2f:b6:38:
60:e5:3b:e7:79:f0:26:84:f6:81:28:0f:8d:7b:9e:72:0e:91:
12:28:16:4f:0a:2b:fb:ce:71:9f:02:f5:84:1c:a3:89:dd:00:
31:6b:bb:6f:72:37:9f:7e:db:1f:c4:4a:55:86:07:31:61:f8:
5b:72:1f:be:50:a0:b8:62:de:78:9a:bc:65:8b:7a:54:10:c3:
60:b4:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:44:31 2026 by rpki-client