
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9521470e-60a8-4627-854b-23346de593e3.roa
File: 9521470e-60a8-4627-854b-23346de593e3.roa (raw, json)
Hash identifier: lU2lMB/10vpJOiIZ7ts9zOH4usL+gNOk/CaEQ4Yoe3o=
Subject key identifier: 37:5C:2D:29:64:6B:30:A9:28:8A:30:E5:E9:C2:58:C7:F8:6A:27:53
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F42A3B6A44867C34C9FFAC3281AD81F87AE12E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9521470e-60a8-4627-854b-23346de593e3.roa
Signing time: Tue 06 Oct 2026 00:50:09 +0000
ROA not before: Tue 06 Oct 2026 00:50:09 +0000
ROA not after: Mon 04 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 15.219.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:42:a3:b6:a4:48:67:c3:4c:9f:fa:c3:28:1a:d8:1f:87:ae:12:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 00:50:09 2026 GMT
Not After : Jan 4 23:59:59 2027 GMT
Subject: serialNumber=36747182479c760348efee53c8b9202dc2e6e631e609f86f74da391dfa8c856f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:ec:83:50:1c:3d:e7:ef:e7:da:cc:05:42:
8b:23:1d:8f:78:cb:44:2f:55:d5:4a:5c:8f:17:06:
d5:4e:06:20:64:50:38:7d:9a:e2:19:93:a8:a9:e8:
2a:63:3c:68:3f:e9:63:89:e4:17:3d:24:9b:12:28:
54:e5:5e:4c:7d:df:69:0b:60:37:9a:21:4e:0f:f2:
c1:7a:f5:5c:ba:6f:cb:ad:85:92:d9:fe:e4:70:cc:
5e:9d:22:41:0f:2c:83:bd:84:57:0b:b8:76:68:b0:
76:37:ea:a5:5e:64:5f:32:5f:ef:3e:02:59:66:6f:
03:18:0a:e3:12:71:d7:00:02:19:a1:05:13:4a:cf:
4c:0c:96:44:49:df:37:7e:f4:e6:17:48:6d:3a:16:
1b:31:9c:9c:bf:2a:58:41:2f:77:55:87:6f:dc:99:
6e:5b:7d:2b:d7:98:78:0c:08:44:e7:e5:00:4d:52:
e2:4c:26:0a:ad:6d:80:91:e6:a8:8f:18:a5:66:99:
69:17:4c:42:e3:93:e3:55:90:d7:4f:da:8e:15:1c:
a5:db:ac:30:4f:b4:d8:2d:5c:1f:b3:0e:6b:eb:26:
20:ae:4a:c6:c6:50:4a:60:68:7f:9b:37:e0:6c:e8:
78:f3:2f:29:bc:0c:38:e5:75:8a:4d:ae:d5:42:fa:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5C:2D:29:64:6B:30:A9:28:8A:30:E5:E9:C2:58:C7:F8:6A:27:53
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9521470e-60a8-4627-854b-23346de593e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.219.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:1b:1b:cd:26:08:a0:cd:7e:ba:4e:0e:08:1f:33:41:5d:7e:
76:3b:f1:65:ff:29:46:21:5c:ea:1d:c3:f7:48:fe:ca:a0:16:
f7:fb:c2:6d:ab:f1:b0:e8:9d:0d:51:d0:8e:18:6c:bb:64:ef:
72:a5:33:10:99:d3:2e:12:29:36:44:20:4c:32:a1:10:87:31:
39:da:63:7d:dc:9a:0a:9c:de:9d:1e:15:6b:7f:be:b7:b8:d5:
78:25:7f:89:bc:35:b7:7c:79:61:5a:6a:c8:05:56:cb:df:59:
96:c5:9c:3b:6f:79:82:df:51:ae:9c:82:af:2f:79:87:eb:b5:
69:1a:e4:e6:8a:0d:26:cf:3e:03:6a:a8:c4:6e:89:35:f7:a2:
84:cd:25:5e:cb:82:77:a6:d8:44:28:29:f0:09:fd:fb:58:fe:
87:e8:ea:fe:62:b5:9b:7e:f3:70:05:dd:7b:a5:49:0d:73:70:
23:20:bd:bd:1e:17:2f:43:4d:50:9c:ca:7c:00:99:3a:a1:e5:
46:02:67:4f:f4:f4:3c:df:75:70:77:e8:d1:25:4e:bb:bc:df:
a7:4a:cf:9d:0c:b4:eb:e8:3e:69:00:2c:9d:0d:39:bb:e0:26:
09:13:4a:41:28:5f:6e:e9:52:89:c6:ae:69:bf:61:78:16:f4:
87:2d:89:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 02:45:23 2026 by rpki-client