
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f83be28-929e-466e-8557-0586ca761224.roa
File: 7f83be28-929e-466e-8557-0586ca761224.roa (raw, json)
Hash identifier: D9nt4hANnSjr+31v/eeac5ooke2nPqEZsVyvsyEkLPA=
Subject key identifier: 8C:AF:43:92:C1:B8:61:91:DF:63:5A:17:78:55:AE:B3:3E:31:B0:D2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 36CDC91B2ACD653AD17F7E2DD8965BE7E17CCBC9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f83be28-929e-466e-8557-0586ca761224.roa
Signing time: Tue 04 Aug 2026 00:40:44 +0000
ROA not before: Tue 04 Aug 2026 00:40:44 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 40.176.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:cd:c9:1b:2a:cd:65:3a:d1:7f:7e:2d:d8:96:5b:e7:e1:7c:cb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 4 00:40:44 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=e2db49bbc67c2f753021b3ca5f3968d8e61fd06287099dfcf75b079a007fe022, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9a:7d:24:a5:96:68:e8:ba:d8:b7:24:37:70:
ec:ad:95:c0:89:e8:bd:37:28:d2:22:5e:55:f0:1a:
a9:95:03:d4:c8:2a:96:7e:90:74:fd:e4:02:ec:34:
ed:b1:20:37:63:9a:01:e4:76:d6:2e:76:bf:bd:5b:
68:a9:23:17:81:a8:96:82:75:6f:eb:d1:32:dc:7f:
71:78:1f:ef:32:e8:e5:7f:3b:58:25:db:07:01:66:
5f:7a:c9:b6:39:00:28:03:f5:9c:c6:e8:9d:8d:a8:
51:29:89:da:14:03:23:e4:0f:ff:a9:74:9a:98:72:
2d:3a:34:f3:82:cb:09:e8:24:ed:2f:81:9a:7b:8a:
80:76:40:b3:19:33:a2:4f:5d:4f:46:16:25:d2:4e:
cb:44:14:31:7d:95:7d:63:60:d2:a0:8e:13:33:ef:
68:cb:9a:95:56:fb:3e:c6:a4:28:c2:e6:f4:df:eb:
3f:44:2d:95:c5:30:fd:20:a8:0d:11:3c:bc:76:79:
35:b5:2a:de:84:81:1c:c1:a3:38:8a:7c:73:ee:fe:
6c:d7:aa:ac:e7:ab:6d:e1:2a:70:d3:14:ee:d9:d3:
52:c4:f9:69:4a:fd:4e:0a:91:1f:a4:a3:d6:87:44:
75:ed:6b:ba:04:1f:a2:85:ce:62:27:96:26:57:3d:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AF:43:92:C1:B8:61:91:DF:63:5A:17:78:55:AE:B3:3E:31:B0:D2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f83be28-929e-466e-8557-0586ca761224.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.176.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c5:c5:bc:98:7f:00:37:b5:35:4f:69:46:4f:ea:28:9b:82:25:
77:3b:e3:52:a2:3c:3a:7c:d5:fc:ca:ec:76:3a:a2:71:3d:ce:
f6:26:cd:19:90:af:ee:2a:d4:58:d7:d3:b3:0f:03:2b:47:e8:
60:c6:d0:fd:21:74:d2:5d:46:8f:00:33:60:40:a3:61:68:ea:
d2:91:8a:12:e4:19:fe:6d:b5:7f:37:1e:0c:92:5e:80:87:eb:
ff:4e:45:0e:d7:82:ef:0f:50:b0:0c:b3:07:5e:6f:50:fc:13:
8b:bc:d3:cd:73:03:8b:a4:9e:b8:13:d8:bb:0f:25:f4:b1:15:
7d:2c:ea:42:3f:06:ec:15:4f:bb:90:ba:d6:21:f8:91:90:70:
2a:69:51:b4:2f:b0:60:04:48:3f:2f:11:83:66:7f:58:99:2b:
1e:73:98:b2:a8:0f:d8:5c:0f:06:c9:94:df:29:0c:ff:4f:a5:
1a:5c:6b:9d:87:b4:59:5e:12:e9:83:29:75:98:50:54:4f:54:
4f:a4:ae:61:b8:fd:ab:38:33:4d:ab:42:30:48:bc:61:bb:1b:
0a:b7:f5:fe:97:a9:ae:92:ab:a0:ec:66:83:35:fc:7c:9c:d4:
7e:40:ce:1c:c2:d5:f5:06:2a:f1:f0:e8:45:43:4a:a3:4a:1c:
f0:c1:aa:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:23:58 2026 by rpki-client