
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4737921a-331c-4f94-8d9b-3b82e1a045b0.roa
File: 4737921a-331c-4f94-8d9b-3b82e1a045b0.roa (raw, json)
Hash identifier: TuVDhB6+5z5eipkKYpX2Yk+HWrwTioQ7VZ5yydoY4SE=
Subject key identifier: E6:6B:32:3B:B1:22:B5:F3:13:EE:91:07:B9:62:D4:65:21:89:EC:C0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 308E957B62F5727E906E0B7D2A096E50D0603D2D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4737921a-331c-4f94-8d9b-3b82e1a045b0.roa
Signing time: Tue 13 Oct 2026 15:32:48 +0000
ROA not before: Tue 13 Oct 2026 15:32:48 +0000
ROA not after: Mon 11 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 24.110.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:8e:95:7b:62:f5:72:7e:90:6e:0b:7d:2a:09:6e:50:d0:60:3d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 13 15:32:48 2026 GMT
Not After : Jan 11 23:59:59 2027 GMT
Subject: serialNumber=ba4dfb2397a241e0630fffa392d112a0d6a7a81fde054c28dc66fa3f135dd590, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:c6:90:0b:b2:48:0a:f0:b9:55:0e:b5:6f:
b5:55:2b:6e:be:c1:00:b5:9e:7f:0b:3f:41:b7:c8:
98:5a:39:28:62:ce:8a:d7:10:66:b3:8b:d9:eb:26:
5b:17:c7:40:25:83:d0:01:1c:2f:dc:45:6d:20:ca:
e4:9d:01:c5:99:45:d2:37:c9:62:54:32:7f:a5:28:
6b:3a:0f:b9:af:c6:cd:f9:ca:81:a7:cd:f2:46:1d:
b6:83:1c:11:44:7e:46:32:17:45:04:fd:52:4c:ee:
98:1d:0f:14:4c:96:a6:d6:03:45:42:04:64:fa:98:
a8:62:1a:df:3f:37:43:35:2c:7d:be:56:7e:db:2c:
2a:e4:4e:74:10:3f:24:11:e2:22:78:d5:49:4e:f4:
ea:71:20:77:aa:5f:70:8b:cb:57:d4:18:a8:3f:8d:
a0:cf:f5:90:40:0a:38:ed:cc:35:9f:fb:ca:4b:64:
12:bd:aa:35:0d:aa:58:ac:31:e8:f0:5d:67:44:c4:
9c:e6:28:90:95:60:33:ab:ce:71:af:e3:14:b3:4e:
c0:47:69:d2:65:5d:f8:0b:26:8b:6f:fe:3e:3d:a4:
d1:93:ea:0e:12:16:c8:c4:d4:b0:ef:25:2c:cf:48:
81:7a:ad:52:bd:77:3f:bc:ea:cd:f2:ab:60:34:34:
2c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6B:32:3B:B1:22:B5:F3:13:EE:91:07:B9:62:D4:65:21:89:EC:C0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4737921a-331c-4f94-8d9b-3b82e1a045b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.110.138.0/24
Signature Algorithm: sha256WithRSAEncryption
69:3f:a5:05:07:1a:19:45:63:31:72:54:59:74:97:b2:de:20:
b6:38:ed:5c:28:c7:dc:12:4a:51:a6:34:ee:a4:55:f7:a3:79:
77:44:ed:3c:e8:ae:d8:95:d6:ea:1f:a2:cb:2b:fb:61:f1:1f:
45:6a:3d:0b:8c:50:15:8c:3e:00:aa:a0:16:2d:12:10:50:37:
49:3a:1f:dc:88:5b:3b:88:45:01:04:08:dd:bd:61:d6:db:dc:
87:e6:61:3e:4e:5f:24:f5:8c:21:46:65:57:97:7a:ad:0c:34:
db:37:6e:eb:51:53:a6:7f:57:ec:9e:62:19:54:58:3c:90:63:
01:05:06:fd:71:7b:22:df:9a:27:d1:ce:a6:f1:02:2f:dd:22:
d4:f8:db:4e:32:e3:a9:9b:13:b1:27:52:ac:f1:cc:af:71:3a:
4f:c7:57:5f:c1:2e:23:44:13:b0:72:e5:fe:d7:a3:58:d2:8a:
0f:6f:e6:16:78:dd:0c:6a:e9:db:78:79:9e:e4:ef:69:2b:c0:
c7:80:e8:03:47:2a:64:ee:19:9e:b0:90:51:57:5f:49:70:01:
45:e7:4c:6d:22:be:5b:cc:1e:51:e6:c2:11:69:98:88:f1:8b:
2d:8c:3e:16:3a:1d:d5:50:ce:24:fe:52:d4:5b:ab:87:22:8b:
99:0b:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:32:38 2026 by rpki-client