
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a62f6cd-82ea-4bfa-ac20-43291afe7df2.roa
File: 0a62f6cd-82ea-4bfa-ac20-43291afe7df2.roa (raw, json)
Hash identifier: WMFjJYpAkWJc2CuYakxlU0FhVMn+hADFzcpiVIVThuw=
Subject key identifier: 1E:7C:E0:01:E0:D5:D4:B3:E9:B5:73:9E:7B:3B:70:2E:87:6D:13:F8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3DDA8AC8C13A5F8E63F52C3D995A77ADC23475A2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a62f6cd-82ea-4bfa-ac20-43291afe7df2.roa
Signing time: Wed 05 Aug 2026 01:00:45 +0000
ROA not before: Wed 05 Aug 2026 01:00:45 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.244.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:da:8a:c8:c1:3a:5f:8e:63:f5:2c:3d:99:5a:77:ad:c2:34:75:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 5 01:00:45 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=3b0a9201b48841e974df81d0b798ba4ba958de08ba3627ea06602267cbb88d34, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:ba:45:64:85:8f:65:a7:6d:54:07:8d:a7:
db:c0:58:f3:86:40:3e:8b:84:01:d2:fe:92:5d:22:
70:b0:ec:34:27:ed:86:59:95:b5:52:a9:9a:c4:5d:
a7:73:8f:9f:82:e4:d8:4e:a2:77:0e:b4:83:98:48:
15:d6:df:c7:d6:a5:00:fe:ef:d3:fa:42:a4:e3:75:
37:48:d7:ea:ee:c3:a6:42:de:ad:2f:65:60:74:9f:
1e:e6:74:ad:6b:aa:44:9b:e6:43:a1:79:49:9e:17:
8f:af:2e:7c:1e:75:cd:ad:ae:8c:e1:fc:5f:81:c2:
1c:22:49:43:6d:34:f2:31:43:e3:90:66:93:a1:67:
f4:c7:13:bd:e7:65:88:e6:9f:16:55:03:40:ff:78:
4e:df:e1:37:e3:40:10:6a:b8:25:7b:b0:14:03:bc:
22:f7:50:51:ab:b5:d1:26:04:d1:17:57:dd:22:4f:
a0:e1:15:10:f1:52:90:00:8c:c1:63:96:3f:40:42:
df:34:b7:c1:b1:c2:fb:85:c8:3c:15:55:c3:a7:97:
e0:24:9e:26:e9:1b:b3:ef:88:e7:61:05:ec:ef:96:
3c:fd:83:29:18:32:20:a0:45:6f:9b:37:cf:43:3c:
bc:b5:d5:0d:78:fc:1a:2a:41:91:dd:54:35:b5:fc:
f6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7C:E0:01:E0:D5:D4:B3:E9:B5:73:9E:7B:3B:70:2E:87:6D:13:F8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0a62f6cd-82ea-4bfa-ac20-43291afe7df2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.244.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:6f:e3:ad:5e:f0:ac:25:ef:86:58:02:c9:34:c4:3c:00:1e:
37:0b:a8:da:e4:c9:6b:a3:c9:e3:be:0d:f9:56:f6:cb:ff:e7:
2e:66:8c:73:a2:0a:8c:89:c6:c4:53:a5:ec:2d:e3:a8:34:d2:
5a:bd:26:54:b1:8d:a0:af:07:cd:8d:a1:ad:45:7e:c5:09:7d:
31:f1:d6:29:a7:b4:cf:f3:89:fa:21:be:25:8d:5c:75:29:17:
dd:92:68:39:0f:d0:f5:02:b4:29:fd:90:d7:79:10:93:33:1d:
cb:58:1d:f7:08:44:05:16:30:4e:15:00:38:65:e4:de:a6:3b:
79:8d:ef:9f:b2:b5:0b:fc:4c:a7:a5:53:a4:d5:78:67:c3:5c:
c1:6f:13:e8:9e:ea:f7:de:ed:d0:09:8e:51:e9:78:ad:6a:12:
1e:5f:e0:25:5d:8b:6f:bd:96:ca:3e:e0:3f:e1:8c:45:8b:b9:
f7:ad:b4:21:c7:f4:97:e3:29:b9:aa:b6:1b:68:d2:e5:5e:77:
b5:a9:23:2c:f0:83:c2:2c:74:68:12:78:7e:f2:48:2e:9d:04:
f9:66:b5:21:41:65:71:18:65:d7:b3:61:0e:99:05:9f:1c:ec:
2e:41:60:09:6f:1e:eb:f1:9d:b6:a8:2e:2c:1a:f5:f9:da:6f:
1e:31:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 14:09:51 2026 by rpki-client