
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c0863cb-d8db-4dd6-8295-d6c518a6cec9.roa
File: 3c0863cb-d8db-4dd6-8295-d6c518a6cec9.roa (raw, json)
Hash identifier: wCV9GlXMFISFOq83HsZeKO5AknfXHqPfiAhqcqyRncg=
Subject key identifier: 38:B9:5D:7C:88:C7:13:8F:DD:3B:25:70:F9:F2:6B:C9:0E:DC:AE:96
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0E028C2FDF8B2B082FC40E0023EF83D94DD6EB02
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c0863cb-d8db-4dd6-8295-d6c518a6cec9.roa
Signing time: Thu 22 Oct 2026 00:21:04 +0000
ROA not before: Thu 22 Oct 2026 00:21:04 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 16.62.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:02:8c:2f:df:8b:2b:08:2f:c4:0e:00:23:ef:83:d9:4d:d6:eb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:21:04 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=d992beab16e99bf8a427be5916f5ae883d6bc332540bda1f22e18204d2d96460, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:e4:79:37:84:c6:6e:ef:64:ed:6c:0b:96:
1d:66:84:89:d9:a9:24:84:37:ab:61:19:36:ab:01:
cc:75:0d:0c:d7:59:8d:eb:2c:65:7c:08:ce:7d:26:
84:7f:0a:4a:e1:02:0e:7f:96:aa:7d:90:6f:c9:c5:
8c:c9:16:89:46:57:58:df:74:d8:92:a9:a4:87:80:
85:0e:92:ad:d2:a4:34:ff:c7:4b:2a:79:0b:6f:cf:
ce:42:d2:86:a3:83:81:3a:74:a2:38:a4:83:e1:a6:
da:9e:71:4d:d8:b8:88:9e:47:8c:c9:5f:cf:ee:ec:
ad:58:fd:60:9a:4c:b3:90:91:aa:55:e8:fc:f9:75:
28:a5:95:e3:c3:40:95:63:f3:cf:b8:c8:e3:03:67:
de:6f:71:b4:96:47:26:5f:45:94:b7:14:75:8b:9c:
00:3b:72:91:70:dc:77:32:5a:8d:e9:91:52:bc:4d:
29:98:0f:45:b2:04:48:d0:85:6f:cf:7e:c5:04:f4:
2c:7c:70:f2:56:a4:c5:d0:e2:e5:3f:68:af:f5:14:
fc:4f:8d:bb:18:f0:bb:a1:7a:92:2b:53:0e:79:db:
a7:89:a7:b8:7a:2f:44:29:2b:e2:08:33:78:9d:27:
6f:f7:51:a2:ec:f0:4d:40:e8:d8:5d:ac:22:0c:e6:
81:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B9:5D:7C:88:C7:13:8F:DD:3B:25:70:F9:F2:6B:C9:0E:DC:AE:96
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c0863cb-d8db-4dd6-8295-d6c518a6cec9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.62.70.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:28:c6:be:a8:43:e1:40:63:93:41:e6:a2:60:c6:f6:d2:e2:
5e:78:46:9d:d6:d9:5f:1b:ec:60:78:69:86:87:08:71:f1:b8:
56:0d:7b:90:4b:c2:a0:20:b6:3b:ea:51:7d:63:02:3d:76:22:
56:a4:81:19:6f:b7:9c:57:9e:ff:86:64:03:cb:33:04:39:1f:
e6:80:12:f2:c1:f0:db:70:75:7c:f6:20:65:99:4c:d3:8d:92:
d8:57:ef:39:6e:ab:e9:53:c9:1f:ae:ff:c5:2e:bf:b6:1a:20:
f5:d5:bc:54:80:af:35:92:b8:04:01:b5:fe:79:02:99:26:94:
9e:4b:79:7e:c1:48:4c:a1:b0:e0:34:d5:b5:1f:dc:7e:ad:a9:
c2:a8:ec:72:38:5a:a6:49:42:81:db:f8:2d:f5:49:78:35:4f:
a0:68:b8:2e:d6:92:2a:c8:61:af:f9:32:8d:2b:3a:9d:36:f6:
b3:97:fe:27:ce:02:29:b6:d0:da:4e:90:83:46:51:0b:53:01:
04:98:65:f5:bf:31:aa:1f:6d:8d:1d:ad:f3:4f:ae:ff:72:48:
c8:76:a0:f0:8e:cf:fb:34:4b:66:d5:93:ee:d4:bc:c2:66:1c:
67:1a:3d:8c:52:51:21:74:ca:95:d8:8b:89:32:5d:5b:4f:94:
9b:08:51:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 10:19:31 2026 by rpki-client