
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d52a2426-22bb-4acf-ba82-9cc75ad6512e.roa
File: d52a2426-22bb-4acf-ba82-9cc75ad6512e.roa (raw, json)
Hash identifier: BP9eqLPTy3evEOZAvgoXZOVAQruTGFOvb5knadiytrs=
Subject key identifier: C6:B4:61:9A:0C:43:0D:48:CA:20:BD:D6:D0:D8:0D:1D:94:CF:00:25
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1B656E389C4FEB6FA7676259D71899A19017FB6E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d52a2426-22bb-4acf-ba82-9cc75ad6512e.roa
Signing time: Fri 01 May 2026 00:21:24 +0000
ROA not before: Fri 01 May 2026 00:21:24 +0000
ROA not after: Thu 30 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:65:6e:38:9c:4f:eb:6f:a7:67:62:59:d7:18:99:a1:90:17:fb:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 1 00:21:24 2026 GMT
Not After : Jul 30 23:59:59 2026 GMT
Subject: serialNumber=8ca59c4dd599c3025e73a201ddf4b793adc5cdddc4651da4bbfa8f1b358153bd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:b1:ab:d1:65:d3:d5:f3:99:8c:4f:42:ee:
1c:2f:1c:7a:cc:cd:c5:1e:21:a9:04:0e:9a:75:b3:
ec:fb:95:89:49:70:bb:d6:80:22:fb:a1:e6:90:3b:
c4:4d:c7:a8:77:09:0a:9e:a8:29:d1:61:bd:29:e3:
0f:c2:d5:62:9d:e4:c4:85:89:28:36:ee:c1:44:93:
ac:07:09:0f:b5:08:2a:b0:09:07:22:13:4b:1d:57:
50:6c:78:3c:d4:14:74:34:99:53:44:74:d3:54:89:
b6:b6:95:82:34:9b:02:d0:24:f5:2a:98:de:bd:75:
74:5f:bf:75:0a:76:75:db:59:d4:75:27:d8:6a:c3:
0b:34:63:dc:2c:2a:7c:f4:5f:4e:41:f7:ce:b1:50:
b9:33:84:70:a7:06:9e:87:99:69:1c:b3:de:e3:dd:
93:70:83:ab:b2:77:70:d5:8e:9f:70:3a:57:b0:ee:
60:42:56:3a:e0:c4:04:28:6d:b7:9c:c6:81:f5:40:
60:97:e8:69:09:13:d4:11:d9:67:79:ef:07:d0:50:
86:be:fa:49:1e:e1:c9:8a:ce:2c:c5:b8:c7:d8:2c:
53:66:c8:6d:bc:8d:d0:21:18:f3:42:f4:9d:cc:6d:
e8:4c:59:81:3d:38:88:40:fd:53:f5:ce:c3:c5:65:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B4:61:9A:0C:43:0D:48:CA:20:BD:D6:D0:D8:0D:1D:94:CF:00:25
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d52a2426-22bb-4acf-ba82-9cc75ad6512e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.247.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f5:90:0d:72:ae:1f:27:bf:f0:28:dc:7e:cf:bd:50:24:cc:
2c:8d:8f:f4:54:bd:a1:4f:77:ac:10:13:b0:47:30:06:7e:74:
eb:73:c4:23:7b:23:45:17:d2:e7:3d:76:de:a0:49:c9:41:ea:
b1:c3:7e:55:69:18:7d:8c:ca:5c:47:45:b8:6f:42:24:1a:6a:
cb:53:c7:15:28:8f:a5:37:46:d7:8b:ee:ea:b5:b2:b9:5d:08:
8f:31:4b:b0:c0:d8:e1:1a:fb:5a:7f:55:89:22:6a:f8:bb:2b:
fd:21:41:0f:45:8c:70:27:39:73:ae:bc:ac:b6:12:27:69:48:
1b:55:e4:e0:a4:1c:91:71:39:e7:b6:60:cc:9e:31:66:60:3b:
5b:d6:3e:ca:27:ca:85:b1:5b:e2:8e:d9:0f:e6:1b:62:6f:5c:
e7:96:8a:9e:bc:5f:ca:9e:ad:f0:08:93:c5:d9:dc:16:26:c7:
c6:f6:46:aa:92:14:8a:f4:23:01:1d:75:f2:f5:04:b5:6b:53:
27:e2:2f:d8:b6:1b:67:b8:f7:41:e6:67:e7:71:a5:d5:6a:ce:
ad:bc:9b:ad:39:f2:8d:85:0c:57:e7:ef:63:e4:9f:ef:23:dc:
32:b7:af:a4:9e:6d:ed:d4:7c:f8:8b:6b:80:26:ec:14:0b:23:
cc:b7:4f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:12:45 2026 by rpki-client