
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa
File: a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa (raw, json)
Hash identifier: CFO4FvxDyMVzoR+7jip6SJp2XDUiHnWQOh2Y5I13ezo=
Subject key identifier: 6A:3A:ED:17:9C:34:A2:C5:06:AB:CE:8F:E6:18:BC:66:8E:7D:B0:8A
Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial: 04BEDBCC23258EC83209F9BC3F0B8BF5902C7A2F
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa
Signing time: Tue 19 May 2026 00:50:09 +0000
ROA not before: Tue 19 May 2026 00:50:09 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 96.127.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:be:db:cc:23:25:8e:c8:32:09:f9:bc:3f:0b:8b:f5:90:2c:7a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Validity
Not Before: May 19 00:50:09 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=565f7c4fa2cfd83b76cd88daecae4d5f589310608e102a0a02975921c9d7db67, CN=0099a7ea-794a-4a28-b164-49547626eb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:72:57:c6:8d:db:e4:b1:d9:06:00:c3:1e:
1d:51:0d:d3:10:d9:54:87:74:25:58:c1:75:ed:09:
85:14:b7:26:17:71:1b:4e:55:ac:d1:a2:2e:7c:df:
80:9f:cd:e9:d1:a7:4a:e0:3f:49:af:6b:4b:f3:7d:
83:a8:b4:c5:2b:37:c1:a1:5a:94:f7:92:15:96:0e:
80:c3:a0:6d:a9:6f:08:38:ca:81:ae:48:b7:d1:e9:
70:6b:0a:13:37:bf:79:b7:dd:5e:7a:ed:a5:19:7b:
8a:ae:86:c1:3e:14:d4:6b:bc:10:62:92:c1:a6:0b:
ee:3f:b5:5c:ac:8c:3a:12:ac:d7:ee:46:80:82:9d:
ae:e4:9e:c8:4b:76:af:c5:e0:21:92:32:27:31:34:
6f:50:40:b7:96:a3:69:a2:ca:9b:08:70:f6:45:6e:
7d:e8:81:35:3b:30:cd:b0:0d:e3:40:8c:b7:3c:7a:
57:0c:74:c7:cf:1a:55:61:a4:d1:b1:73:37:94:48:
c8:ed:4a:5d:6b:22:8c:42:ab:12:6a:61:ce:a9:b1:
ef:f6:ce:63:2e:54:77:23:21:10:ba:7c:55:cc:db:
af:5c:cf:1c:68:e8:01:d1:df:75:91:68:c8:67:c9:
1c:4c:ca:6b:1d:9e:d4:bd:9e:b7:ed:4d:ca:6b:35:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3A:ED:17:9C:34:A2:C5:06:AB:CE:8F:E6:18:BC:66:8E:7D:B0:8A
X509v3 Authority Key Identifier:
keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.127.10.0/23
Signature Algorithm: sha256WithRSAEncryption
46:58:aa:60:e5:25:2d:bd:7f:0e:a7:38:5b:5d:a2:2f:f7:7c:
8a:dc:00:e6:d8:4e:aa:e5:6d:4e:45:81:36:40:ed:89:f5:5f:
76:e3:4d:34:b2:ef:86:f5:27:83:87:22:81:5e:2f:80:da:af:
7d:67:dd:72:27:c8:59:44:43:4a:9a:b7:88:16:41:03:3f:13:
7f:05:c7:4f:c3:78:9d:24:d2:b4:75:bc:68:96:73:53:f8:c7:
34:3b:11:d2:6b:fa:ae:a3:3e:99:1a:ff:0f:91:ea:2a:02:16:
24:90:42:cd:a1:ed:07:94:2d:36:51:17:5e:5e:c1:5b:bf:71:
a4:52:95:4f:e1:f6:c7:e9:fe:df:6c:0b:fe:b1:10:af:09:8a:
52:bf:ad:01:04:4c:51:24:c9:47:5c:e3:19:e4:d6:ea:ea:3f:
40:70:6e:e5:f1:e5:7f:ca:7b:94:33:28:4c:56:87:fe:2a:42:
33:b9:1c:e3:18:10:dc:f6:de:8c:d3:00:01:6c:e2:a7:0f:1a:
d5:73:4a:95:e2:97:fd:ea:b2:5f:64:9a:cd:1b:b9:e0:2e:71:
9e:36:de:07:a7:31:52:bc:ef:95:62:0f:7f:6c:59:4c:b8:a3:
91:df:5a:50:82:3c:a5:20:07:d9:9a:50:40:83:bf:8b:cd:c6:
d9:33:3c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 13:52:49 2026 by rpki-client