
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa
File: 85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa (raw, json)
Hash identifier: UFEQ3SljEOJyPAiC6X6edrD7pIS5TbkJj+6v1BNB818=
Subject key identifier: 86:4C:B9:C3:55:51:1F:1F:12:2B:8A:34:6E:C6:BD:69:2C:6E:CD:7A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 632DB4F25AB738917FABB77D6C5F01BB4223F8E5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa
Signing time: Mon 03 Aug 2026 01:30:18 +0000
ROA not before: Mon 03 Aug 2026 01:30:18 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 110.238.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:2d:b4:f2:5a:b7:38:91:7f:ab:b7:7d:6c:5f:01:bb:42:23:f8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 01:30:18 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=daddf518db7466d732626e7d2d506655930a36e8eed39b8a6f23d7d54469e9ae, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:b9:01:df:4a:80:38:87:d2:b7:59:fa:7c:
d5:82:74:34:8a:72:b2:ae:ca:fa:ac:a3:65:84:57:
cb:4b:e0:03:10:25:85:8f:bc:f5:c1:87:8d:89:a5:
14:d3:35:16:b1:7d:e1:59:d1:06:46:52:69:10:a5:
4e:a7:ed:7e:8b:09:e7:fe:65:4e:21:e9:31:15:1f:
3a:97:04:4b:b6:35:84:0f:a4:c3:b5:34:bb:30:13:
28:e0:0c:83:f8:92:de:ea:bb:6f:48:d7:1d:a0:4d:
b9:20:91:6d:e3:ab:c0:fd:f5:83:2f:c4:f7:a5:57:
58:7b:09:2b:4c:49:06:ce:b3:94:53:5f:03:91:88:
d7:6c:69:cb:1e:d2:df:ee:00:72:b6:ff:08:59:d9:
d0:5b:c7:6e:fd:9d:d3:bf:0d:3d:7e:0c:c0:8b:05:
f6:11:7c:e0:91:c8:f0:18:ba:e4:62:85:d2:d9:d6:
8d:cd:b6:eb:c7:97:1f:a2:1c:08:79:7d:27:1b:70:
99:e9:fd:9b:2b:01:26:ee:c6:af:7a:44:02:ea:06:
70:8e:1d:0b:58:8b:71:9b:60:21:a5:67:d0:8e:22:
12:c4:98:f8:a0:a4:08:a9:99:a4:b8:0c:ed:8b:c4:
cf:59:2b:dd:3f:6c:d8:d9:42:0d:7f:41:18:55:17:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4C:B9:C3:55:51:1F:1F:12:2B:8A:34:6E:C6:BD:69:2C:6E:CD:7A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85aa348e-7e47-48f3-856c-189cf9d2ab7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.238.8.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:0f:7b:f4:0a:d2:ae:5b:9e:5e:22:28:1e:ff:b5:42:7c:b8:
c6:7c:c6:3a:a3:c5:43:d3:79:e5:42:9c:2a:23:63:8c:1d:85:
9f:e9:8b:3e:94:94:4c:d4:2c:da:35:d1:3d:0b:7e:e3:ed:9e:
10:aa:c9:57:a8:5b:82:67:2c:3f:51:7a:13:e1:5a:9b:26:58:
41:e8:6d:21:25:6e:fe:73:a5:b6:80:38:d1:f6:10:8e:92:58:
11:5d:05:39:cd:3d:01:46:a6:23:a6:fc:6b:33:ec:8f:a2:15:
89:e7:c0:e2:e9:d6:a0:56:86:72:76:8d:c4:1d:90:d8:bf:10:
55:1a:ab:ea:c7:a0:f8:00:cd:84:7d:a1:e9:3f:f3:f3:01:a4:
9a:ec:3a:bd:fa:44:52:c5:0c:88:e8:06:72:1e:29:a0:c8:22:
8e:8b:d6:54:2d:37:dd:5a:af:fa:6d:0d:01:6b:b5:bc:d0:0d:
2d:af:c5:e9:67:d3:a3:24:d5:c1:e3:dc:87:94:43:e1:c9:5b:
55:83:df:ae:04:d9:11:96:1a:13:7a:c3:ac:f5:ea:18:7f:b1:
14:6c:f6:ef:62:2a:dc:2b:2b:fc:82:22:c1:01:78:48:17:be:
d4:11:01:c5:50:6f:62:1a:9b:f2:d0:13:74:2b:17:93:90:13:
2a:64:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:37:39 2026 by rpki-client