
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79e1713f-9a30-42f6-a92e-83dfb913f19b.roa
File: 79e1713f-9a30-42f6-a92e-83dfb913f19b.roa (raw, json)
Hash identifier: ptIe/EkhuBuaIc+OUwdXKtTPxb3LFMIUYMbRAn4QJ3Y=
Subject key identifier: 48:36:C7:9B:8F:7B:9D:75:8E:CB:8F:54:46:2D:05:42:BF:18:DB:2A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4565FCF5434AF3D771D391581DF7ECADCF212224
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79e1713f-9a30-42f6-a92e-83dfb913f19b.roa
Signing time: Sun 11 Oct 2026 01:10:55 +0000
ROA not before: Sun 11 Oct 2026 01:10:55 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 108.96.0.0/11 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:65:fc:f5:43:4a:f3:d7:71:d3:91:58:1d:f7:ec:ad:cf:21:22:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 01:10:55 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=b8e5393ce51a4207165e1296b104da062fc5aef15ef030f21c7b1bfd0bba2309, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:09:e6:66:44:15:e5:89:78:98:92:bd:e2:
e3:27:5f:29:9e:f9:b9:30:5a:5f:d8:b6:8c:74:12:
29:d7:87:54:6d:6c:2f:de:af:39:b1:8c:fa:10:6d:
af:4d:49:2e:9f:b8:13:05:9b:3a:01:25:c2:7d:87:
81:4c:f8:ff:b3:bd:db:68:72:86:9b:2f:8c:c0:e8:
01:3b:e5:cf:9b:e0:bc:29:58:f5:f2:ed:0e:03:db:
e9:a8:39:bc:67:74:13:12:de:7d:27:c4:a3:96:2b:
12:92:ac:64:d3:1c:36:67:6c:48:01:b1:ab:b7:d8:
1f:88:39:38:1d:4c:89:29:c3:bd:ab:7a:ee:ac:80:
68:02:dc:1b:92:fa:3f:02:c5:85:29:89:d6:c0:40:
47:14:6e:c5:e2:20:bd:3b:cb:2c:8a:8a:9d:5c:dd:
b0:b0:12:d6:aa:17:e8:8a:25:a3:83:50:20:c8:ac:
81:b4:4b:a2:40:1e:b4:99:62:ae:a3:81:c0:da:2e:
7e:fe:3c:af:77:5d:b6:95:9e:a1:14:5e:b5:e3:0e:
11:52:de:ff:3d:6a:f0:52:3f:49:30:64:02:46:1e:
02:8a:8c:72:ed:15:23:79:91:7a:8f:da:ae:2d:74:
1c:f3:34:f6:36:92:23:19:9a:13:99:66:7e:15:82:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:36:C7:9B:8F:7B:9D:75:8E:CB:8F:54:46:2D:05:42:BF:18:DB:2A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/79e1713f-9a30-42f6-a92e-83dfb913f19b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
108.96.0.0/11
Signature Algorithm: sha256WithRSAEncryption
92:4d:9c:c3:62:dd:43:1c:a8:fb:4d:b8:29:c9:00:6a:42:1f:
7c:e5:c9:48:a8:92:1e:86:a6:73:75:cd:7e:77:4d:8c:f1:c4:
80:82:8a:1e:df:86:af:31:1a:04:44:7f:56:d1:57:5e:48:82:
44:4a:37:f6:c5:3f:d1:ff:7e:e5:75:a8:b9:23:c3:b9:79:ac:
3e:56:73:c1:c0:a1:2a:ff:8a:c1:c4:31:98:52:c5:4a:e9:57:
44:8a:01:62:0a:76:d3:3f:51:f2:a2:7a:12:db:b1:ea:41:34:
7c:1b:3f:29:56:41:e0:8c:d8:48:bc:c5:88:e3:0a:f4:9c:0c:
22:c7:db:d0:c8:cd:ef:b1:80:81:6b:ee:04:ae:23:85:d3:aa:
bd:0a:7f:fd:ec:05:e9:1f:3f:ee:86:48:62:a8:1c:e7:5d:ea:
ad:bd:b4:9c:5a:69:aa:66:43:2d:66:59:c9:59:ab:f5:6e:db:
fe:9c:b8:ad:9b:b9:65:a6:a4:1a:d8:19:18:65:8f:43:88:b6:
28:a1:8d:37:1b:ce:78:4b:90:02:4a:02:e4:80:7f:57:cc:41:
f0:96:b8:e1:a7:87:0f:79:47:51:7f:6a:52:1c:df:ef:ed:75:
57:15:ed:47:64:ee:46:ed:3b:e7:3e:17:3a:2a:36:10:5f:87:
c8:4c:ca:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:48:32 2026 by rpki-client