
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa
File: b448195b-84f3-4e2c-beb9-33cee532dce4.roa (raw, json)
Hash identifier: HWTPcEPsySR70eBSlkCWLRcei4fZ72bF1rnqtpKywdE=
Subject key identifier: 16:E5:BF:50:A3:19:60:69:FA:B3:C4:73:AE:B2:6F:7D:04:32:55:85
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0BABC43AE020FA937A6BCE7E3E9B31B613491A1B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa
Signing time: Thu 22 Oct 2026 02:11:43 +0000
ROA not before: Thu 22 Oct 2026 02:11:43 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 107.22.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ab:c4:3a:e0:20:fa:93:7a:6b:ce:7e:3e:9b:31:b6:13:49:1a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 02:11:43 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=9d5d8b4a2371d64372869e19c8b1a5828f3ca29fcb9eed6cc55136edf30f4f13, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:42:25:c4:63:55:71:dd:c4:9f:d3:ff:22:53:
46:72:56:9b:0c:6e:39:6e:d8:ff:3f:68:4e:ca:5b:
de:13:0b:93:4b:5c:9d:b5:a3:02:d1:6f:7d:5e:5e:
9a:84:9a:bb:7b:81:01:37:81:d8:c8:ee:a2:80:53:
d6:2c:c4:93:ec:6b:73:a9:22:b9:b3:93:95:b8:cd:
2e:99:79:af:00:b9:0f:6e:98:6f:d4:ca:32:dd:22:
90:e0:20:eb:07:63:8e:a5:6e:b6:3a:26:bd:8b:56:
0d:ae:6f:69:e3:db:78:16:7f:b3:ac:6c:25:01:3a:
85:a9:ad:99:70:c5:c8:a3:a1:16:2a:5c:42:79:56:
bb:2c:a3:12:86:10:7e:42:89:c7:cf:82:ba:41:6e:
3a:e9:81:79:1f:df:cc:ab:1b:47:60:2c:48:6a:04:
83:39:fd:a6:d8:73:94:ce:ee:6c:83:b8:ba:12:89:
2f:54:c0:fb:7f:e7:4e:26:da:ee:b8:bd:ae:5e:7e:
3e:ac:f2:75:38:0e:c4:56:6b:63:f3:ac:d1:aa:53:
51:75:aa:69:6d:ae:71:0c:a7:47:c2:14:aa:a6:47:
4c:2e:af:7a:c3:68:fe:09:70:d0:8f:c2:e3:72:1f:
ed:0b:6b:26:a8:0a:fb:41:43:69:bb:02:67:a0:1c:
91:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E5:BF:50:A3:19:60:69:FA:B3:C4:73:AE:B2:6F:7D:04:32:55:85
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b448195b-84f3-4e2c-beb9-33cee532dce4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.22.158.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:48:74:ac:35:e8:c9:53:6d:d1:aa:82:33:d5:04:4a:38:2c:
b9:74:fe:a1:ed:70:fa:de:cd:b2:8c:5d:c8:bf:2d:e0:5e:af:
01:28:5a:21:fc:db:3f:c3:77:45:5a:fd:c5:15:93:21:d0:55:
ac:e6:3a:15:81:18:b2:d7:61:a5:ab:6a:f5:d0:8d:3a:9c:89:
10:d3:b2:b3:a6:70:1f:cd:4b:2f:af:10:ef:8e:11:43:68:98:
63:10:27:d1:ac:eb:a8:ac:a7:52:ec:72:46:0c:8e:8d:85:6c:
8b:47:a2:23:22:b0:fb:b6:d0:80:f8:d3:e7:dd:cc:7f:f6:a8:
af:47:70:20:7e:ff:e0:ad:fb:52:ac:0e:91:67:97:1a:dc:7e:
56:38:35:86:2e:73:39:08:69:aa:b6:7d:4f:ed:72:91:af:01:
89:6a:e4:52:8f:6b:e1:c2:f5:fc:56:0b:b8:fc:c8:78:48:df:
79:25:27:0f:16:58:00:aa:46:27:39:6a:e0:94:34:27:85:e8:
93:bf:34:7e:e4:a1:2f:12:7d:42:f8:60:93:66:4e:72:82:b8:
e3:7f:d9:3a:4c:30:ee:7d:9b:a8:e1:9b:57:93:39:98:cf:f1:
ac:ed:e1:b2:0f:c6:09:91:8a:32:25:59:43:92:18:eb:36:5d:
63:82:90:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 20:12:40 2026 by rpki-client