
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4503df92-6bde-484a-9390-a3c3d019e26f.roa
File: 4503df92-6bde-484a-9390-a3c3d019e26f.roa (raw, json)
Hash identifier: x4reNfry62sfZYP389hkx3wbiekIJF+BUpEHxfgis5w=
Subject key identifier: 27:4B:60:CB:5D:3C:57:D7:3D:13:B5:FD:3B:CD:3B:10:C5:80:EB:B1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 67197B01C012379F824413DF605CA137016536BA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4503df92-6bde-484a-9390-a3c3d019e26f.roa
Signing time: Thu 06 Aug 2026 00:00:05 +0000
ROA not before: Thu 06 Aug 2026 00:00:05 +0000
ROA not after: Wed 04 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:19:7b:01:c0:12:37:9f:82:44:13:df:60:5c:a1:37:01:65:36:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 6 00:00:05 2026 GMT
Not After : Nov 4 23:59:59 2026 GMT
Subject: serialNumber=604bd0f7fbb4f23d43b6f3ae8ec25a37f3b5de65e66a6126404e386681fd11b0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:05:07:70:be:fb:83:56:71:db:42:72:23:dc:
80:dc:de:7e:7e:62:42:3c:af:55:89:67:c3:db:f0:
af:69:c3:07:db:f5:9b:5e:80:ad:d0:40:d3:e8:19:
f1:e5:20:5a:8c:f8:01:cf:74:7d:44:61:1e:19:39:
3a:62:5d:80:f6:12:52:49:b8:0d:a6:2d:3c:b7:20:
10:9e:d2:2d:fd:c3:21:fb:ed:ba:82:a1:dd:70:3c:
95:93:4e:89:45:41:ba:48:e6:cf:8f:53:47:ad:c4:
af:3f:3d:8c:f0:e5:0d:52:92:63:ca:b5:4a:c5:b1:
20:09:42:d5:2a:e9:5c:a6:e4:95:2b:3a:a5:c7:42:
45:9c:1c:4a:3c:a0:fe:81:36:aa:a2:1a:be:a7:17:
e1:d7:5e:ef:2b:92:ef:c3:fc:46:5a:83:f0:03:64:
fd:3f:09:ee:4c:4e:a3:ff:ba:3f:41:53:3a:47:45:
a4:90:25:f8:d9:a9:66:24:bd:61:ac:bf:e1:f8:60:
50:23:18:67:9a:94:61:14:40:a1:c6:5e:45:0f:65:
72:6c:01:48:98:0f:3b:bc:a2:d5:59:bf:64:c5:67:
81:5f:37:a3:28:00:3e:d3:22:32:65:0c:3a:35:21:
e1:8b:17:03:2c:63:8d:f0:3c:b8:bb:dc:ad:28:92:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4B:60:CB:5D:3C:57:D7:3D:13:B5:FD:3B:CD:3B:10:C5:80:EB:B1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4503df92-6bde-484a-9390-a3c3d019e26f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.46.0/24
Signature Algorithm: sha256WithRSAEncryption
61:95:5d:3a:7c:85:87:ef:f8:65:b8:ae:34:d7:60:b2:74:1a:
67:97:0d:75:0c:b8:6b:c2:ed:cf:05:2b:30:e7:18:b2:2f:02:
9b:24:ac:01:6f:e4:69:c5:4b:7f:4b:59:72:bf:34:90:80:6c:
7e:bc:40:7f:a4:a2:d8:1a:c7:44:f8:4a:44:59:40:f7:21:1c:
7b:32:5d:3f:df:a1:85:e7:ff:49:9c:67:ad:4a:5a:cf:f5:51:
9b:9f:b3:e5:d4:7f:78:94:22:c5:dd:8c:9c:9d:7f:67:29:a3:
cd:fd:73:97:af:85:92:85:58:69:65:01:b3:43:9e:c4:2c:50:
e7:cb:c6:6b:1a:e1:fa:e4:e7:f9:e9:47:cb:d8:43:5e:93:ef:
85:1c:3f:01:a7:c9:00:1e:96:83:4b:f8:01:3c:ad:ea:cb:9d:
a7:28:bb:c3:f1:e1:b6:d0:1e:7e:73:6e:39:77:fa:7c:2e:cf:
01:a1:26:78:73:5f:e7:67:06:fe:7a:19:c7:83:b9:aa:ee:ab:
7a:5b:c1:67:4a:8d:35:30:06:06:f6:31:68:c7:db:46:a5:a6:
17:b5:3d:e4:82:ca:dd:a5:17:3d:8d:1a:04:63:b9:78:a1:fa:
9a:13:6e:0e:d1:4c:27:df:fe:fd:f1:89:da:a6:67:a4:8e:b1:
bb:f6:89:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:08:32 2026 by rpki-client