
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06bef077-f186-4620-b0e8-edae475c1fe6.roa
File: 06bef077-f186-4620-b0e8-edae475c1fe6.roa (raw, json)
Hash identifier: gN7veUFHEjLRSj3TKsNsN2E1nediUdqfSz1vsMl5biQ=
Subject key identifier: 31:73:AE:40:CA:FD:1D:F3:7E:47:81:A4:44:24:36:70:6D:CE:69:EE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7D6B5B49A146E6CDECB51577008D65BF0E18C9C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06bef077-f186-4620-b0e8-edae475c1fe6.roa
Signing time: Thu 08 Oct 2026 00:30:49 +0000
ROA not before: Thu 08 Oct 2026 00:30:49 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 96.0.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:6b:5b:49:a1:46:e6:cd:ec:b5:15:77:00:8d:65:bf:0e:18:c9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 8 00:30:49 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=a2268664f5f41c13ff042e83765e9a7ad3cc58720d39dc858dc454ec281af21b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b7:5a:86:8b:66:88:3a:8e:fd:03:d6:a8:b8:
24:94:a4:d6:fe:b7:6d:ee:b8:8e:f7:d1:cc:1b:3d:
18:55:0a:db:a8:d2:47:4a:84:8a:8e:32:5a:f8:7c:
90:8c:37:53:95:37:7d:4b:67:cc:55:5d:21:9f:2e:
56:93:40:a2:79:3f:70:7e:f9:7e:23:f1:53:89:e8:
12:7c:e0:8f:62:19:c4:a0:1c:da:c6:9f:bf:7d:77:
97:e8:c2:2a:df:da:20:35:11:48:27:b4:24:5c:88:
46:fd:44:0c:e5:fa:23:85:48:5f:19:2a:6d:3c:09:
30:2d:b3:46:f9:b5:ac:3c:cf:42:53:dd:b0:04:c3:
80:42:91:0c:72:40:a2:61:2c:b1:78:ee:1c:c0:ae:
65:ee:d9:f0:05:0d:f9:0a:95:59:ab:0d:1f:2d:c4:
21:7b:24:7e:be:73:e0:96:c7:2a:8d:bb:8e:67:33:
1b:22:f4:6a:46:08:30:52:d3:0d:3c:cd:75:50:e2:
1f:78:dc:f8:a7:78:11:44:4d:88:c5:b7:ed:6e:31:
f7:04:10:a0:98:54:b6:5d:3e:45:83:8c:f9:21:be:
52:58:9c:c3:01:ea:1f:10:e4:62:bb:c6:ba:3f:32:
9d:21:07:5a:87:85:16:ca:b0:56:a4:90:64:31:d1:
fa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:73:AE:40:CA:FD:1D:F3:7E:47:81:A4:44:24:36:70:6D:CE:69:EE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06bef077-f186-4620-b0e8-edae475c1fe6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.0.131.0/24
Signature Algorithm: sha256WithRSAEncryption
99:02:a8:f9:4f:8d:d8:3a:a3:78:a2:a9:d1:96:85:58:db:5a:
9a:43:76:cc:ba:a1:c7:07:2b:db:30:f3:11:40:5e:bc:06:ea:
7d:1e:b3:5c:6e:3d:96:be:e3:0c:30:ff:9c:cc:7c:96:53:13:
f6:3a:5a:e2:a6:bd:e1:2c:b0:d8:99:cc:03:47:61:b5:81:f1:
3e:7d:50:ef:2e:99:05:e6:c6:b3:5e:2f:38:27:c2:5c:98:4a:
36:e5:ae:50:88:5d:59:ac:0f:16:d5:e6:7a:03:dc:3d:4c:29:
c2:5e:2d:d6:32:f3:fd:88:7e:63:72:c0:bf:02:1a:af:c2:f7:
11:48:8f:c8:d9:00:d9:0b:8b:b6:55:92:6f:b6:e9:15:c2:3a:
bc:a8:41:fb:29:fb:b9:8a:0f:99:eb:32:25:fe:b4:6b:0b:ac:
47:ec:87:dd:3a:bd:24:fb:9b:95:52:c4:fb:65:02:0c:b7:e9:
67:e6:79:41:90:3d:2e:20:66:79:2c:09:95:5e:d9:a7:61:48:
54:0f:b9:68:3c:0e:47:b6:69:7b:b1:ff:07:98:b5:cc:c3:dc:
a4:0c:61:0d:93:be:8c:fd:2c:97:d9:15:a1:e7:a5:75:e9:28:
93:27:fd:a0:d0:c7:c1:51:b4:df:ae:bf:dd:18:a7:6f:b4:94:
a1:4d:4e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:52:25 2026 by rpki-client