
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c2722f1-5ef3-4fd1-b83e-28ff0d29ae3f.roa
File: 5c2722f1-5ef3-4fd1-b83e-28ff0d29ae3f.roa (raw, json)
Hash identifier: l2BgUKNHbgX7SaYms8ybJCBmtvKXvMJ7sA9ncDvk4Gc=
Subject key identifier: AD:36:1A:D1:06:95:28:B4:1F:65:CB:A1:31:52:9C:F2:4F:78:B9:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6AF88A20610F35099BE09126ACC0DD10F22C5A6F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c2722f1-5ef3-4fd1-b83e-28ff0d29ae3f.roa
Signing time: Mon 05 Oct 2026 00:20:44 +0000
ROA not before: Mon 05 Oct 2026 00:20:44 +0000
ROA not after: Sun 03 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 16.148.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f8:8a:20:61:0f:35:09:9b:e0:91:26:ac:c0:dd:10:f2:2c:5a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 5 00:20:44 2026 GMT
Not After : Jan 3 23:59:59 2027 GMT
Subject: serialNumber=74bccf29a14e7a8eab73dee0a9a32d538993ffe4e720933cc80fb405648faa9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bc:4f:d0:82:0b:19:7d:74:b4:6a:12:a5:7d:
1f:c9:f1:8d:27:8c:20:27:76:dd:2b:ee:d9:1e:d9:
b9:6a:02:43:68:d0:e8:6c:28:b7:eb:5c:51:10:42:
5c:52:6f:b7:e2:3b:ae:9f:69:5b:28:1a:45:69:2e:
c4:f0:c4:b4:87:b9:a4:fa:b3:86:e0:cb:d3:7b:bd:
e7:85:b2:31:55:5a:d4:fe:d6:25:e6:69:ed:4a:42:
8f:55:3b:6b:fc:f4:51:45:4c:17:58:af:e1:59:63:
ca:17:a6:27:59:14:57:2e:50:d2:8c:38:ea:50:08:
e0:9e:22:8a:44:8b:c3:8c:16:a2:5f:5e:a6:8d:d5:
c4:6b:4b:4e:8c:4b:99:ad:e5:27:c0:b6:4f:0d:50:
09:92:1f:c7:91:e0:9c:dd:4e:17:3a:29:5d:99:17:
b2:8a:56:80:c1:6d:eb:28:bd:d9:32:2e:06:4b:b0:
e6:80:2d:cf:7c:2b:0b:19:19:d5:a5:56:f6:9f:65:
03:b5:70:8c:15:04:b0:c6:40:20:0e:46:db:aa:0a:
c0:af:8d:3f:fd:72:43:6d:0d:b8:7b:2f:dd:b5:d0:
be:4d:71:52:9f:7c:75:39:83:c9:f4:2d:42:b0:6d:
b1:42:56:b1:65:8a:b0:e5:01:0b:d4:87:2b:44:20:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:36:1A:D1:06:95:28:B4:1F:65:CB:A1:31:52:9C:F2:4F:78:B9:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5c2722f1-5ef3-4fd1-b83e-28ff0d29ae3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.148.0.0/16
Signature Algorithm: sha256WithRSAEncryption
61:1e:c0:14:c4:69:99:20:84:b5:ed:e6:69:f7:56:46:f4:6c:
59:9a:f2:1c:7a:c7:aa:cf:f2:af:f1:a3:1a:66:a7:c9:d9:6c:
27:8b:8b:5f:32:12:24:3a:8b:44:37:92:2c:06:6d:bb:77:e2:
2c:15:74:c2:43:d7:1b:60:67:ce:98:4a:67:ff:6a:e9:8e:fc:
99:3c:07:57:47:de:ba:f5:28:e0:40:46:d0:ea:d9:07:49:8e:
22:e8:c6:ad:33:c9:c9:66:a6:10:14:62:68:c2:07:7f:c2:4c:
0e:c2:67:6c:a8:43:9b:e6:9e:ea:82:c8:d8:72:6e:8d:03:5a:
f6:59:15:97:73:29:29:29:11:c1:5b:10:20:a6:8a:ed:4d:a7:
c6:05:e7:d6:f5:a8:c9:34:c3:4a:a9:c4:38:e2:9b:42:7f:e7:
52:c8:5d:54:a4:af:0d:2d:39:3f:89:ca:df:5a:c3:4f:92:6a:
98:f7:dd:ae:ed:47:d7:2b:5c:25:a3:dc:28:b5:98:60:ad:79:
f9:b9:a1:d6:ad:05:08:26:d7:7b:62:12:87:88:a0:06:97:b6:
18:3c:e1:15:c0:d3:39:e5:be:cd:81:33:89:eb:74:bc:79:52:
be:cc:72:de:94:3d:b1:8e:a7:0a:52:dd:35:31:d2:0e:54:69:
d0:25:f3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:01:20 2026 by rpki-client