
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e81e2c00-a513-4147-992e-a192a2dba6b1.roa
File: e81e2c00-a513-4147-992e-a192a2dba6b1.roa (raw, json)
Hash identifier: zws7PXdytjFp0Zd4SlHtphvpvr7lEmLr7sDaw9SMpXQ=
Subject key identifier: 5A:C9:4F:B7:E9:36:60:06:60:A0:8F:D9:00:4E:0F:7F:C7:CC:E5:F1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 267DB8A254D9A532460645A3545FFE3C0D3A8EF0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e81e2c00-a513-4147-992e-a192a2dba6b1.roa
Signing time: Mon 27 Apr 2026 00:20:32 +0000
ROA not before: Mon 27 Apr 2026 00:20:32 +0000
ROA not after: Sun 26 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 151.160.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:7d:b8:a2:54:d9:a5:32:46:06:45:a3:54:5f:fe:3c:0d:3a:8e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 27 00:20:32 2026 GMT
Not After : Jul 26 23:59:59 2026 GMT
Subject: serialNumber=b4e8c10407483879e88e608b72a9d4bfc04c1bc900fbef8e9ce3ba8648320d48, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:95:04:73:fe:c8:fb:0b:cf:49:3c:65:64:ae:
31:20:2b:c9:85:de:db:41:f8:f0:01:52:0d:4f:ac:
0e:28:04:80:28:ce:49:33:5b:60:64:3a:74:87:8b:
37:a0:10:28:a5:4e:a2:e8:4a:d1:1e:df:06:91:cc:
0d:5f:ac:6f:35:44:f2:21:3d:3c:8b:ec:0c:39:c8:
69:9c:25:82:c0:6a:6c:0c:e1:27:00:1c:d3:5f:c8:
9e:b7:b5:60:ff:39:3f:5d:f1:4e:e3:3e:9e:de:fd:
aa:86:4a:8b:dc:af:2d:15:9a:5a:59:77:57:1f:a5:
90:15:03:80:ad:b3:1b:c7:dd:fe:78:e8:46:28:9e:
0e:42:ce:c3:55:01:b7:34:56:ee:01:da:e4:13:f3:
03:2a:8a:a3:8d:bf:9f:44:bb:6f:ac:8d:92:81:65:
5e:79:03:01:cd:37:fb:c4:63:1f:e9:8b:fd:ce:cd:
60:22:57:fb:bb:2e:6e:14:70:d2:96:30:cf:c8:7b:
35:f2:fd:c2:2f:9f:4b:0c:d9:f2:d2:2f:11:d0:65:
65:1e:a9:70:7f:86:a8:bb:f4:c3:d1:a8:3d:77:03:
25:32:71:84:59:5d:91:b2:37:39:d5:77:69:e2:2b:
b5:46:bf:55:41:19:4f:a4:78:35:24:a6:2a:a3:1d:
b3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C9:4F:B7:E9:36:60:06:60:A0:8F:D9:00:4E:0F:7F:C7:CC:E5:F1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e81e2c00-a513-4147-992e-a192a2dba6b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.160.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:89:15:e5:7c:84:72:45:57:a1:f7:a3:c9:8e:c7:fe:4b:eb:
1c:be:57:48:26:bb:8f:9f:f4:2d:8d:f6:a9:a0:a3:32:10:01:
2f:c3:00:78:e3:84:fc:6f:05:df:36:39:ab:3f:aa:a3:f9:fb:
73:07:1a:59:ff:7f:70:c3:48:35:5a:6a:c7:c6:65:f3:17:e4:
5e:6b:c9:f3:dd:e7:3d:d4:55:c3:a0:a5:1e:f8:27:ac:18:05:
56:a0:44:6a:00:0e:ad:67:28:46:85:eb:56:fe:a7:3f:c1:e8:
eb:2e:f6:d5:fd:81:e0:07:53:c0:01:ea:a0:f2:ff:7a:e3:2e:
9b:c0:11:85:10:28:c9:25:fb:e5:b7:94:f0:57:ab:97:75:82:
6d:ad:23:21:ed:7d:24:0b:70:30:39:a2:e8:74:4d:a0:8a:ec:
12:80:9f:ce:b9:dc:74:7c:0b:48:ba:d2:02:2f:f3:6a:74:0b:
28:7e:9f:6d:0c:e8:d9:da:29:83:9d:c0:b8:d0:0c:df:71:0d:
04:4c:97:b7:1a:d3:df:fa:16:9c:ed:49:df:9a:d5:9f:56:a5:
25:c1:d8:d0:f0:ff:94:68:f6:88:fe:bf:62:7f:e9:37:66:72:
b4:4a:dc:8f:71:55:d4:c1:1b:5f:aa:e3:fe:81:47:66:a7:51:
d4:4b:04:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:02:12 2026 by rpki-client