
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d396b64-31a7-4efc-9fc2-bd8f5539e50d.roa
File: 9d396b64-31a7-4efc-9fc2-bd8f5539e50d.roa (raw, json)
Hash identifier: xqZ6AEBfYo8q0XAX+AdUVu3Jx6pySPE54c/SXEOxV2Y=
Subject key identifier: 9B:1B:03:E1:03:C9:8F:43:2E:F5:8D:D5:D4:96:EA:67:68:66:65:0E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 27D0DED9120420D1A027888FD46D4BCE55D46FDB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d396b64-31a7-4efc-9fc2-bd8f5539e50d.roa
Signing time: Mon 26 Oct 2026 00:30:18 +0000
ROA not before: Mon 26 Oct 2026 00:30:18 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 202.5.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d0:de:d9:12:04:20:d1:a0:27:88:8f:d4:6d:4b:ce:55:d4:6f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 26 00:30:18 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=b2264a757e14a0973a61f634817e55c726d1456438fda40532b6c468ab71c6c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:80:e4:d2:06:fb:2d:a1:78:9f:94:c7:79:
9b:04:8d:34:c1:37:39:dc:41:e4:c6:61:b7:7d:6d:
76:04:b4:47:45:cb:48:d2:1c:16:df:ee:20:67:f2:
ed:59:c0:3d:98:36:b8:74:39:aa:bb:7e:48:85:88:
dc:97:15:ed:32:f0:92:2e:86:71:50:3d:63:ea:39:
09:a3:ba:33:2b:1f:62:01:44:3a:32:27:bc:be:6c:
0b:cd:30:ea:85:d6:67:8f:87:0e:ca:5f:a6:40:e6:
9f:9c:7f:cb:d6:03:6c:b0:58:16:7f:f1:b5:28:46:
a3:a1:05:99:96:96:52:27:50:7a:2b:44:4e:c2:4d:
98:5b:e1:67:b3:cf:ce:a8:fe:bd:41:be:da:a7:68:
5c:f6:4c:03:a6:53:27:12:0e:33:13:38:76:9d:d3:
0a:93:02:f5:79:5c:17:48:08:9c:dc:aa:34:17:5d:
1a:24:e1:4d:e0:13:74:e3:fd:46:51:72:46:76:bb:
de:a8:81:60:bf:87:7c:3e:b5:a2:a9:37:a2:75:59:
8b:44:96:23:b8:5a:7d:25:89:eb:a5:a7:02:ce:d4:
8e:b0:86:b0:41:9c:5b:54:bd:9a:83:7d:4f:41:a3:
5e:3a:cc:dc:01:c6:de:d5:1a:b9:e7:0c:48:40:a1:
fe:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1B:03:E1:03:C9:8F:43:2E:F5:8D:D5:D4:96:EA:67:68:66:65:0E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9d396b64-31a7-4efc-9fc2-bd8f5539e50d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.5.180.0/22
Signature Algorithm: sha256WithRSAEncryption
88:24:7a:88:89:87:f8:f1:ca:e8:ee:00:56:f6:aa:45:dc:02:
2b:e0:57:bc:4b:8a:79:74:b2:c4:d8:cd:dc:b3:f4:23:5d:c7:
4f:27:ec:cd:a1:47:9e:24:af:98:ec:68:13:a2:1e:16:f2:a6:
db:bd:43:72:49:29:56:5f:d1:d4:ce:a5:71:8b:c3:68:78:87:
f1:e4:ba:c7:bc:d5:be:98:33:bd:66:8a:34:fc:44:73:93:24:
09:3d:bc:7c:29:ad:85:95:61:c1:4b:5c:2e:8f:77:ec:66:31:
1c:ac:0e:29:79:5d:1c:a0:ce:05:c2:97:21:0c:fc:10:07:5f:
94:51:d5:0b:e8:3a:e6:e9:e5:57:06:9e:db:b6:8c:a9:a5:5f:
e3:f9:cd:fe:06:e3:1c:df:dd:94:4c:45:dd:72:af:39:83:4f:
e1:05:2f:a4:2b:3b:13:85:71:a0:e8:25:86:42:17:30:88:9b:
e1:17:99:da:34:25:9d:19:6a:e7:fd:6c:8d:36:5b:f6:3e:65:
b6:7c:dc:7a:96:01:0a:34:3c:df:79:e0:2a:42:e1:e3:47:d0:
61:d8:9c:86:84:f6:98:2a:e2:ae:72:3c:d7:43:92:cf:a5:c4:
35:2d:be:5a:53:82:bc:41:1d:b9:70:40:d1:a0:70:9d:ec:56:
56:63:5d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:09:09 2026 by rpki-client