
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef414d28-7d98-4c41-931b-d7958ded262d.roa
File: ef414d28-7d98-4c41-931b-d7958ded262d.roa (raw, json)
Hash identifier: X0lyLUW2OuXd2qWcjyHzLmpSjO3xLb5iWvNeGAxNJNs=
Subject key identifier: 4F:6C:BF:A5:B1:7D:66:3F:6A:23:AC:03:ED:30:E7:84:1A:87:EA:8A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 77A819A34F227A5751B65FB90248C4ABDEADB0E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef414d28-7d98-4c41-931b-d7958ded262d.roa
Signing time: Sat 08 Aug 2026 00:31:22 +0000
ROA not before: Sat 08 Aug 2026 00:31:22 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 57.89.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a8:19:a3:4f:22:7a:57:51:b6:5f:b9:02:48:c4:ab:de:ad:b0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 8 00:31:22 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=ed5c4c4f47d6b622c09c866b35784a3bfd172b3462fe7320a198b011527b27a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:0e:ae:c0:44:5f:33:25:5e:87:94:c3:aa:
a8:60:1c:ed:a5:ce:27:cc:71:79:9e:38:3c:a3:64:
c6:95:60:02:b5:34:05:ca:90:15:6c:1e:b8:c1:61:
a3:9b:bd:ae:ec:eb:c5:5a:1a:27:6d:c3:c3:4f:1c:
27:dc:fb:97:21:87:5c:5e:a3:ee:08:71:38:5f:13:
0e:49:53:7d:1e:0d:d8:69:90:94:a7:3b:03:c4:2b:
56:e4:86:af:e2:d3:bc:72:dc:a7:79:23:c5:01:44:
68:18:b9:64:3f:b9:63:c2:86:fb:6d:bb:6b:ba:44:
b7:ff:b3:45:45:5a:d0:80:19:56:16:16:af:60:95:
59:ea:54:1f:b0:de:be:d9:05:99:7b:32:1f:42:e3:
60:9f:28:68:2c:e9:15:04:5b:65:90:99:46:9f:b9:
82:69:9c:9a:e9:52:f7:7d:fb:29:9f:fc:85:d8:0f:
14:bd:79:07:d2:0b:0f:dc:00:64:46:bf:14:0c:1f:
c5:1c:ef:f5:d6:1c:ef:ab:d8:04:b5:b7:a0:ff:c6:
50:1f:31:2e:be:a9:5e:43:e9:43:52:da:27:48:85:
7b:90:2c:e1:68:0f:18:b5:34:5c:04:4f:94:34:8e:
8d:e3:32:e5:6e:d8:03:65:04:f8:f7:e4:fa:ad:1e:
01:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6C:BF:A5:B1:7D:66:3F:6A:23:AC:03:ED:30:E7:84:1A:87:EA:8A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef414d28-7d98-4c41-931b-d7958ded262d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.89.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d7:91:29:a7:61:e8:92:86:a7:8d:97:70:fc:27:66:81:bc:41:
0b:d6:f4:54:2c:c8:db:a6:fe:22:24:02:1a:2b:ce:ea:1f:b7:
84:50:b7:18:de:74:21:9c:01:87:bb:6b:4c:3f:1f:d1:ab:63:
6f:b0:36:1f:4d:1a:91:83:6f:53:3c:c8:1b:1b:d0:72:0d:48:
8c:3a:d0:f5:63:46:0b:e6:f0:81:a7:2b:10:c0:54:4e:00:7c:
29:29:09:c8:e1:41:df:22:18:c2:c8:41:d5:75:6d:fa:ba:c9:
18:c8:bb:32:f3:ca:e8:9b:99:0a:b9:e3:15:43:7b:75:27:a2:
85:0c:62:03:5d:4f:72:e7:ef:e2:f5:9c:f9:32:02:56:78:a6:
c0:86:43:a8:0b:2e:e2:88:63:ed:f4:ec:73:99:6d:1e:60:82:
1e:40:4a:fa:8d:0f:1e:37:2e:21:9c:54:3c:97:a0:f7:33:6e:
69:d3:db:9e:a4:1c:58:d5:55:dc:a8:e3:65:8e:4c:14:6c:54:
84:4e:5f:ea:18:e4:53:13:e7:48:6e:3a:22:0b:9e:89:6a:57:
ea:3c:32:04:cf:36:9b:82:5f:4a:22:c2:e4:5c:b8:61:33:c2:
08:79:cc:28:bf:73:08:06:01:33:2b:40:4c:0a:6f:b0:57:72:
59:0e:ec:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 12:12:02 2026 by rpki-client