
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bb5d3f8-13ac-433b-bcf8-dd440d7dacaa.roa
File: 8bb5d3f8-13ac-433b-bcf8-dd440d7dacaa.roa (raw, json)
Hash identifier: cZ+NBcvF30eRvxVoGTgYOJExvo2gcyBBtg9vDUJawmg=
Subject key identifier: A4:49:DA:64:1E:82:C4:C1:D4:D9:EA:CE:26:60:1D:E8:D9:9B:59:CC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6902D91B3A4D2D1DE10CF081859794843AE1A026
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bb5d3f8-13ac-433b-bcf8-dd440d7dacaa.roa
Signing time: Thu 08 Oct 2026 00:05:55 +0000
ROA not before: Thu 08 Oct 2026 00:05:55 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 209.178.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:02:d9:1b:3a:4d:2d:1d:e1:0c:f0:81:85:97:94:84:3a:e1:a0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 8 00:05:55 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=33588a5e6054085fab73c7920868c3aed846e364c502d7c40f09b3a2b82e316e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:13:aa:4c:87:07:21:b3:d8:cf:63:ed:e9:ec:
ab:a8:3a:74:cf:02:76:31:f2:17:86:84:bf:4e:5a:
93:a0:f3:f0:70:be:2c:b7:b9:ae:f3:4a:9a:94:b2:
a1:75:66:c2:61:95:6a:3c:97:40:0d:1a:fa:83:fd:
c0:a3:e2:34:ed:11:be:1c:cc:99:5e:37:d8:85:52:
9c:58:47:f0:af:a1:6c:5c:95:ae:49:58:2f:a2:08:
a8:d6:a0:ac:1a:9b:1f:63:bb:b4:19:c2:d8:74:86:
1a:95:56:74:c8:ad:2c:9e:84:71:e4:e3:af:27:df:
df:2e:2a:46:2a:93:36:71:5f:23:d0:7a:e4:9a:be:
57:09:27:02:ca:49:ca:20:c3:4d:50:10:22:d3:7f:
0f:f7:08:99:e6:8c:d5:cd:5a:cc:30:1c:c1:29:e9:
21:e2:94:af:5a:87:af:0e:08:8a:73:53:40:d4:d0:
35:b2:c7:0d:1f:51:76:f8:10:61:78:9a:63:d2:ed:
7e:a1:dd:8e:93:22:73:78:f8:64:27:db:f7:7a:47:
9a:3b:55:3e:3e:af:2d:97:b0:44:2d:7c:1a:77:58:
08:e9:cf:f3:09:83:70:8f:cb:b3:d9:30:42:4f:fb:
a9:5b:22:f3:d5:40:89:ff:dd:59:95:69:06:b1:15:
ef:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:49:DA:64:1E:82:C4:C1:D4:D9:EA:CE:26:60:1D:E8:D9:9B:59:CC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8bb5d3f8-13ac-433b-bcf8-dd440d7dacaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.178.0.0/17
Signature Algorithm: sha256WithRSAEncryption
79:ab:1a:2c:8d:fe:48:44:2c:c9:f4:5e:ef:86:d5:0b:1f:d7:
25:35:bc:5c:b1:da:a3:bd:e6:e6:4a:69:76:ef:7a:d0:c6:16:
76:c7:28:64:4b:3e:6b:86:16:33:ce:fb:d6:d8:8f:bb:2f:41:
d6:30:9a:37:f1:64:e4:81:88:46:7e:70:c9:5d:57:9f:1a:ae:
97:79:59:41:21:4f:be:b0:de:09:68:da:d8:5b:3d:45:84:db:
8a:6a:3a:6e:30:ee:9c:e0:f3:6b:63:38:c3:8f:26:52:90:2b:
a8:4b:68:1e:97:5c:b7:a7:ce:f1:b6:19:88:53:00:ad:8b:f3:
53:8c:9c:7f:fe:3b:64:87:e0:c8:87:f4:d0:77:30:1a:8d:2a:
ad:f3:49:ab:f8:77:63:08:1d:92:ae:68:9b:76:b8:20:c2:a0:
ac:3f:05:e6:76:37:e5:36:f8:45:85:83:c8:d0:fc:7f:e9:40:
aa:c2:8f:ee:f2:b6:f2:cf:e4:d6:5a:84:00:8e:7a:d2:2b:9d:
61:44:66:df:ee:1c:be:fc:0f:f7:8f:aa:ea:33:67:28:a6:a6:
0b:b6:26:a0:bc:e7:5b:1c:75:d4:f8:4d:36:e7:74:a1:b6:1a:
a2:a8:e1:a1:2f:e1:ef:28:0b:92:80:40:5e:da:fb:db:b3:00:
84:16:13:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 21:12:17 2026 by rpki-client