
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c5b22d0-c570-479a-9176-1b8ae33317b3.roa
File: 9c5b22d0-c570-479a-9176-1b8ae33317b3.roa (raw, json)
Hash identifier: ZSfXHvoBNhV+dj/zyweem4LJcQElE6dstOy3GDIRNTY=
Subject key identifier: A3:ED:65:8B:EB:9F:EF:79:E7:97:38:AA:58:82:41:17:AB:29:B9:CF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 448DE93DE5AC8EE11C16737AB851712F90140138
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c5b22d0-c570-479a-9176-1b8ae33317b3.roa
Signing time: Fri 07 Aug 2026 00:20:08 +0000
ROA not before: Fri 07 Aug 2026 00:20:08 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 98.130.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:8d:e9:3d:e5:ac:8e:e1:1c:16:73:7a:b8:51:71:2f:90:14:01:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 7 00:20:08 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=ba0fe5a67b207edd1d2f0519357904504662e766d214bd2562e96a4c70a7e527, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:28:8d:9a:ee:19:df:d1:d6:fc:3e:17:ea:
db:49:e7:88:df:8f:45:7e:29:50:d1:30:63:7a:af:
64:d9:f2:b9:27:5b:07:e6:59:b0:a0:54:c7:85:e7:
24:3b:f0:08:21:4d:df:e1:be:67:ce:a8:9e:8b:e9:
e2:bb:52:8c:99:60:4c:80:e5:f1:80:99:67:d3:ff:
57:74:4d:a4:fa:d8:94:13:4a:ef:a4:36:cc:73:f1:
97:51:fd:50:9e:af:03:d7:af:22:04:3d:62:80:49:
6a:d5:bf:a1:97:d0:87:6d:6b:62:76:bf:b7:72:70:
4a:56:34:08:77:d1:bf:90:0b:09:b2:b6:ec:67:e7:
d5:77:36:0a:74:b7:67:27:98:be:a8:ca:7d:ba:b2:
8d:a7:c8:5d:b0:24:b4:9c:be:5d:af:d9:75:fc:d4:
5e:2e:e3:57:a2:9c:c6:60:e3:b5:8c:16:75:19:e6:
29:0f:b6:c4:cb:c4:f9:fa:5d:02:28:fa:d1:84:d2:
3b:9a:04:7d:61:29:67:c1:a8:f4:46:ea:b2:75:5a:
32:18:0b:0f:f5:af:d5:89:50:e6:44:ff:7d:f4:75:
41:aa:9c:37:35:49:34:96:a3:c3:38:9b:69:5e:a0:
d9:08:98:81:f2:3d:74:b3:e4:df:cc:8c:ba:a5:f2:
40:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:ED:65:8B:EB:9F:EF:79:E7:97:38:AA:58:82:41:17:AB:29:B9:CF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9c5b22d0-c570-479a-9176-1b8ae33317b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.130.0.0/16
Signature Algorithm: sha256WithRSAEncryption
48:2c:c5:5d:ef:6c:1f:4b:07:34:db:55:fe:cc:fc:fb:7f:6d:
43:a8:04:82:37:75:f6:d9:79:43:2d:10:c3:c3:d6:88:88:5d:
43:bb:c4:e3:59:40:94:d6:3d:b9:a9:5f:53:ea:fd:0e:58:e8:
8a:60:e6:ea:83:ef:c8:14:ef:b0:4d:21:02:ef:a7:f7:ac:68:
cb:c4:43:87:f5:a4:0d:fc:33:9e:91:19:89:df:67:b3:24:ed:
72:f2:08:04:bf:52:a5:84:c6:f1:43:bc:25:2e:36:cb:bc:67:
be:2f:03:83:2d:05:6f:6e:13:61:5a:9d:ca:ed:1f:7c:31:57:
1e:b3:fb:db:34:52:01:46:e0:e0:3d:e4:62:f3:df:22:e6:88:
98:f2:d0:db:ce:94:b1:43:2e:42:f7:15:3c:a2:2f:c7:88:ac:
c2:f1:96:28:e6:16:9c:b7:7e:1b:c7:32:f8:09:04:86:e7:29:
f3:2f:b0:63:e4:ad:0c:bd:92:b2:8c:67:36:47:3b:8d:07:bf:
61:a0:b7:28:ea:db:32:8b:7d:15:0e:a2:8e:17:78:5d:38:4c:
63:5e:8a:ed:d6:1a:17:25:cf:a9:c8:45:ea:07:dd:73:18:13:
28:00:02:e9:a5:cc:2a:de:0d:b4:04:fa:e9:96:c2:69:36:1e:
84:b0:7c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 21:53:26 2026 by rpki-client