
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa95ea74-f12d-43a6-8217-4b1803ba7e69.roa
File: fa95ea74-f12d-43a6-8217-4b1803ba7e69.roa (raw, json)
Hash identifier: WC+wJG2PytxPVon1x3EGYmqTvIxtQI7QD8LXZHKdOng=
Subject key identifier: D5:CA:3C:17:23:1A:6A:A6:93:35:3D:05:C6:2D:DB:92:A8:4F:80:D6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6700E07F46F5B9A9A89C664483C5F291B8583795
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa95ea74-f12d-43a6-8217-4b1803ba7e69.roa
Signing time: Mon 04 May 2026 00:40:50 +0000
ROA not before: Mon 04 May 2026 00:40:50 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 16.177.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:00:e0:7f:46:f5:b9:a9:a8:9c:66:44:83:c5:f2:91:b8:58:37:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 4 00:40:50 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=a0bfa66335eca4fb97eb53899c96a5dcc197cae14b8a78f70cec91008a624fc8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:2b:ac:7a:be:b9:f0:7a:42:ea:7d:91:0f:
42:96:f6:2d:c2:f0:b5:b3:4d:e5:cf:86:a5:65:41:
9d:02:c8:f4:4d:67:65:3a:35:3c:dc:91:66:50:96:
69:4c:01:19:31:ab:c5:00:9c:91:9c:17:94:d2:b1:
8e:e9:30:84:5d:6d:2d:a4:9e:2e:8e:23:c5:01:20:
40:76:ac:f2:6d:1c:68:c7:5a:42:28:08:16:90:fe:
40:a7:31:b3:46:7e:c3:d8:60:cb:25:b0:7d:f2:c0:
d2:dc:d6:ca:50:0d:27:ce:68:fe:9d:2f:be:90:67:
d2:6d:43:bd:50:30:2e:c1:3c:f4:a7:42:c1:83:23:
e5:3e:38:13:bf:9f:f6:18:df:52:e1:3c:13:9c:68:
59:1b:3f:88:5f:98:9f:01:ea:97:18:85:17:d9:b7:
68:1e:44:64:bf:99:be:3d:1f:e3:0e:8d:a3:27:a2:
66:20:6b:c4:11:cd:13:72:3d:cd:3a:e5:ed:54:4f:
6d:4f:1e:4a:ff:78:53:6d:0f:b2:c4:cc:2d:70:73:
de:45:4f:05:65:ab:73:0f:62:8d:d8:82:53:81:21:
cd:6b:15:fd:17:5d:ba:b5:be:f1:e0:e2:64:9d:97:
27:ec:76:15:ab:68:3b:21:ed:72:a6:b0:4d:3f:53:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CA:3C:17:23:1A:6A:A6:93:35:3D:05:C6:2D:DB:92:A8:4F:80:D6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa95ea74-f12d-43a6-8217-4b1803ba7e69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.177.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:d5:8a:35:94:48:06:de:9a:be:b1:24:5d:58:af:f6:75:0c:
09:ef:40:e3:93:01:a6:b4:b5:05:31:ef:ca:f5:6c:19:96:79:
3f:ec:5a:0c:e9:34:99:1d:cc:dd:53:71:f4:eb:a4:8c:8a:da:
8a:aa:92:89:a6:2c:d0:ba:97:4a:9e:13:88:6f:9a:a8:3e:42:
a2:77:f8:fc:57:a3:50:cd:c5:58:9e:9b:29:b8:a3:87:8f:35:
e3:1d:aa:f8:cf:ff:56:d5:73:2d:8f:82:0e:9f:81:13:fa:b7:
0d:47:5f:36:df:29:c6:e0:b7:4a:8b:73:af:34:75:73:66:d2:
cd:08:d8:c8:a1:39:c5:82:3c:0b:ed:e5:57:f0:bd:87:0d:1d:
95:05:14:1a:9c:3c:6d:78:40:36:6c:8a:16:d8:2c:1e:41:79:
7b:e3:84:e4:0f:ca:3e:c7:da:f7:9d:85:03:e9:c1:42:1e:07:
ec:8a:f2:fb:ad:41:22:3a:3a:e0:21:46:94:c9:06:68:fb:aa:
a3:a7:16:e7:a6:c2:f5:60:f0:d4:eb:c9:dd:66:c0:2b:1d:62:
bf:9b:86:c6:25:1f:d7:c2:89:1f:b5:f5:b1:51:3f:58:7a:48:
6a:18:f5:63:45:1d:c3:36:74:c6:71:74:24:8c:91:a8:3e:de:
c4:26:82:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 21:39:51 2026 by rpki-client