
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/e0073d5a-9507-4588-b834-e01ed691ccb6.roa
File: e0073d5a-9507-4588-b834-e01ed691ccb6.roa (raw, json)
Hash identifier: XgTYhMUaTOSdv5pvnYExQRLt6Hq6ud6Lh4fXbhKDD+Y=
Subject key identifier: D3:B5:63:66:71:11:AF:88:DD:56:08:58:6B:0B:F6:4A:ED:94:3E:22
Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial: 712ADF6E4F181D99C3352D20CE487BEF5F5D4CA4
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/e0073d5a-9507-4588-b834-e01ed691ccb6.roa
Signing time: Tue 04 Aug 2026 00:10:26 +0000
ROA not before: Tue 04 Aug 2026 00:10:26 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 198.41.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:2a:df:6e:4f:18:1d:99:c3:35:2d:20:ce:48:7b:ef:5f:5d:4c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Validity
Not Before: Aug 4 00:10:26 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=8551cb205b04974785bfafbfdfcc3e2cbb1b34260a7454830fbc1ac547db524c, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:6b:ae:00:cd:c8:0c:bf:b7:21:21:81:d3:
5e:65:14:8c:6c:06:b8:47:06:e8:1c:9b:58:82:9f:
70:a3:43:b3:d2:6c:f4:e3:71:60:af:66:ee:00:3b:
40:31:18:0f:1a:70:6b:f9:1a:95:ae:99:d4:05:50:
91:74:41:10:cb:c6:10:bc:ff:c1:cd:32:df:a7:64:
85:3a:83:be:a0:65:af:b0:58:66:33:ff:86:f5:ab:
c6:84:c4:1d:6d:72:05:10:69:0c:c1:88:f6:63:bb:
c9:67:92:ae:87:3f:4b:b2:91:95:bb:5d:64:ed:bb:
95:eb:17:af:d4:61:78:8a:dc:af:ed:91:39:df:2a:
92:bd:fe:a0:81:0d:6a:91:d6:8f:7e:62:b6:a3:36:
a3:57:28:e3:62:b9:aa:2b:8d:a3:05:36:46:db:74:
4e:c7:a9:c2:eb:13:82:0c:94:18:ea:5f:d4:64:5b:
ea:c1:ff:7e:2f:19:aa:fb:24:75:c9:ec:70:20:01:
8d:d9:e8:bc:e4:61:90:cd:eb:dd:d7:17:2d:e8:49:
5b:e2:32:3b:a9:97:42:82:b7:b3:35:26:28:cf:f8:
59:6a:92:61:17:87:b2:bf:bb:41:15:4c:26:65:c1:
8e:ba:c0:a4:ba:ba:58:aa:e5:8a:03:a4:57:7b:64:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B5:63:66:71:11:AF:88:DD:56:08:58:6B:0B:F6:4A:ED:94:3E:22
X509v3 Authority Key Identifier:
keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/e0073d5a-9507-4588-b834-e01ed691ccb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.41.102.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:39:ea:46:62:ab:62:2a:1d:46:b4:7c:99:f1:c6:ba:de:ca:
69:12:cc:5b:f5:d4:42:93:5a:a0:9b:86:e2:9f:12:14:1f:ed:
be:f9:2d:a1:34:bd:1d:35:95:8c:6c:5a:67:78:68:f3:c7:9d:
2f:3c:f8:1d:a4:b3:ad:ec:94:07:a9:e3:9c:b5:de:aa:43:aa:
6e:ff:37:bc:2e:51:e7:a9:77:0c:84:9b:49:72:e8:de:97:5c:
14:c4:8f:38:40:fe:3c:4d:34:3b:3b:62:dd:27:2c:29:40:65:
72:ee:d2:41:f5:1c:34:d8:61:62:7b:9d:e4:4e:db:e6:4f:5f:
8c:14:cd:e2:44:4d:45:e1:97:b2:98:00:1a:bc:89:4a:61:6b:
df:20:c0:8c:de:65:2f:97:d3:64:92:5c:84:ac:58:3e:b1:58:
f6:dd:32:a9:ff:6d:82:3c:f0:95:8e:4f:4b:ab:b5:1a:e9:19:
8d:63:f2:8c:b3:1f:93:6f:2b:ab:9f:0e:a3:d3:c7:93:87:f4:
69:26:ec:99:16:89:b9:bd:c6:e6:f2:74:a3:4d:7b:32:bf:d6:
d4:1f:2c:f3:76:62:70:3e:c9:6b:93:69:42:e5:dc:a5:2f:74:
66:26:26:a7:6a:45:68:fe:a0:b2:e3:cb:55:ff:9e:3d:20:fd:
ab:74:da:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:39 2026 by rpki-client