
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad2dbce1-dfae-4d8d-9ef1-972b31e732ac.roa
File: ad2dbce1-dfae-4d8d-9ef1-972b31e732ac.roa (raw, json)
Hash identifier: bAyPVy6LMZI98RUkf+QMhF3YD8LhzkKsPwfD7goR7+k=
Subject key identifier: 46:F4:C3:AD:D5:BA:11:F4:5C:8A:B7:8C:7D:F1:4E:AF:30:C2:B6:0B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2E8FEDC2BC546A182641558555382E8276ED0870
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad2dbce1-dfae-4d8d-9ef1-972b31e732ac.roa
Signing time: Fri 16 Oct 2026 00:11:38 +0000
ROA not before: Fri 16 Oct 2026 00:11:38 +0000
ROA not after: Thu 14 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 216.244.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:8f:ed:c2:bc:54:6a:18:26:41:55:85:55:38:2e:82:76:ed:08:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 16 00:11:38 2026 GMT
Not After : Jan 14 23:59:59 2027 GMT
Subject: serialNumber=632f23fc8621080add7ac60796012da8890040390a5d757cb6e5eaae761ac855, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:8e:ef:42:2a:8f:f4:c6:31:e4:1a:ba:34:
61:dd:44:da:d6:29:b8:0b:7e:22:8c:3f:69:ef:6a:
16:56:09:e1:1a:75:be:6f:1d:4c:8a:97:a5:aa:cf:
50:62:27:ee:79:0f:c3:60:9d:c3:72:4a:f4:e0:d8:
93:7b:f7:8b:ec:63:50:7f:36:0a:f4:d9:08:84:f6:
04:40:03:41:72:4d:24:6f:76:92:4b:25:55:f6:65:
d5:18:2e:b4:b5:84:73:a6:1c:76:ea:00:d1:32:46:
3c:7a:4f:a2:ea:8d:fe:34:c1:2e:88:ed:c9:c4:d9:
0d:5d:d9:6b:a2:64:1a:1d:1b:77:99:7b:bf:3b:05:
00:50:48:7f:98:ea:01:ac:07:3c:c4:e9:f3:a4:15:
bf:aa:95:6e:b7:31:75:74:5b:b3:39:56:7d:cb:31:
32:de:3d:e6:00:0f:07:87:56:45:9e:9f:73:ce:5f:
3e:bf:ed:4d:b6:c1:bf:a2:00:b7:c8:55:be:a4:6d:
58:5a:d2:93:fb:3c:73:ac:1a:b3:5a:37:8f:a8:40:
a8:37:2a:fe:bd:54:af:cc:e5:0f:09:4e:38:2f:b2:
4e:87:ae:b9:b9:e5:7f:42:c9:ed:e3:dc:2a:4d:df:
9f:bf:83:a5:98:82:cc:d7:3a:f5:a3:58:72:3e:4c:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F4:C3:AD:D5:BA:11:F4:5C:8A:B7:8C:7D:F1:4E:AF:30:C2:B6:0B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad2dbce1-dfae-4d8d-9ef1-972b31e732ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.244.0.0/18
Signature Algorithm: sha256WithRSAEncryption
7f:68:92:19:a5:1e:96:5f:f7:4b:b9:62:a5:41:d7:9c:99:28:
ee:f1:b8:46:92:9b:3a:38:24:34:2a:8e:93:d2:3c:15:8a:e5:
1e:10:0b:d7:68:aa:7f:2c:a2:ab:ce:78:eb:90:d8:b8:51:89:
6d:4f:43:34:47:bd:1b:b2:ad:0a:13:60:ba:5f:c3:21:68:e5:
11:b0:e9:59:ac:bb:2e:1c:69:f1:92:1e:eb:5c:a5:b0:35:1b:
1f:a2:ce:26:51:88:27:4f:c4:97:53:0c:fa:2a:f2:fb:2c:1c:
f8:c1:6e:8a:76:a7:f3:5e:11:d9:d6:66:78:26:1b:ce:b7:0a:
58:5e:99:74:cf:0f:82:f9:6e:33:40:60:10:d6:2a:f0:4a:32:
0d:3a:6d:ab:33:9e:d0:10:b5:68:76:9d:45:94:56:50:ce:fc:
8c:17:42:0e:b1:05:9b:2a:df:d7:e3:7b:98:94:20:09:25:89:
38:96:da:34:9d:2f:ac:e1:6f:d0:0f:87:f5:52:64:53:bd:fd:
84:86:81:ce:5a:06:02:d9:a1:c4:a2:92:4f:d5:1e:5d:06:1d:
a9:06:dc:68:54:cd:88:cf:b7:9d:57:84:4c:3b:b4:34:c5:34:
23:6e:8c:d8:e6:5c:8f:f2:5d:ee:13:ae:34:22:83:43:69:26:
41:fa:36:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:29:52 2026 by rpki-client