
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19a215b0-3535-4e05-832b-cbb3b85f146e.roa
File: 19a215b0-3535-4e05-832b-cbb3b85f146e.roa (raw, json)
Hash identifier: FyG28UkJnGzr0NTYGNuwcPs7SgJ9N+hfOuJoJpmWU68=
Subject key identifier: 34:BF:ED:41:FD:AF:21:B2:94:C3:80:6F:A1:51:35:3D:F9:64:86:A4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 544E6A7DED8A1C65D8A449C10D61AB5F17B425B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19a215b0-3535-4e05-832b-cbb3b85f146e.roa
Signing time: Fri 30 Oct 2026 00:03:24 +0000
ROA not before: Fri 30 Oct 2026 00:03:24 +0000
ROA not after: Thu 28 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 100.55.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:4e:6a:7d:ed:8a:1c:65:d8:a4:49:c1:0d:61:ab:5f:17:b4:25:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 30 00:03:24 2026 GMT
Not After : Jan 28 23:59:59 2027 GMT
Subject: serialNumber=c935f82c21e4546b2b49d551eb31fa8ff4bcfadc03154d732ebc0be6093dcead, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:97:c6:5c:1d:1f:23:7d:a3:87:f3:95:ae:dc:
f4:76:37:20:19:99:9b:7b:66:82:81:aa:d8:72:a3:
b9:ba:a4:59:a3:00:29:12:0f:b4:63:91:55:90:5f:
d0:48:58:59:a6:32:63:8e:a4:8e:b0:49:f5:92:f4:
59:06:29:f3:bf:4f:ee:23:73:67:84:f6:9a:41:38:
1d:d3:5b:51:73:28:39:e2:fc:4c:05:c0:a5:89:44:
ab:fa:65:e1:a9:fb:02:b5:f2:4e:00:3d:a8:92:38:
e1:f2:f7:bd:75:cc:5f:a6:0e:57:b1:8f:72:1d:a7:
7f:f6:68:06:53:d9:6e:ff:07:4f:1b:d5:ab:d5:fd:
01:b1:b8:5b:bc:92:97:38:45:2c:63:a3:3e:91:fd:
44:1b:8b:23:2a:0e:fa:e7:de:1c:1e:a2:0e:39:ba:
23:82:bf:1d:e9:e7:3a:81:b4:6f:54:fc:a4:f1:8a:
1a:01:2e:08:ed:a7:cb:c6:fb:c7:3e:8f:61:4c:c6:
e9:f9:fa:71:64:fd:6f:88:6b:05:7c:2d:0e:96:d8:
a5:3d:9a:f2:23:4a:5b:89:71:1d:13:26:85:0b:a0:
5f:c6:da:c7:16:95:8d:a9:a1:fc:ac:1f:d6:d1:49:
1e:d4:ac:e4:04:6d:01:a8:29:03:6c:c0:69:e0:cc:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BF:ED:41:FD:AF:21:B2:94:C3:80:6F:A1:51:35:3D:F9:64:86:A4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19a215b0-3535-4e05-832b-cbb3b85f146e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
100.55.128.0/23
Signature Algorithm: sha256WithRSAEncryption
10:bd:5d:55:75:e8:fb:ee:7d:84:e0:5f:05:ee:df:2b:de:00:
81:00:9f:ae:83:9a:24:28:44:62:22:c7:3e:20:68:61:eb:ba:
b7:f4:7b:6d:79:bf:11:59:07:a5:59:c6:e5:bc:e0:02:02:a3:
92:c2:76:5c:29:4e:ca:86:80:92:19:fb:c8:07:97:e6:3d:f2:
b1:82:27:68:b0:46:88:6b:01:6a:68:bc:85:3c:eb:b4:8d:74:
82:ed:50:61:80:d4:c8:0e:39:4c:33:df:36:47:cd:89:e9:9e:
6e:f6:4b:08:cf:4b:50:75:6d:07:d6:63:82:97:78:0b:b6:28:
c9:d8:0a:ee:55:52:bc:5e:65:0f:cd:29:aa:b1:df:80:79:94:
e4:3c:dc:00:95:72:f1:60:86:a2:63:a8:a1:c3:ac:28:0e:87:
c7:27:f9:b7:54:5b:a3:a5:d2:a0:6f:39:09:7f:7e:76:80:fa:
34:0b:53:f1:4e:d9:fb:2b:65:5f:6a:a7:4b:b5:55:d5:9d:e3:
82:8c:88:83:0e:d8:f2:30:d2:60:ef:5b:31:92:5a:c8:3f:8f:
02:82:b6:4c:a2:74:48:cd:c1:73:41:34:86:50:86:3c:fc:5d:
23:c5:8f:d7:cb:44:4d:48:40:39:bc:99:21:1d:f5:d2:90:da:
63:7d:6e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 01:49:13 2026 by rpki-client