
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/199a6fe3-3863-47d9-8092-2b8b5516b0cc.roa
File: 199a6fe3-3863-47d9-8092-2b8b5516b0cc.roa (raw, json)
Hash identifier: swAlNEuD0xJzVdrhU6Cg1gOAXy1uUVwtaptmm+u6lV4=
Subject key identifier: 2A:F1:F2:BB:5F:CB:AE:E2:82:4B:C5:68:16:56:C8:A0:82:A9:54:05
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 76117664FB2BABC592F936355CA7A4B7211AC45C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/199a6fe3-3863-47d9-8092-2b8b5516b0cc.roa
Signing time: Fri 09 Oct 2026 00:51:21 +0000
ROA not before: Fri 09 Oct 2026 00:51:21 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 16.149.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:11:76:64:fb:2b:ab:c5:92:f9:36:35:5c:a7:a4:b7:21:1a:c4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 9 00:51:21 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=2ed4b09dd38405d454f1f4f23e00da8940b4b8af8c34cb595f6527cde02f6162, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:74:37:a3:33:5a:c0:2f:db:a7:04:77:d3:8c:
17:16:a0:38:0b:3b:9d:94:64:f8:b9:81:c1:f4:a2:
59:f5:f1:be:bc:50:f7:02:a2:c8:c9:7e:ee:7a:64:
62:ef:f5:bc:29:50:1b:f1:ff:74:31:11:6e:90:3e:
ae:32:f9:6f:75:b0:b1:d7:85:8f:52:d6:f4:c5:4f:
1a:f9:df:cd:17:89:9f:4f:50:6a:de:c1:15:77:e6:
3d:ba:af:dc:95:a6:8f:c3:69:0e:57:50:de:f7:3b:
15:03:cd:dc:ed:44:2a:d1:4b:cb:2b:1c:95:e0:99:
6d:aa:3c:dd:3a:97:f3:78:9d:4e:c8:69:27:1b:24:
2d:6c:46:f7:be:9a:34:91:83:db:f1:c3:e3:bf:8c:
bf:cb:bf:93:43:21:c5:d7:c9:82:d7:2c:5d:3e:aa:
08:3f:eb:b5:12:7d:bd:e8:29:c9:a9:ae:4b:02:ff:
70:7b:7b:96:92:3b:3c:cd:3d:1d:3b:50:72:19:cf:
1c:e2:d3:c6:87:f0:9a:87:e7:15:2b:d0:4a:72:ee:
7e:1e:35:a7:ec:93:36:46:b9:6f:7e:b0:96:ef:c3:
03:28:7a:be:68:df:06:0b:5c:eb:5c:0c:81:da:ad:
83:b5:4c:61:97:7e:5a:98:64:de:3a:44:99:bc:92:
23:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F1:F2:BB:5F:CB:AE:E2:82:4B:C5:68:16:56:C8:A0:82:A9:54:05
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/199a6fe3-3863-47d9-8092-2b8b5516b0cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.149.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3c:7f:8e:59:99:7e:50:cf:0b:0b:37:f4:97:4c:50:2d:09:40:
f4:ff:08:b3:7f:8e:a1:26:39:3e:75:86:a6:db:50:32:c3:a8:
ab:74:a0:a9:26:8e:8e:e4:d5:bf:29:37:f1:0b:d7:68:1d:ab:
e5:28:25:77:a6:43:c3:e9:80:53:ec:9d:2a:98:3c:a1:28:05:
44:ca:51:9b:02:0c:0c:9f:f9:36:7f:03:95:f3:a4:ef:a5:67:
94:85:16:94:45:78:b9:e0:16:cb:72:20:fa:65:4a:3e:ed:1b:
b4:50:20:72:5b:75:85:8a:7c:c2:3f:5b:c9:75:62:86:e5:ff:
42:9a:90:6a:37:04:97:8e:0b:0f:c1:22:b0:c9:ba:89:a3:2a:
5d:bd:c5:6c:b6:19:8b:58:69:0f:67:88:64:78:9f:1f:8e:f1:
3f:d6:b9:9f:07:a6:ed:e8:f1:60:1b:21:bb:ff:21:40:98:42:
38:a7:5c:4b:83:ff:fe:2d:d8:6d:43:e6:82:bd:b8:7c:3b:5d:
b2:4c:1f:a0:79:40:a9:3b:e1:04:9b:ac:91:cf:23:b0:e1:6f:
f5:fb:d1:f2:b3:22:9e:81:c7:f7:1f:98:9e:35:e6:e7:e6:e7:
dc:88:5b:47:70:a8:7f:64:a5:73:da:6e:e5:36:a4:d4:8d:41:
00:3f:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:15:54 2026 by rpki-client