
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eaefb9e-609a-4802-b06c-b7139eb4af45.roa
File: 4eaefb9e-609a-4802-b06c-b7139eb4af45.roa (raw, json)
Hash identifier: I2NC3evZRhXn1QPjQSUSMJi6xCS1TlA848S5QpQlIAk=
Subject key identifier: 17:49:2F:BD:71:8B:B5:01:77:A6:2D:15:7A:2C:74:B5:1A:AC:65:DA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2C0B443FD0280FAE8BE5C22AE4235EEE994FBAA9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eaefb9e-609a-4802-b06c-b7139eb4af45.roa
Signing time: Sat 08 Aug 2026 00:31:26 +0000
ROA not before: Sat 08 Aug 2026 00:31:26 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.57.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:0b:44:3f:d0:28:0f:ae:8b:e5:c2:2a:e4:23:5e:ee:99:4f:ba:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 8 00:31:26 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=24afade725cda77dadd0304dd3f81c1bd39a27fa3552b10f115aa09aca24f486, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6f:14:2c:7f:08:57:27:41:8e:6d:f5:52:49:
95:44:5f:f9:8f:03:08:ef:a8:59:22:ee:64:fc:50:
57:d4:08:89:07:28:65:06:4e:3b:eb:ef:9b:9b:46:
2e:18:1c:7b:89:2b:7d:86:6f:96:f0:5e:01:20:cf:
32:87:7b:8e:32:58:6b:87:11:af:b8:44:14:ba:1d:
2c:6b:93:6b:5d:42:b9:42:66:c1:e7:63:fe:fd:21:
5b:a4:30:90:a5:11:4a:3e:bc:78:76:e1:21:25:c6:
5b:aa:af:ac:47:b1:81:d6:96:df:03:d1:a0:95:f5:
22:84:fd:f9:6e:d8:46:10:e0:1d:32:a8:f6:9a:9a:
ad:40:e7:87:4f:14:7f:59:d3:77:3e:7a:6e:2a:58:
40:c5:38:e1:c6:9a:1d:25:13:0c:eb:07:40:d2:25:
30:52:86:c6:73:32:64:c5:27:94:ec:98:d1:fb:bd:
bc:ba:d8:9c:2d:2c:53:70:4f:43:b7:21:0a:7a:a9:
4f:40:21:b5:7e:2a:5a:26:d7:ad:f7:e1:f6:6c:97:
24:21:32:e7:8a:e2:37:02:75:f1:46:86:1f:7e:1f:
06:df:80:bd:05:13:22:5f:51:21:8f:06:3f:a2:47:
02:19:52:b0:4c:bf:63:7d:92:26:c7:fe:22:a3:c5:
88:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:49:2F:BD:71:8B:B5:01:77:A6:2D:15:7A:2C:74:B5:1A:AC:65:DA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4eaefb9e-609a-4802-b06c-b7139eb4af45.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.57.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:03:0d:28:84:9c:01:51:1c:b2:8b:1a:c3:be:b6:8b:26:66:
17:da:8a:b5:44:48:13:da:14:8c:c4:50:df:9b:dd:bf:63:65:
ac:e4:5c:16:18:f2:a6:1d:bc:a2:cb:37:c4:ef:7e:87:b5:bc:
b0:0e:52:52:70:dc:09:5f:97:92:25:81:e7:46:ba:72:a1:7c:
a8:a2:8c:a7:ba:be:9a:f2:c7:55:d1:6a:fd:df:6d:04:44:e8:
00:ba:0f:8b:0b:0b:3c:65:8a:46:ec:38:ba:4b:dc:59:58:38:
d7:94:8f:62:4a:e2:f5:39:66:30:05:c0:31:85:56:d1:c6:36:
a1:19:e7:b2:35:ce:21:7b:4d:bd:ef:d9:03:54:11:4b:9a:6d:
68:27:01:9f:64:4a:78:da:ff:f1:af:d3:78:48:e0:30:de:95:
a3:08:d4:d1:a3:84:f3:f6:6a:cb:57:fa:85:4a:81:25:72:f5:
6f:74:0d:1d:94:b9:a0:5e:c4:e3:bd:b6:28:a5:d4:2e:97:5d:
90:71:6b:a4:6b:cb:01:0d:0e:36:66:69:d7:fa:af:89:b4:91:
ae:6d:5d:03:84:ce:b3:d7:33:c0:6e:24:b6:35:16:5d:1d:ad:
66:de:5d:09:15:bd:66:11:7b:02:52:8c:c6:6f:4e:15:82:45:
7a:81:10:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:14:48 2026 by rpki-client