
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4ab783-ed8f-407b-a600-2e828e4c1279.roa
File: 6c4ab783-ed8f-407b-a600-2e828e4c1279.roa (raw, json)
Hash identifier: KA8qL/2+0CQ5zUVVUcwCv/5vWwrr72cMUEGa4eLuDps=
Subject key identifier: 5B:45:3B:F2:C2:55:89:09:F1:DF:00:D6:65:57:AD:81:23:03:6B:71
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0D54AFFB5B282D2827EC63B62154AE51B71F594A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4ab783-ed8f-407b-a600-2e828e4c1279.roa
Signing time: Sun 11 Oct 2026 00:40:09 +0000
ROA not before: Sun 11 Oct 2026 00:40:09 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 44.223.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:54:af:fb:5b:28:2d:28:27:ec:63:b6:21:54:ae:51:b7:1f:59:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 00:40:09 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=119385c2574c946ef64816fe46cbae4077ee78c3a032c7207e07150fd32acb7d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:8c:e4:f0:0e:9c:2a:f4:95:70:ac:49:f6:
eb:62:ae:78:55:a1:b9:d1:83:b8:cb:2d:cc:6a:06:
c7:3c:2a:5b:11:fd:23:dc:f5:70:d6:65:12:04:d8:
c3:f7:f5:94:e5:b9:bf:17:00:d2:0e:a9:99:5b:50:
2c:4d:b8:7e:ad:8c:cd:42:a4:0e:f2:83:63:8f:bf:
23:66:ed:a9:51:b4:3f:f4:09:e1:f6:f7:a5:d1:b2:
b9:7a:0b:3a:6b:9c:d5:bd:b9:36:81:05:75:f2:b5:
ea:6d:05:67:b5:6f:41:0a:17:a6:f1:56:40:8b:05:
2c:a8:2d:9b:54:b3:84:8e:9e:44:0b:c7:f9:d4:e3:
98:50:c6:d0:68:4c:8f:30:c9:ce:56:79:e5:03:fb:
3d:fb:84:25:4a:44:92:cd:e7:79:a3:e7:aa:34:d8:
fd:c9:8e:71:75:40:3d:ea:3f:d1:2f:c5:43:a4:26:
f9:b3:9f:c6:27:b2:d6:a4:9f:68:f8:ab:1b:9a:26:
0b:b9:ed:7d:a1:2d:e3:13:e5:af:10:74:2d:70:f9:
cc:e1:3d:7a:39:99:22:9b:0a:1f:75:9c:f6:4b:aa:
85:84:35:91:d7:29:43:37:15:d9:d0:3f:1e:ba:6a:
7f:3e:2c:a2:09:71:0e:56:3d:7e:ab:2e:1e:34:84:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:45:3B:F2:C2:55:89:09:F1:DF:00:D6:65:57:AD:81:23:03:6B:71
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c4ab783-ed8f-407b-a600-2e828e4c1279.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.223.122.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:5e:90:d8:fa:5a:1f:b3:80:ec:fe:1e:55:04:10:96:54:70:
12:ee:c2:1e:25:d1:36:93:20:88:35:83:35:a0:7d:e7:96:5e:
b2:89:40:94:db:4f:d8:fd:2a:24:a1:46:a0:92:2f:d0:ac:5a:
1b:37:b9:6a:06:25:cf:15:28:99:cd:ac:e3:05:2f:46:97:0f:
97:cc:d7:ca:2a:31:f9:76:0c:69:7e:5f:22:fe:6f:bc:75:58:
4e:c3:49:1f:e9:0a:04:35:c3:fd:45:19:74:a1:aa:1d:f3:56:
75:94:ce:43:3b:59:87:b0:64:c8:c5:0f:30:a9:5f:94:a9:b0:
76:86:eb:78:22:5f:af:dc:7b:b0:ff:f5:cc:57:77:3c:b7:a6:
76:50:c3:b9:a3:7e:87:41:d6:c4:d9:ac:2b:31:c3:e8:45:55:
c4:2d:3c:1e:fb:6b:0a:92:3e:d0:d1:17:5f:0f:8a:22:eb:1f:
39:de:1e:3a:15:6e:a2:74:d9:be:53:71:84:ed:6d:f3:1f:a9:
da:d4:21:4c:04:7a:9c:99:5f:57:5e:21:87:1e:db:9f:2f:7d:
db:40:5d:a2:1d:c5:cd:0a:b7:02:d4:47:90:0b:f4:29:7b:35:
7a:1e:67:e0:a9:4f:6d:b2:04:65:b5:e2:3e:9e:4c:69:2e:10:
27:03:99:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:30:20 2026 by rpki-client