
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87f1ee11-665b-4a13-9a9b-e7c35fe88493.roa
File: 87f1ee11-665b-4a13-9a9b-e7c35fe88493.roa (raw, json)
Hash identifier: 9UYfV7ZgFfFIF4hx16q/LXf/WKnHM0/wCN44v2VSyQA=
Subject key identifier: 4D:6D:6E:7C:80:4E:D9:07:30:CB:44:BC:E6:FF:56:F0:4F:F6:0A:83
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 64A5438A63FE0C89AD293E35013E70E706C173E9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87f1ee11-665b-4a13-9a9b-e7c35fe88493.roa
Signing time: Fri 07 Aug 2026 00:10:10 +0000
ROA not before: Fri 07 Aug 2026 00:10:10 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 136.18.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:a5:43:8a:63:fe:0c:89:ad:29:3e:35:01:3e:70:e7:06:c1:73:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 7 00:10:10 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=266b2569cd3fa604cde17caf2e5d8ff77a6cb81cffe4d4bb0bfd5d81291b8d28, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0b:b6:e2:fd:fd:cb:c1:93:e7:c3:f3:91:dc:
d0:d4:8d:75:51:dc:9b:4b:75:68:41:1e:4a:dd:89:
2b:bc:b6:4e:fb:a5:35:2f:47:ce:ba:b0:6c:19:ec:
db:f1:d9:28:ff:77:5d:be:8a:8c:7e:b4:83:b4:c3:
d5:66:11:1f:80:00:87:02:70:b5:fb:46:b6:5c:ce:
a4:e5:2e:fe:9e:87:88:d8:7f:a8:51:a7:49:f6:74:
27:a1:75:52:e0:88:35:ff:42:2d:09:39:46:1a:d6:
65:fb:14:3f:97:7e:d5:d0:4e:61:4a:1b:10:8e:a3:
d7:3a:b9:58:48:3d:e3:27:4c:b2:f3:f7:dc:ce:72:
70:a6:f4:35:da:36:f6:df:3a:99:aa:f6:36:5d:a4:
b0:8c:5c:12:cf:cf:30:08:5f:2c:2e:74:f3:c6:6a:
a2:2d:7a:8f:d3:2d:46:ea:45:4c:ed:5e:65:0d:b0:
07:09:16:36:50:91:12:d2:05:d2:f2:82:71:76:94:
48:ef:a0:bc:61:5e:30:d6:0e:0e:31:ea:9c:c3:d5:
66:71:8b:82:80:ed:ae:79:2d:ce:84:89:a1:c2:cc:
fd:e6:f1:96:49:fe:81:71:4f:cd:60:ea:bd:2e:f2:
21:96:4d:e5:b7:5e:cd:ba:60:9f:79:ab:45:0f:22:
7f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6D:6E:7C:80:4E:D9:07:30:CB:44:BC:E6:FF:56:F0:4F:F6:0A:83
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/87f1ee11-665b-4a13-9a9b-e7c35fe88493.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.160.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:88:a1:22:9f:88:3b:42:94:09:c6:6e:94:ea:8a:68:bb:bb:
07:8b:2b:e0:fe:87:25:a5:90:bc:20:ab:99:ca:66:b2:e4:2c:
89:01:12:da:35:c0:29:bb:a2:b6:1c:5d:76:3e:ba:5e:86:c3:
be:e9:4c:0d:c3:87:c7:e6:2d:d3:27:9d:3e:95:c4:99:55:7c:
80:0a:8c:95:aa:fb:de:61:37:3a:d8:5e:4b:8b:dd:4a:6e:2b:
33:2f:a2:40:ce:e9:7b:3b:30:8c:9d:1f:c3:5e:f2:f9:3d:25:
02:0e:3e:fe:45:3d:58:97:93:73:f8:e2:d9:5d:a5:e0:c1:ba:
52:cc:bf:25:ae:d2:f3:87:ad:bc:f2:c9:8a:35:5d:c6:4a:d8:
ee:d6:d3:ff:bc:9d:da:36:ce:db:c1:b2:7c:35:db:f5:fb:98:
26:f7:96:3c:24:2e:e0:98:29:9e:50:8d:91:6a:c9:68:08:60:
81:f8:b4:68:d1:95:f2:ad:e7:3b:39:c3:7d:ad:7f:59:65:dd:
6d:bc:22:be:82:c8:09:93:dd:1d:50:2a:54:25:f6:ea:b6:81:
e8:c3:e2:1a:f7:d6:d9:1e:ca:67:56:52:cd:ba:bf:91:a0:fe:
5f:7b:52:c7:68:72:11:38:25:f2:66:19:d3:c5:9b:5c:09:23:
0c:61:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:15:26 2026 by rpki-client