
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/553e5eb1-a715-4072-ac47-85c8289d034e.roa
File: 553e5eb1-a715-4072-ac47-85c8289d034e.roa (raw, json)
Hash identifier: YRR1b0R7ScStzpuL1AKdCvq4/KAW0fewKx5QI8OE8g8=
Subject key identifier: B1:63:A2:8E:B7:35:92:34:1E:DB:4F:DA:29:B2:A2:1B:B6:37:0B:08
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 196AAFCA6DC85009D3116BD5BF8DA5EE35D8EA8E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/553e5eb1-a715-4072-ac47-85c8289d034e.roa
Signing time: Sat 24 Oct 2026 00:40:06 +0000
ROA not before: Sat 24 Oct 2026 00:40:06 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 75.101.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:6a:af:ca:6d:c8:50:09:d3:11:6b:d5:bf:8d:a5:ee:35:d8:ea:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 24 00:40:06 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=acd95412fbe7a1a1895c62825dd617b7f26119a6ad6cdfb3bafe0f9b23e5934d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:a0:60:04:6f:a7:e6:46:41:a2:1b:6d:5e:
bc:9b:ad:c9:40:82:6b:98:30:82:6a:4e:c9:1d:d6:
ef:d0:1f:4a:24:72:91:0d:44:ec:af:34:92:9a:a8:
ec:da:66:f3:43:1d:f7:9d:8d:40:8e:a6:53:fa:20:
7f:55:68:49:82:cb:f6:51:b5:22:1c:85:25:98:1e:
9d:51:c9:9e:8f:3c:0b:92:8a:4d:a6:89:65:28:db:
09:3b:25:b0:55:b5:18:a0:d4:ca:5e:a7:f8:06:2e:
b3:86:72:59:61:d4:f1:cc:32:75:bd:91:2e:8d:b2:
e7:27:1c:a9:77:53:c6:5f:71:71:13:e0:15:ec:03:
75:95:b4:ca:97:e6:8c:25:9c:09:34:83:16:17:85:
39:44:57:bb:88:df:5e:f6:38:d3:f3:20:fe:4f:fa:
15:82:5e:c1:af:62:8c:9e:ac:11:3d:7d:4f:bb:0c:
28:bd:95:f0:d3:8d:d0:5d:94:0a:0e:9c:ba:c1:60:
28:0c:bd:1f:82:18:8f:55:a2:80:89:ef:be:78:a3:
d4:fc:bf:1c:21:25:da:76:f4:c8:2d:2e:1c:1b:e2:
c0:58:12:4a:89:19:8b:68:bf:c4:5f:9a:58:92:7f:
a3:d7:e1:3c:c8:e6:d0:ba:18:5e:24:ed:5f:70:d6:
3f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:A2:8E:B7:35:92:34:1E:DB:4F:DA:29:B2:A2:1B:B6:37:0B:08
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/553e5eb1-a715-4072-ac47-85c8289d034e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.101.192.0/18
Signature Algorithm: sha256WithRSAEncryption
21:32:9b:76:3b:77:26:2a:21:31:0b:a7:80:ad:8a:53:b2:04:
80:d8:9f:f0:a7:3e:bf:e1:65:8c:03:7c:78:ec:3b:68:f8:ef:
54:bf:c2:8c:6a:3e:12:83:09:a6:86:f5:56:a9:69:f2:6b:0e:
4e:8f:e4:f6:dd:dd:ab:2d:3e:ed:55:b2:3c:c2:4f:48:3b:45:
6a:cc:d4:80:e5:d3:c8:10:55:ef:33:fa:94:42:e9:56:2f:d1:
4a:fd:e0:69:31:d1:ec:16:9f:8e:3e:c4:80:87:08:ee:b8:70:
24:d0:99:1b:82:d5:37:12:9c:f0:25:8c:a1:5c:79:2c:aa:d3:
e5:23:18:13:62:e2:87:7a:04:2d:65:1a:5e:31:fe:db:92:14:
55:5d:8f:2c:80:f7:c8:a7:0f:e8:96:70:a4:e9:69:52:9a:21:
ae:0f:85:33:2d:c2:8b:ea:71:d3:4a:b8:d0:30:88:64:16:ab:
e9:a5:f5:75:2c:2b:60:89:a5:15:6f:7c:aa:e3:c1:ff:5a:63:
a5:1e:19:0c:cf:5e:c1:cf:0f:39:03:44:d8:df:25:b0:95:29:
7c:d9:d7:ff:81:cf:d9:6c:dc:ff:fb:64:00:56:bb:23:82:0b:
cb:e3:93:8b:ed:a0:7a:a6:2c:de:c8:17:13:29:9d:06:69:1e:
58:33:0b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:30:53 2026 by rpki-client