
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92f15bca-51be-4291-9efa-b2392d67d840.roa
File: 92f15bca-51be-4291-9efa-b2392d67d840.roa (raw, json)
Hash identifier: A5M1IRSeW6ZZZImgel67t2wWqqzrlKFDsLVkIQ0TejA=
Subject key identifier: 83:DA:3A:89:BB:1E:19:12:C8:AC:38:7E:47:92:4C:22:C7:EA:F8:62
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7D26F5D40EF65F15A253058DEE2EFCF392320A8F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92f15bca-51be-4291-9efa-b2392d67d840.roa
Signing time: Thu 22 Oct 2026 02:30:09 +0000
ROA not before: Thu 22 Oct 2026 02:30:09 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 149.128.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:26:f5:d4:0e:f6:5f:15:a2:53:05:8d:ee:2e:fc:f3:92:32:0a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 02:30:09 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=a4dfaea6bcdad745c1d040318f985bc82c2614f439a50ce0ec51b38210cafefc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:31:10:cb:50:9a:f7:7b:44:14:b3:47:30:b2:
26:de:f5:56:60:b2:88:dc:12:c7:28:fc:c7:4d:65:
bc:11:f5:a8:3e:c9:4f:f8:c8:0b:d0:6f:d0:ca:74:
8c:a4:42:fa:a5:62:8f:6d:ad:56:10:09:45:6c:7e:
69:df:fa:c5:a4:00:00:a9:a9:28:1a:2e:1f:c7:e1:
e2:ad:9e:e7:5f:14:92:db:a7:54:74:d9:71:f2:ae:
de:e6:1b:5d:fa:9a:6d:cd:0f:b5:a7:7f:8b:60:46:
48:9a:fe:df:53:81:27:d3:bb:8c:50:03:a4:5c:a2:
a6:50:f1:e4:62:96:7b:c7:61:80:1c:72:b3:78:6a:
16:31:7d:3a:81:43:47:60:12:df:66:f4:74:73:75:
4c:e6:b3:67:80:a4:96:6c:9a:d4:55:65:66:99:9f:
22:d0:0c:52:9f:29:ec:2d:2b:9d:91:56:63:da:37:
7c:ab:75:bf:42:b7:dd:44:38:df:e1:4a:d6:3b:32:
d3:dc:99:aa:de:2c:e0:34:f8:9c:d8:01:f5:c0:1d:
be:79:73:b1:1c:a3:2f:9d:69:6b:5b:90:26:86:ac:
62:cf:72:1c:e3:6c:51:9b:da:64:bc:e9:e8:58:b1:
4e:e2:88:65:b5:64:9f:3b:6f:6b:b0:f9:6c:18:64:
2a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DA:3A:89:BB:1E:19:12:C8:AC:38:7E:47:92:4C:22:C7:EA:F8:62
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/92f15bca-51be-4291-9efa-b2392d67d840.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.128.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4f:73:52:a3:07:1e:3b:92:15:73:dd:17:86:ee:56:2f:3f:03:
c6:46:c3:c4:0e:69:c5:9e:4e:04:fa:a8:74:b7:8a:ed:9b:b3:
80:cc:fd:09:46:69:e0:98:e0:1e:ad:4c:00:e1:35:c3:30:46:
cc:43:53:3b:ad:28:44:32:5e:2a:7d:22:cb:6d:41:34:7f:e6:
5c:d2:6c:25:43:23:ed:ff:9b:a3:ad:4f:74:98:00:3f:2b:74:
69:d1:20:7b:ba:c8:be:71:1f:e5:67:65:fd:a6:8a:03:29:49:
62:d3:24:bc:d0:55:13:e4:a2:00:19:b2:22:ec:77:36:78:66:
e6:9e:d4:87:68:8e:34:ee:81:b3:b2:e0:91:78:9f:8c:d8:6f:
26:33:f0:4a:92:da:92:41:fa:c1:5b:b3:60:d2:b4:24:00:7f:
50:a6:12:c2:cd:f9:e2:35:29:d4:01:78:c1:b8:97:0c:bb:b3:
07:53:1d:26:fb:21:1b:c5:bd:61:65:58:d1:10:81:97:2f:7b:
32:fb:a7:40:07:9d:1b:9f:08:5f:8c:19:65:6a:04:8e:5f:70:
57:39:47:ec:bc:95:3a:26:c8:77:d4:03:4e:52:36:d1:3b:78:
fd:81:d1:77:0f:e9:40:1d:fe:a5:9b:8e:86:9e:5c:dd:11:09:
70:40:43:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:45:42 2026 by rpki-client