
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da5c84d9-8dd6-40a5-81f2-6361ef97b163.roa
File: da5c84d9-8dd6-40a5-81f2-6361ef97b163.roa (raw, json)
Hash identifier: XYkIXrFJSXQzyxHN+cud35kSh1DC/0gI8IjiN9/hk/k=
Subject key identifier: E9:B7:1C:DF:D7:B5:C2:4D:BB:2A:A0:F9:D2:1A:C0:41:A8:77:BE:EA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0E30B832DD31D76A84C48BD29D0E48935A7945DA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da5c84d9-8dd6-40a5-81f2-6361ef97b163.roa
Signing time: Fri 01 May 2026 00:10:42 +0000
ROA not before: Fri 01 May 2026 00:10:42 +0000
ROA not after: Thu 30 Jul 2026 23:59:59 +0000
asID: 14618
IP address blocks: 99.82.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:30:b8:32:dd:31:d7:6a:84:c4:8b:d2:9d:0e:48:93:5a:79:45:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 1 00:10:42 2026 GMT
Not After : Jul 30 23:59:59 2026 GMT
Subject: serialNumber=dd940cb987362c220e10cb5db01e76a8f3704c6c0eb4bda23a192d1dbcc033d6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:81:04:3c:bc:65:e6:85:2c:6c:cf:fe:57:
e8:35:b1:5e:0e:47:99:47:66:76:e9:d0:54:b3:65:
76:5f:e0:cd:6d:5e:6f:5c:1a:43:2d:16:35:d4:33:
5a:6b:91:79:4a:ea:2d:bb:fa:61:98:9d:7c:be:b1:
08:95:dd:4b:b6:b1:ec:d2:c4:9c:3f:38:4b:38:28:
97:a0:ef:2f:1f:ae:07:f9:3b:9c:52:cc:a3:78:3b:
4c:38:92:f4:41:f7:ea:c8:1a:fc:7a:04:38:8f:73:
ed:ba:82:31:b2:79:87:d8:65:7a:9b:2b:f0:9c:fe:
f4:b4:c3:f9:2a:97:ad:49:86:2c:be:d0:52:36:7c:
37:4e:64:99:32:af:c7:8e:d2:c7:ed:dd:fe:e4:d7:
22:e9:63:ab:b0:69:84:5b:30:d2:78:de:ba:49:f8:
eb:7a:a4:e7:f3:71:77:99:df:fd:d8:38:fb:8f:09:
59:23:fb:65:3f:d7:5e:25:63:84:52:e9:46:c0:cb:
a1:b6:88:48:85:9e:70:e2:fc:e1:19:40:78:a0:91:
85:d4:d2:2a:59:ae:3a:db:0b:b7:c8:f2:5c:30:be:
90:ff:8d:37:13:47:ac:56:3a:a3:4c:bb:24:16:73:
0f:17:f9:67:50:fd:44:4a:60:36:e3:74:fc:5b:59:
1f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B7:1C:DF:D7:B5:C2:4D:BB:2A:A0:F9:D2:1A:C0:41:A8:77:BE:EA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da5c84d9-8dd6-40a5-81f2-6361ef97b163.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.82.188.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:a4:91:cc:0f:f8:ed:90:58:7a:2d:93:e1:29:c1:0c:d0:9e:
ad:92:74:73:85:7c:88:c8:a0:d8:c0:90:4e:b6:71:86:af:f2:
ca:c8:ed:e0:0e:d2:0f:4c:51:a2:30:26:81:99:44:e7:b1:5d:
6d:62:4a:57:9f:64:ae:e4:50:e6:ca:71:33:d4:90:4b:9e:51:
a6:a4:7b:3d:5e:42:cb:32:55:1b:27:33:03:4d:cb:dd:3c:96:
24:b1:ca:d0:ca:46:ac:30:38:a9:f8:17:b4:c0:08:69:e6:4b:
5b:e2:70:e8:62:75:a8:b2:2a:74:cc:a6:f7:de:7f:39:44:2a:
db:34:94:c6:24:8e:55:00:38:93:ec:69:f2:c0:61:50:b3:0a:
43:69:61:36:fc:e5:84:e7:6c:2a:03:e8:9c:0b:3c:7c:67:1b:
74:c0:a9:be:2b:30:26:3f:e0:8b:78:b9:f1:55:96:94:87:83:
07:9a:25:e7:d7:12:a2:39:f6:b5:83:07:12:8d:2f:e0:cd:13:
6f:a3:81:bf:6c:b8:15:10:63:7a:7f:53:f0:ba:81:4b:2e:49:
5f:e6:fc:9d:76:21:1f:67:0e:00:51:4d:8c:62:cd:f3:1b:34:
5c:a8:6e:11:ec:c4:d6:3e:b7:c9:29:82:32:e4:36:5d:35:51:
a1:6a:50:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 22:25:18 2026 by rpki-client