
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9d1ebba-14fa-4b1f-b3c0-13a5bae7391f.roa
File: a9d1ebba-14fa-4b1f-b3c0-13a5bae7391f.roa (raw, json)
Hash identifier: k/iH6qWu51YTvtan5AWFjvp+xUeNw9QAqmrJLKmQbrs=
Subject key identifier: FA:6E:31:92:BC:BF:BB:A8:27:54:86:78:3A:CC:25:33:F5:5B:12:1B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5769C8E25307ED12B6C5A28410A8BD368CCD788A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9d1ebba-14fa-4b1f-b3c0-13a5bae7391f.roa
Signing time: Sun 09 Aug 2026 00:00:08 +0000
ROA not before: Sun 09 Aug 2026 00:00:08 +0000
ROA not after: Sat 07 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.86.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:69:c8:e2:53:07:ed:12:b6:c5:a2:84:10:a8:bd:36:8c:cd:78:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 9 00:00:08 2026 GMT
Not After : Nov 7 23:59:59 2026 GMT
Subject: serialNumber=936cbe43cd1cda683cc7c98596ca56df5bde8186a21616f79e78fc3e63e79b10, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:a7:8a:2b:40:27:9d:34:8c:b9:44:57:55:
a4:4a:d7:60:d5:7d:da:8c:c8:57:91:55:34:03:00:
dd:d7:46:50:3d:b9:7f:d5:bc:bc:8e:70:27:84:0a:
06:31:12:4f:84:67:c8:24:ec:d4:cd:f7:8b:a9:06:
b8:a3:c8:7d:8b:8b:60:ba:af:fa:81:1c:7f:da:9b:
60:b3:53:48:ab:ad:18:b6:45:e1:8d:1c:8a:e6:a7:
a9:cc:16:25:53:a9:e4:d4:24:6d:02:f0:f6:72:b9:
1e:e7:3b:da:bb:5b:c7:ce:b9:4f:3d:47:54:a3:3b:
ea:d9:74:2d:99:d6:32:06:a6:17:a2:ec:80:84:34:
2e:5f:02:aa:f0:08:6d:dd:0e:34:60:20:04:ab:19:
fa:1a:e9:94:85:ce:e3:79:3c:fb:54:bc:53:9c:c1:
3b:57:47:0b:e9:b7:40:f8:7f:7a:4b:8b:f1:db:b1:
48:c0:fd:86:2e:72:7f:29:b8:86:91:c0:32:be:4f:
ae:5f:c7:06:7b:dd:08:66:74:f4:be:5b:b3:ba:86:
c9:88:6f:f0:ff:a6:c8:34:1a:3a:ca:57:61:01:ab:
5b:56:7b:3b:c4:da:78:65:75:5a:de:a6:b1:92:13:
86:a1:91:d9:93:06:62:3d:db:60:08:ae:fc:1f:e8:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6E:31:92:BC:BF:BB:A8:27:54:86:78:3A:CC:25:33:F5:5B:12:1B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a9d1ebba-14fa-4b1f-b3c0-13a5bae7391f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.86.0.0/16
Signature Algorithm: sha256WithRSAEncryption
08:d8:b4:5a:bd:dc:3f:ac:c0:0b:0a:14:46:7a:c4:2b:29:f0:
65:0d:f7:f5:a6:35:f9:fb:b7:45:c7:1f:54:fa:e2:9e:bf:05:
ba:b4:7c:46:76:ac:01:99:b0:9e:9d:79:b2:24:be:e0:de:38:
09:80:28:64:e7:f3:23:cf:1e:d3:56:bb:9c:a4:d8:ad:8d:e9:
f6:36:ab:04:0b:72:e7:3e:f9:c6:eb:1e:34:27:70:1f:98:d8:
8c:08:dc:8d:3f:7b:bf:c0:f4:34:c5:77:60:7a:f5:98:c4:31:
c6:f9:e2:f1:e5:a2:a8:ed:0c:15:44:ab:dd:b5:8d:5a:ee:94:
e8:d1:79:cb:7b:f2:d5:31:85:bd:ca:76:3a:fe:82:a2:8a:9d:
e8:18:17:43:fb:a6:d5:f8:47:bd:3d:a3:22:54:96:7b:87:ea:
35:e0:bb:b5:76:e1:e3:f2:b1:6f:89:14:0d:b4:5d:e7:ac:13:
9d:a5:b8:c2:e6:c8:f7:bc:99:ea:93:34:d5:de:38:f5:f4:01:
2d:70:b4:34:c0:4b:d0:84:b1:ea:ec:cb:50:f0:b7:b1:5e:81:
3f:4b:a0:b0:9f:9f:ef:1a:12:7e:d8:c6:d1:3b:6f:39:3b:77:
f5:74:b7:eb:bd:ee:10:02:b9:18:82:f8:6b:54:e1:3a:f1:ac:
02:27:ea:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:15:43 2026 by rpki-client