
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a459199-d80a-4790-b99e-d7e340b000a0.roa
File: 6a459199-d80a-4790-b99e-d7e340b000a0.roa (raw, json)
Hash identifier: XUrZI2zwSqR0jqTBoYLtEpqr05mcA+D/U+W65FrkEVQ=
Subject key identifier: F0:D8:D5:5A:24:39:4E:86:B3:22:2B:D7:04:91:FB:27:CF:6E:6C:4A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3761A21A65C3CA5A72A064C27AAC116F253B30EF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a459199-d80a-4790-b99e-d7e340b000a0.roa
Signing time: Tue 06 Oct 2026 00:40:38 +0000
ROA not before: Tue 06 Oct 2026 00:40:38 +0000
ROA not after: Mon 04 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 56.184.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:61:a2:1a:65:c3:ca:5a:72:a0:64:c2:7a:ac:11:6f:25:3b:30:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 00:40:38 2026 GMT
Not After : Jan 4 23:59:59 2027 GMT
Subject: serialNumber=fe431a735075581cf365ec438da47fe304050e9dde0ea8aa547003d73808765a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ae:d8:c4:d6:aa:dc:49:b7:88:83:0d:03:dc:
ad:75:c2:8e:3d:be:f7:f5:a3:2e:d0:c8:ab:f7:d3:
71:92:7a:e5:52:5b:16:cd:7e:b3:96:42:4e:89:4a:
86:c4:82:08:09:fd:96:66:8a:4c:16:67:80:3f:d7:
37:6e:b5:03:b6:6f:73:55:6f:51:88:d7:15:bb:8d:
10:22:4e:ac:84:3e:c8:53:60:cf:32:ec:2e:2b:08:
04:13:84:59:01:cb:b3:f6:e8:d5:6d:10:30:eb:fc:
ca:5c:60:73:30:f3:be:dc:1c:12:28:91:5e:f3:d1:
93:ec:48:78:77:6a:7b:df:79:22:33:24:ac:b9:e9:
16:1a:f5:75:cf:67:0f:4c:1f:f8:08:64:dc:d8:f1:
72:4d:61:c3:ee:16:09:8b:98:cc:8d:55:c0:ec:e1:
9c:fb:aa:57:9b:c3:01:61:85:17:db:76:1c:9e:7d:
f8:d8:e9:a4:db:d1:ca:51:51:d2:db:82:8d:54:a2:
ff:38:3f:10:bb:f6:67:e0:78:4c:b0:c4:5e:0f:80:
1b:48:4e:15:67:18:fc:7a:ca:f9:1c:d7:1c:09:ba:
00:00:bd:66:2d:03:50:ed:81:d0:45:1c:fc:9e:73:
d1:fd:13:7e:3d:73:de:fa:b9:1d:17:1e:d4:0b:8b:
b6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D8:D5:5A:24:39:4E:86:B3:22:2B:D7:04:91:FB:27:CF:6E:6C:4A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a459199-d80a-4790-b99e-d7e340b000a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.184.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:e8:0b:51:e4:a9:a0:9c:a9:a5:d4:26:36:8d:aa:15:e5:c3:
0e:b3:8d:63:66:53:db:b1:f2:e1:14:7b:79:d2:a2:d8:e5:42:
fe:34:37:6f:30:b7:06:5d:c9:ab:95:a7:c5:7f:84:c7:60:31:
4c:df:a6:8c:57:12:fe:99:7a:0e:6d:6c:5e:e9:85:0d:94:51:
ac:e3:ac:2c:b1:a2:62:3d:00:23:18:cf:6c:94:a1:60:48:2e:
b6:28:3e:04:ff:ea:4f:40:1e:1c:ce:f9:38:11:e8:ef:ed:2b:
35:b7:c4:c3:10:78:fe:81:d4:32:16:a0:6e:12:0b:05:ad:fa:
96:38:81:df:a9:38:8d:be:e1:be:40:79:77:e1:47:01:2c:c4:
40:ca:33:e0:38:a4:40:be:f1:34:8e:61:f8:16:7c:83:17:de:
b3:c0:99:16:34:ff:57:fc:b2:6f:5f:ad:8f:8b:c2:54:6d:75:
7f:05:77:37:49:8a:63:ac:63:6a:a8:16:76:d5:76:86:b9:3a:
f1:02:87:27:29:ed:b8:23:58:86:4f:71:4f:95:d2:26:01:3a:
fb:df:14:4f:df:8b:fa:d0:ae:cc:a4:03:35:37:f2:13:aa:fc:
80:a2:ff:af:ec:4a:01:10:10:85:2b:b4:3b:e4:a1:37:5d:57:
f7:ba:27:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 14:19:36 2026 by rpki-client