
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705d8477-e54a-4267-815f-2296f4a9554d.roa
File: 705d8477-e54a-4267-815f-2296f4a9554d.roa (raw, json)
Hash identifier: yA6hUjmdkq5n6isQ3LOGtPTX9a1PKQNBM8N9R4jhwLM=
Subject key identifier: 79:87:01:58:32:07:8E:5F:A8:D6:43:8C:1B:A5:BD:FE:16:11:DD:4A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 49F5AF1333D63B19E01D2D3135E490B7C7CA6B30
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705d8477-e54a-4267-815f-2296f4a9554d.roa
Signing time: Thu 08 Oct 2026 00:11:07 +0000
ROA not before: Thu 08 Oct 2026 00:11:07 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 63.246.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f5:af:13:33:d6:3b:19:e0:1d:2d:31:35:e4:90:b7:c7:ca:6b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 8 00:11:07 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=149af0c343fd69da07fb9ffaf89bf9b07a5891f6b599b0a149c36891009f8f32, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:21:fa:61:40:b1:eb:bd:ef:23:cb:fb:7f:
a1:e5:63:f9:3b:b1:e3:18:a1:40:39:42:97:8b:85:
0e:4a:cc:2c:89:b8:83:2f:d1:5c:bc:96:06:a6:24:
e9:79:db:ec:74:a0:4b:8e:2c:e5:de:07:fe:0f:f2:
cd:57:b6:c1:73:0e:4a:1c:6d:f5:1d:36:da:8b:f9:
20:aa:14:80:72:d0:61:23:22:8d:f1:d6:58:7c:88:
c8:73:ef:1c:c5:c2:fa:b3:de:e5:72:5d:bd:56:df:
35:77:09:66:50:c2:f6:e8:89:f2:56:54:a9:63:70:
f9:d0:f6:de:39:4c:25:21:55:62:80:a8:8e:55:6b:
7f:59:02:4b:a0:d6:13:ea:88:0b:e5:8d:b7:50:79:
cf:07:cb:70:b8:8d:3c:09:ba:d2:09:21:9b:56:a8:
22:bb:90:b9:c7:e6:18:a8:50:44:49:f8:cf:ce:be:
48:51:33:93:a1:4f:6e:d0:03:08:e8:35:66:33:bf:
11:22:c5:09:16:1b:93:42:34:44:24:d2:e0:7d:cc:
09:98:17:70:7f:33:ed:b6:ac:a5:d2:99:2c:c4:f1:
81:3e:02:c3:67:6d:2a:50:e4:c6:b4:58:3a:4a:63:
09:b3:04:d5:c4:ff:4d:c8:e0:ba:71:b2:a8:b1:41:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:87:01:58:32:07:8E:5F:A8:D6:43:8C:1B:A5:BD:FE:16:11:DD:4A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/705d8477-e54a-4267-815f-2296f4a9554d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.246.119.0/24
Signature Algorithm: sha256WithRSAEncryption
31:db:ab:39:87:2d:c1:b3:2b:17:b3:81:a2:12:de:ba:51:ff:
94:ab:25:65:0d:e8:67:08:63:4e:06:90:40:c0:60:bf:5a:11:
ad:86:c3:6d:ca:bf:94:7e:6a:f9:be:bc:ab:54:c3:10:5b:18:
3a:30:2f:9e:96:bb:b5:52:28:ec:e0:4e:7a:e4:8b:b7:e6:85:
e7:dd:5b:5b:d9:c6:fe:43:cd:0a:04:3a:14:c0:1f:1d:dd:cc:
aa:4f:01:60:37:87:20:82:57:f3:6e:79:41:a8:e1:1b:a4:ea:
19:b5:20:6e:d5:dc:d9:6a:cd:f8:2c:11:df:d2:ed:69:b6:f2:
9e:87:ee:3f:d5:01:05:5f:6e:12:53:2f:83:c3:7e:14:9a:67:
e6:8c:cd:22:18:4b:cc:a8:ab:1e:13:e0:a8:78:c8:67:0e:e4:
d0:97:35:5f:86:3f:79:33:1c:cf:70:5f:b8:09:a4:d7:c1:c2:
f0:ee:de:e1:19:c1:c8:c2:d1:4b:2e:fa:31:95:6c:6d:5b:39:
a1:0f:23:24:0a:44:cd:26:35:73:25:d8:1c:66:a4:50:cf:78:
f8:0f:3e:d7:ea:3c:21:a2:56:b3:b9:18:e2:c1:02:e8:18:78:
76:5b:cd:e5:17:5d:fe:83:5f:6d:13:34:b2:f0:2e:c1:11:39:
cf:cb:ec:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:09:45 2026 by rpki-client