
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1347a92f-2ada-4350-b885-c21a89d01e42.roa
File: 1347a92f-2ada-4350-b885-c21a89d01e42.roa (raw, json)
Hash identifier: 7iuiFS6w+ajaydUrY3GWYLFVUgQth8mPaivGkLAYRpk=
Subject key identifier: D9:26:13:5E:A3:D5:F7:22:42:E1:FD:A3:6F:E0:E0:C5:F7:DF:DE:70
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4ED746B5925D774B916D9A1E15FF8848DD2A3BC7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1347a92f-2ada-4350-b885-c21a89d01e42.roa
Signing time: Fri 23 Oct 2026 01:10:31 +0000
ROA not before: Fri 23 Oct 2026 01:10:31 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 16.198.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d7:46:b5:92:5d:77:4b:91:6d:9a:1e:15:ff:88:48:dd:2a:3b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 23 01:10:31 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=c860851cd490727a53885abbbcb1ee28ef726b2f6a1bceb61f3a7e467282e370, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:58:5d:65:e0:34:4b:ca:f6:84:17:7e:1f:05:
59:1a:f0:1e:be:9d:d0:cf:4f:96:62:cc:eb:b8:ce:
86:fa:a1:15:07:7b:1a:d5:81:2d:e8:58:4f:55:f5:
1d:41:2a:da:41:70:5b:57:81:12:b6:1a:83:b9:08:
f3:b4:66:97:3c:47:13:04:ba:ee:22:6b:37:23:2f:
2b:8c:15:3f:5c:65:f7:80:11:ad:b5:24:89:a3:51:
01:f8:d9:a7:3a:0e:4e:9b:9c:8e:af:b4:0f:93:74:
23:29:e2:dc:06:11:b0:45:65:66:ed:df:80:94:70:
ba:42:18:48:05:71:ab:05:38:b0:c5:00:95:fc:9d:
89:bd:ca:39:16:8e:62:7a:4a:d3:ea:17:69:4f:2a:
ab:fd:11:82:37:a7:a0:fa:8f:a1:f4:fd:f4:e4:d7:
93:dc:db:5a:71:ee:f5:fb:1e:b3:fc:cd:dc:bd:21:
02:12:83:3c:86:19:c9:91:62:f5:a3:8d:e1:34:04:
f5:eb:ca:45:52:35:2f:e4:fd:11:23:4d:4b:fd:8a:
6f:b0:b4:f0:16:78:87:59:15:cb:c6:6e:57:cf:63:
c9:00:1a:e7:44:6b:6b:c2:b1:d8:7e:6e:24:29:07:
67:ec:bd:7e:db:6b:51:06:2a:be:70:45:60:df:b1:
ba:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:26:13:5E:A3:D5:F7:22:42:E1:FD:A3:6F:E0:E0:C5:F7:DF:DE:70
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1347a92f-2ada-4350-b885-c21a89d01e42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:80:e3:16:d6:13:5a:5a:3f:47:34:5f:61:65:d3:87:4f:af:
91:87:7e:a0:bd:ad:eb:48:b2:33:83:dd:7b:b6:71:9d:5d:aa:
47:49:e7:09:32:59:1f:52:71:b7:bb:7f:24:b8:2c:98:3a:d0:
3a:39:7c:fb:c0:ab:26:50:95:5d:08:03:4a:19:ed:ed:2f:16:
bc:10:30:ed:86:12:59:75:0a:be:21:62:4d:35:00:2b:db:63:
d8:89:15:19:c0:ff:53:54:18:f7:2d:0c:60:35:c0:a9:b0:e6:
47:31:14:53:7a:5d:ff:7f:87:04:33:95:f0:04:83:58:1b:2f:
e8:b8:71:b0:68:14:92:fb:b8:a7:e3:78:35:25:1b:8f:ad:80:
a2:a9:54:c4:53:3a:c8:bf:e3:df:0c:f4:51:e7:82:62:d7:31:
9c:e7:94:34:e9:d7:62:58:17:a4:c8:95:a5:64:d4:e6:f6:80:
df:12:7f:07:87:42:28:c3:6f:3c:74:78:5a:47:cb:c2:93:86:
f5:81:46:b4:a9:98:03:ca:d5:43:08:6b:2a:75:a1:95:42:c6:
4a:83:3f:40:d6:4a:9c:08:d3:30:b5:4d:a1:2f:3c:32:03:a1:
a6:a5:75:32:a6:cd:f7:12:79:dc:82:67:31:b5:37:ab:e1:a4:
41:e8:bd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 23:18:52 2026 by rpki-client