
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/038fb50f-8536-4073-94bd-2e51a0aa712b.roa
File: 038fb50f-8536-4073-94bd-2e51a0aa712b.roa (raw, json)
Hash identifier: oG/Pyl0afazdDft+0AlKGcH2/iZvbApSWM1oPYnopDU=
Subject key identifier: C6:B4:70:1C:55:23:A7:9D:C5:B0:6E:B5:8D:BE:42:2B:0B:7F:5E:DF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 423BABDBC4B9B4D27F5E6ADE365FC0D75A02D6FF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/038fb50f-8536-4073-94bd-2e51a0aa712b.roa
Signing time: Thu 15 Oct 2026 00:10:05 +0000
ROA not before: Thu 15 Oct 2026 00:10:05 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:3b:ab:db:c4:b9:b4:d2:7f:5e:6a:de:36:5f:c0:d7:5a:02:d6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 00:10:05 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=a08e6cc368feef4704f0a28e4145cab9da591e4f710b2c846d0f0ab358eabe65, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:77:71:e5:9e:fb:c9:12:af:3c:4f:20:00:00:
fa:27:01:c3:00:91:a4:af:a2:ae:9a:7c:94:2b:6e:
94:13:73:98:79:a7:ad:03:43:90:43:45:9a:09:db:
ce:ce:16:37:2d:3b:9b:de:d4:9c:69:ef:be:b1:f3:
69:8b:95:43:f5:bc:d6:5c:70:74:7b:1c:81:23:d1:
96:2a:16:53:e9:44:60:55:3e:3f:dd:e2:c1:27:bb:
b2:1b:13:cb:ca:e5:3f:04:fe:3f:9e:ed:37:2e:0c:
a0:1f:7c:56:c3:a6:d4:b8:93:9f:ef:fc:71:0a:57:
b3:a1:2c:d5:82:10:ff:f9:50:95:9c:85:9f:84:70:
48:9b:3e:25:43:10:67:0a:3a:ba:b3:88:63:14:80:
51:f4:0a:61:90:e1:d5:38:01:86:04:3c:fd:19:aa:
8b:f9:43:ec:4c:b7:4b:dd:69:61:f2:3d:22:b6:b9:
03:3b:5f:4f:b5:3e:64:c4:5c:e3:fc:60:fe:ca:d1:
1a:3a:4a:2d:8c:74:de:63:d3:c4:74:41:4d:27:4d:
ea:a8:07:1a:44:32:9f:34:33:c8:66:e4:99:d3:83:
4c:b1:a4:67:c8:bb:ef:f5:1a:18:03:bf:41:0f:d4:
82:72:11:4b:b6:16:0f:b7:e8:f5:12:fa:7e:62:7f:
8f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B4:70:1C:55:23:A7:9D:C5:B0:6E:B5:8D:BE:42:2B:0B:7F:5E:DF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/038fb50f-8536-4073-94bd-2e51a0aa712b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.6.0/24
Signature Algorithm: sha256WithRSAEncryption
17:85:7b:cb:38:eb:4c:08:29:52:0a:bf:87:e1:66:3c:68:a3:
33:95:a4:29:b8:c5:75:89:77:aa:5b:a7:d2:0e:54:1e:5b:88:
70:9a:74:23:f1:13:fd:0d:50:a7:44:6b:b6:72:cb:6f:9c:0f:
43:15:fe:e8:31:c9:73:ee:50:11:34:b1:5e:83:39:3d:28:83:
64:76:7d:f3:e7:63:83:77:b0:65:f9:03:82:b0:1f:4c:28:17:
ae:22:29:28:40:79:76:9d:91:fb:91:1a:f9:33:8a:64:cf:ac:
b7:f1:21:7e:19:87:af:e8:a7:e8:98:3f:98:2f:95:62:d3:d0:
ff:9d:b3:74:42:b6:d9:82:e5:79:fe:4d:c9:30:70:b9:90:3c:
b5:7e:9b:b9:03:e9:36:f0:68:6e:76:4d:1d:2e:a6:06:05:00:
8a:61:4e:c0:94:43:37:ff:64:ef:52:d0:9f:bb:e1:53:99:45:
fe:5a:5f:c3:8e:93:07:e1:84:d7:54:91:3d:81:32:15:c0:de:
73:e0:70:d8:5e:8c:dd:42:4d:99:c6:f1:e4:74:c0:13:8e:a9:
bb:11:b7:23:51:e9:b6:ef:c1:7a:55:d5:25:05:48:32:d9:c0:
91:8d:63:08:d4:5f:59:fb:51:02:80:87:23:51:03:09:6d:00:
ef:56:6e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:49:06 2026 by rpki-client