
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c38e38d3-5afc-426e-bf31-3fadca22db09.roa
File: c38e38d3-5afc-426e-bf31-3fadca22db09.roa (raw, json)
Hash identifier: ZCCg7bJTYG3Vkp1c1Y0jg+NBtcHr1iw+VkZ4O7RbWs4=
Subject key identifier: D1:CF:32:20:88:7E:6E:40:FD:FC:CC:7D:D2:DF:06:8F:03:0A:0F:B4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 56145188F7B2DBE8304482CC0A794604B9EA9774
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c38e38d3-5afc-426e-bf31-3fadca22db09.roa
Signing time: Mon 03 Aug 2026 02:30:11 +0000
ROA not before: Mon 03 Aug 2026 02:30:11 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 16.192.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:14:51:88:f7:b2:db:e8:30:44:82:cc:0a:79:46:04:b9:ea:97:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 02:30:11 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=b9d344c09fb17b9ca96151dcfd853097938bf7773e4315855a2aa6cc1ae7f2be, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:b9:6b:5e:7e:5b:fd:8c:3e:1a:2a:79:e6:
99:7e:af:06:5e:26:46:29:df:2f:c7:2f:f5:d8:39:
5c:ce:30:9c:86:e3:09:7f:b9:b9:6d:78:b5:de:8a:
58:5f:f2:48:9a:3f:15:50:00:72:99:74:f0:88:da:
fb:6a:1f:69:2b:47:c4:92:a1:ef:87:30:2f:eb:c9:
94:c8:b0:13:e3:4a:1f:a6:1b:74:04:b2:b9:7c:1a:
99:9a:d7:73:d0:73:bc:be:c1:4a:68:26:70:54:02:
34:05:a5:97:1a:4e:24:68:98:56:03:70:ae:df:a1:
ef:d2:e3:3e:6b:15:a4:27:43:94:8e:a9:95:9d:c8:
31:e5:22:64:44:5e:1d:7d:85:de:90:d9:34:08:84:
a6:8a:5c:1a:7d:91:83:c0:7e:9a:4d:15:b2:69:0a:
cd:38:17:95:92:59:37:ea:0c:3a:78:75:01:99:1a:
52:ca:18:53:ec:db:78:5f:14:1e:7a:12:d8:25:50:
9d:f7:ca:3d:08:6a:cd:22:a3:74:3a:65:87:28:15:
bd:96:ca:d6:4b:66:d0:23:c9:20:27:7f:f5:f1:3b:
ca:7d:c9:8a:e9:34:7d:7a:f8:fd:70:bd:1d:f1:7f:
fd:8b:52:dc:c2:bb:30:ac:0a:ec:e3:61:b6:d0:12:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CF:32:20:88:7E:6E:40:FD:FC:CC:7D:D2:DF:06:8F:03:0A:0F:B4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c38e38d3-5afc-426e-bf31-3fadca22db09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.192.128.0/17
Signature Algorithm: sha256WithRSAEncryption
35:5c:5e:cf:1e:a2:9c:e1:b1:b0:48:41:53:51:41:8e:7e:f9:
ee:35:41:e2:cc:d6:09:73:76:2f:a9:69:86:a0:99:2d:8a:7b:
cd:54:d6:fe:40:1e:4c:c1:67:87:4c:7e:da:5a:b8:0e:cf:97:
e2:8b:8c:8b:0d:56:2a:d9:9f:bd:36:71:c5:58:cb:fd:02:a6:
93:74:06:94:99:16:7d:dc:8d:e3:ca:dd:65:8b:ad:ef:ab:70:
21:b2:cc:8e:16:fe:22:5c:33:30:a6:30:d5:cc:47:99:c5:e4:
55:ac:94:7f:9f:ac:75:06:2b:8d:37:ce:81:51:8c:c5:c5:b6:
05:22:dc:38:8e:4b:c2:8d:77:05:1c:df:2d:08:e2:36:08:d4:
a7:35:ff:93:e7:b0:0d:3f:27:80:55:94:c8:24:18:50:38:ee:
67:a6:fd:1b:96:8f:9e:75:be:db:6c:dc:f7:20:35:96:c1:bb:
d7:9e:23:60:e0:65:8b:59:f7:29:54:18:04:0b:dd:e3:5f:68:
91:95:5f:d5:fb:56:42:4f:d0:54:00:00:63:2c:e5:41:37:bb:
68:e3:89:59:8a:a3:f0:0a:e3:cc:d3:35:9b:7a:e4:89:cd:e6:
70:5b:23:3a:bd:56:45:07:b2:24:b1:f8:9a:cc:bd:81:1a:02:
5c:58:bf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:29 2026 by rpki-client