
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67111c8b-4bd5-4381-9d25-28015780cd00.roa
File: 67111c8b-4bd5-4381-9d25-28015780cd00.roa (raw, json)
Hash identifier: UbDVw7BgA5T9xmB2cwfBVWEiqbwDPjl8yFIag9wK8+0=
Subject key identifier: 27:C5:B8:13:96:12:70:DA:3D:1B:6C:4F:E0:B2:6C:8D:43:50:4C:A6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 66392F0FCA8C3111D7947EBEBA3C4E47FF458950
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67111c8b-4bd5-4381-9d25-28015780cd00.roa
Signing time: Fri 07 Aug 2026 00:40:05 +0000
ROA not before: Fri 07 Aug 2026 00:40:05 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 88.108.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:39:2f:0f:ca:8c:31:11:d7:94:7e:be:ba:3c:4e:47:ff:45:89:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 7 00:40:05 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=f83452dfe708d31fa74f66e084f3c6e8daaa32b060104a37762a62d5e05d795c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:e3:78:8e:f2:b0:1b:92:1e:b5:03:99:8f:
3a:e1:01:54:76:d6:36:6c:ab:5b:19:7c:87:0b:b0:
c1:51:15:1a:da:69:df:ea:82:67:5f:f2:43:d3:d6:
a1:ba:c4:d4:a6:0f:14:9f:ad:fb:5d:ee:4b:b5:40:
62:e7:8c:29:69:22:85:48:61:63:76:5d:fc:eb:f8:
b7:2b:ad:a5:e6:a7:c5:66:4d:3f:ba:c9:68:98:55:
d1:97:07:52:84:d9:da:d4:6e:f6:3f:13:cc:5a:58:
09:5d:4c:6d:29:74:04:21:b3:fe:68:3a:62:84:be:
54:61:27:dc:49:35:07:42:3a:3a:6e:ac:51:d5:f8:
25:6a:dc:cc:af:58:6b:ad:5d:4c:5a:3e:87:58:24:
7d:65:bd:df:1f:45:88:75:4d:bb:fd:9c:cc:48:f6:
3e:fe:9d:e9:6e:48:c4:55:14:91:48:0a:c9:3e:a5:
ef:ac:ff:c4:cc:b4:c6:db:7c:a4:0a:9b:f2:f3:35:
0e:4c:c1:04:b3:f4:d7:9c:a6:e4:b6:2a:e3:36:e4:
31:b1:12:0c:fc:04:e9:d3:a1:c4:01:69:1a:d8:e0:
37:72:90:04:6e:b7:fc:00:c5:21:cf:de:8c:6f:bc:
5e:b9:6b:6a:96:cf:77:3a:a9:b7:19:62:2e:e9:f2:
8f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C5:B8:13:96:12:70:DA:3D:1B:6C:4F:E0:B2:6C:8D:43:50:4C:A6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67111c8b-4bd5-4381-9d25-28015780cd00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.108.0.0/14
Signature Algorithm: sha256WithRSAEncryption
0a:3b:40:9b:8c:c6:0d:2c:ee:50:0d:2d:1f:78:df:f7:dc:9b:
30:0d:c8:39:04:8c:a8:0b:fb:74:f4:37:e7:18:ed:95:3d:23:
6a:0e:8e:da:9c:f7:fc:5b:e4:6e:33:b4:c3:fb:23:91:3e:dc:
09:ef:0c:68:8a:93:38:65:7a:21:ad:1f:98:05:b3:5c:ab:96:
3f:9d:af:49:40:8c:a0:4c:68:d7:0c:6e:0d:db:89:37:d4:bb:
61:4e:04:8b:0b:b1:52:fe:2e:ec:68:7c:a4:ee:e3:c6:da:5e:
78:b7:bf:51:e2:7c:64:cc:a5:50:ed:d4:07:02:a8:4f:8a:25:
e7:ba:7e:49:79:cc:af:05:44:b9:6f:7e:7f:9b:b2:9e:74:3f:
d7:38:f3:78:1a:c7:17:64:16:73:ec:97:7e:2b:90:2d:19:15:
d2:31:d0:6c:c7:cd:9a:26:26:91:cc:ca:42:e7:ad:fe:db:ee:
5c:66:80:5c:ee:ab:c6:e5:2b:60:0a:7f:f9:db:77:41:86:ad:
6f:2f:1d:25:b4:9a:5b:1d:de:d1:6f:d3:d2:01:d4:f5:51:e9:
9b:be:74:f0:04:1d:2c:46:cb:67:74:1b:2f:f6:c2:f4:1b:b4:
d6:70:9a:06:7f:72:30:70:fa:82:f1:b0:a4:98:fa:30:1a:17:
64:fd:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:58:14 2026 by rpki-client