
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa
File: aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa (raw, json)
Hash identifier: W5H6dXuIfyGrJ2BIm4MRLpvT8LqaAElhn7oMmvgvqnE=
Subject key identifier: E4:0D:BA:AA:96:BE:1C:48:D9:47:63:D7:17:D4:DC:A1:3C:4F:81:24
Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial: 200B85DC936A3C223B89AC587FFDA0A94AEB4139
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa
Signing time: Sat 16 May 2026 00:10:06 +0000
ROA not before: Sat 16 May 2026 00:10:06 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 198.41.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0b:85:dc:93:6a:3c:22:3b:89:ac:58:7f:fd:a0:a9:4a:eb:41:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Validity
Not Before: May 16 00:10:06 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=c99e7e7091e18589e059a5a9214234502eb9b4e3573ecfebe2e92defa46c4012, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:6d:61:1c:d1:a8:ee:27:58:b9:78:53:d8:
bd:41:29:f9:93:a7:5e:a2:33:26:02:d7:ea:f2:62:
29:2e:37:d9:a1:e2:26:29:4c:57:68:52:c1:20:46:
b4:3b:92:41:2b:e0:c8:a4:98:27:f3:e3:92:d0:d5:
79:a6:e8:2b:3b:cc:10:20:62:b6:e5:a0:21:55:6b:
36:43:81:b0:7a:fd:48:53:7f:11:42:04:3c:95:18:
b0:67:ab:6e:51:ce:94:79:c5:b7:3a:ec:8d:4e:e0:
e8:16:ee:f9:91:30:94:2b:db:c2:8b:5b:57:48:8c:
44:82:c6:11:59:ee:0f:73:11:d6:ac:b3:db:2d:87:
dc:b3:e1:14:fc:fe:61:c0:91:de:47:5d:1d:02:9f:
4f:dd:5d:37:df:6a:9c:f8:44:6e:e0:85:ed:ca:aa:
1d:c1:bc:11:b9:4f:e6:e4:45:0b:3d:5d:01:85:a1:
94:31:6f:9e:10:14:39:25:49:32:16:b5:bc:ab:e3:
0a:91:e5:c6:f0:2e:2c:80:cd:7b:90:e5:88:1e:0b:
21:fd:bb:17:f2:54:70:a5:e9:33:08:f0:d4:01:00:
10:f8:bf:92:04:65:4a:d4:36:d4:7e:7a:4f:00:79:
8a:ec:03:87:f1:df:cc:3b:c2:a6:3e:5f:dd:a1:e1:
15:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0D:BA:AA:96:BE:1C:48:D9:47:63:D7:17:D4:DC:A1:3C:4F:81:24
X509v3 Authority Key Identifier:
keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/aed76f17-5b47-4e5c-a9fb-b01c61d23c88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.41.101.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:63:24:42:ab:d5:e3:f9:82:18:17:fa:53:59:bd:fe:6a:32:
aa:f8:0c:c4:1e:20:6a:e0:ae:6f:c5:95:38:8c:15:8c:42:79:
43:5c:0c:93:99:06:13:63:66:c5:0a:35:50:ec:24:e9:a5:52:
2a:5c:9e:36:8e:be:6b:4c:95:57:93:a2:d6:6a:95:be:3a:30:
22:e4:b8:ac:54:95:1e:17:98:3c:6d:94:47:7c:41:f6:fd:ca:
2d:f1:eb:db:0f:6c:2e:a1:7a:94:30:17:58:6f:5a:03:b5:c2:
7a:5c:f3:0b:1e:ef:75:d3:f8:f6:46:ee:c0:a4:21:49:7f:cc:
50:3a:8a:55:25:64:bd:83:fb:3d:2a:69:d8:57:a6:b4:9f:f2:
ee:a0:93:86:db:40:31:3e:75:9e:da:bb:bb:13:f2:66:cb:34:
20:09:08:e5:4f:9e:de:6d:c2:35:86:3c:14:21:75:db:c1:72:
5e:83:4d:79:1e:2a:35:22:df:35:46:0d:80:2a:ad:b7:c0:a4:
73:9e:8e:69:67:27:69:60:e2:73:c3:75:95:1b:fb:ae:a4:ee:
6d:89:53:78:d1:80:c0:5f:d6:73:27:6a:27:f2:3e:22:8d:9a:
9b:23:5d:ec:3b:e5:00:39:71:d3:8f:94:73:61:41:c8:13:0e:
37:59:ef:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 16:04:33 2026 by rpki-client