
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bc62270-49ca-441b-ba8d-65b483733244.roa
File: 4bc62270-49ca-441b-ba8d-65b483733244.roa (raw, json)
Hash identifier: uEdh4rorWniK/GTn/HGmmAPtcFGF32IqWXMDT/YKL0E=
Subject key identifier: CF:14:F0:C9:24:26:0C:C8:52:F1:71:AC:36:5C:AA:69:C2:58:33:D9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4F6AD0CCAB4AF2D853C6EC99B03583455FDC8E5F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bc62270-49ca-441b-ba8d-65b483733244.roa
Signing time: Fri 16 Oct 2026 00:10:13 +0000
ROA not before: Fri 16 Oct 2026 00:10:13 +0000
ROA not after: Thu 14 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 216.230.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:6a:d0:cc:ab:4a:f2:d8:53:c6:ec:99:b0:35:83:45:5f:dc:8e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 16 00:10:13 2026 GMT
Not After : Jan 14 23:59:59 2027 GMT
Subject: serialNumber=936253ebedb9b27b647f266bb61c863e5a4213cdf726307bfad107de037ac85f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5e:53:82:a9:2e:52:21:cb:71:51:04:7c:b8:
5d:b6:42:d2:ad:87:e6:74:61:43:c1:a5:18:1b:c0:
96:ee:8d:74:6e:aa:e0:33:49:3b:d6:b1:f5:1b:81:
bf:98:b6:b2:6b:3d:b9:7b:e0:f7:14:0a:54:fc:47:
c5:b8:d6:0b:d5:67:3a:f7:f1:0d:7c:aa:37:7d:06:
fa:66:39:ca:46:6e:67:f2:22:c6:c2:e7:3f:30:f6:
e5:bb:4b:13:c8:7f:ae:09:96:60:5f:85:6f:18:6b:
99:4f:75:fd:98:5b:52:08:ca:62:dc:76:9e:6c:80:
22:9f:b3:df:43:e2:07:b0:e9:b2:f5:11:bb:e5:fa:
d5:b0:95:a5:e5:27:5e:7f:80:b7:70:11:7e:81:3e:
b3:0a:2c:4f:b7:97:62:25:5b:dd:f2:d2:b6:ab:4b:
ce:e6:25:7c:a2:e3:25:35:36:5b:6c:dc:ba:ce:78:
a5:a4:f6:79:2a:91:94:12:6d:48:11:bd:21:91:dc:
71:08:b4:93:6f:08:28:9f:9e:05:64:cf:42:71:85:
fa:8f:84:c9:8f:cb:1e:34:83:51:51:c9:ee:f2:ff:
15:70:f3:3f:3e:3d:1b:e8:8b:8b:d5:cb:00:76:7d:
62:ed:25:2b:44:08:02:f2:50:61:a5:e4:e3:0d:3c:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:14:F0:C9:24:26:0C:C8:52:F1:71:AC:36:5C:AA:69:C2:58:33:D9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4bc62270-49ca-441b-ba8d-65b483733244.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.230.65.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:55:cf:82:06:ec:b5:6d:ad:bf:26:4b:8f:ed:1c:b6:aa:c0:
ef:ec:13:11:7c:16:3a:06:67:82:a9:17:43:77:35:0a:4d:6a:
a4:cb:9a:84:e6:93:b4:7e:e5:49:56:4e:79:8c:04:39:c6:7f:
1a:79:96:e5:8e:db:d8:0a:bb:64:78:73:49:bd:2b:83:e8:8b:
d9:7a:2c:60:f0:25:ce:a0:b4:a8:59:96:2f:23:f5:2d:fb:63:
18:a0:4e:fd:ad:c2:06:fd:6d:39:e9:bf:b7:57:5b:ac:48:b4:
4c:06:c0:05:27:f9:46:6f:f9:63:0e:11:06:46:bc:f4:66:d5:
79:6b:37:97:7b:da:41:a7:64:b9:8f:f1:5e:8e:ce:1f:4f:ad:
15:90:b4:55:20:f8:ac:d3:59:36:ee:81:d0:86:78:8e:95:d5:
dd:17:14:0a:d9:a7:51:27:9d:08:b4:58:f1:73:71:b1:df:31:
a4:1c:f3:f1:49:6c:3f:51:b7:a0:b0:44:65:23:fe:52:ed:3c:
df:0f:b0:a3:d5:ef:7c:cb:fc:ef:c6:ef:fc:3b:8c:7d:ea:98:
74:c3:b0:79:42:c0:1f:23:ba:4c:d3:bb:3c:aa:f2:30:a6:6f:
e9:58:b1:15:ad:03:57:fc:53:4b:91:20:63:53:9f:f9:22:ad:
d1:ab:2d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:29:25 2026 by rpki-client