
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0762bd36-320e-439a-874c-7ea37e216a7d.roa
File: 0762bd36-320e-439a-874c-7ea37e216a7d.roa (raw, json)
Hash identifier: X6MpUqeaI0ryvO/n57tT6DEZ3OXnSQW5mmQAiN6siCw=
Subject key identifier: 7D:A0:E9:53:2A:9F:44:6C:47:F4:14:2C:64:2C:EB:E3:DD:B9:3A:8D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2D2D22F801B7B4C3868D810DBDC16A55EE18B49D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0762bd36-320e-439a-874c-7ea37e216a7d.roa
Signing time: Thu 10 Sep 2026 08:22:54 +0000
ROA not before: Thu 10 Sep 2026 08:22:54 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 8987
IP address blocks: 63.249.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:2d:22:f8:01:b7:b4:c3:86:8d:81:0d:bd:c1:6a:55:ee:18:b4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 10 08:22:54 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=230e268e05bd7bc1d467c9bb69441db1146d487acb593824e4ec2d958023a7ff, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:e9:17:1b:19:c8:0f:5d:9f:d5:5d:84:17:
85:2c:68:cb:44:9b:c3:4b:e2:66:aa:1b:08:db:f8:
11:7b:38:03:7d:a4:38:37:fb:46:b3:e0:d2:c3:e5:
e7:70:1b:4b:17:1f:20:1b:b1:32:7a:96:c9:b7:94:
60:ab:2c:10:84:b0:e1:a6:5f:d4:54:92:e6:34:d6:
0a:e2:68:e7:09:92:cc:27:76:47:69:c4:f8:f1:10:
dc:3c:d2:4f:6a:4f:54:bd:22:32:f1:c3:a0:0e:7f:
07:26:35:56:4f:4a:fb:4b:6d:d2:59:a9:c5:94:7a:
a1:51:d1:eb:69:42:6f:98:4f:84:70:d3:48:42:45:
96:c9:d7:82:fe:e4:bd:32:8b:05:62:be:f9:38:6f:
78:3c:f9:5b:c7:59:b8:bb:b1:5b:84:be:07:9b:11:
2a:1d:a0:c4:5c:82:40:83:d1:e0:6a:1b:f5:c1:dd:
5e:86:2b:c8:1a:ee:2d:29:b5:bd:63:c4:cd:28:6c:
95:e4:2d:59:71:bd:4a:85:be:97:a4:79:31:30:34:
b3:70:34:38:f7:0a:ab:12:1a:1a:9b:31:b6:98:7f:
37:81:e9:7d:88:88:01:0d:70:9e:34:1f:9f:88:14:
f0:a5:1b:a3:40:9e:c5:65:51:27:10:d6:04:e7:70:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A0:E9:53:2A:9F:44:6C:47:F4:14:2C:64:2C:EB:E3:DD:B9:3A:8D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0762bd36-320e-439a-874c-7ea37e216a7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.249.222.0/24
Signature Algorithm: sha256WithRSAEncryption
98:35:13:96:3c:63:32:c7:47:ba:d0:2a:87:29:21:be:53:ed:
f0:52:3f:04:aa:ce:36:b5:b0:0f:d9:89:42:e2:a6:1d:eb:70:
3c:52:4e:8d:69:e0:2e:94:9f:d8:03:8d:68:07:8c:23:7f:20:
0f:d1:81:22:08:d2:5c:be:13:63:ec:eb:9b:2b:ce:2e:bc:55:
4f:d4:06:6c:f2:78:91:f4:ea:d0:e2:1d:0b:56:2c:f0:9e:cf:
e3:67:8d:2b:72:5d:9b:ee:80:23:c5:ca:e8:18:f4:14:ca:d5:
ce:05:2d:6a:3f:7d:5c:9b:37:f0:98:59:b4:36:4b:95:d4:6d:
79:c8:1d:ef:5c:c6:ef:97:f2:53:d6:37:b3:08:02:31:d1:5c:
c1:c9:32:6d:69:32:95:fc:c1:68:03:f7:08:a2:67:42:da:17:
f1:fb:34:8c:ea:6c:14:a8:80:9e:aa:d7:4c:3f:89:a4:93:e1:
0b:c6:56:8c:2c:90:01:ff:72:ed:c6:cd:54:8c:fc:11:dc:d5:
bc:87:67:38:02:79:1c:15:4a:fe:37:a2:78:e0:00:9b:a9:1b:
71:ae:9c:3f:ab:ba:d8:02:eb:04:f1:e5:65:15:42:e7:fc:66:
cb:e5:b3:b2:a4:df:1d:d7:f1:c4:f8:92:6b:81:cc:cc:ac:02:
93:a6:0c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:37:42 2026 by rpki-client