
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdb19a32-70e9-4c69-9856-b4ebce3d5a0c.roa
File: bdb19a32-70e9-4c69-9856-b4ebce3d5a0c.roa (raw, json)
Hash identifier: wX/rTE9PUB0+98wJ/IdxZzdAWsTKrj2A5zIQ3yvgL04=
Subject key identifier: 78:86:E7:EB:74:5F:18:A9:CE:EC:AF:E3:21:32:F0:59:FD:AC:C8:81
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 692FDD1ABEEC4843A08D6D21EB2543F751BC8E93
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdb19a32-70e9-4c69-9856-b4ebce3d5a0c.roa
Signing time: Sun 11 Oct 2026 00:51:03 +0000
ROA not before: Sun 11 Oct 2026 00:51:03 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 75.2.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:2f:dd:1a:be:ec:48:43:a0:8d:6d:21:eb:25:43:f7:51:bc:8e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 00:51:03 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=6782f590d74627254659c8fa37d3964a9c2be34ae84097c1005c25cd37d5595c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0c:f8:00:92:42:67:95:40:e7:98:26:8d:fc:
63:fb:bd:93:4a:1d:2c:5e:2a:2c:4e:a5:ee:28:2b:
95:75:7b:21:f9:02:5b:a3:62:b7:75:ca:28:e2:79:
08:fa:63:83:34:e4:ab:3f:27:76:37:44:c7:8d:b6:
45:b8:a7:73:cd:a5:82:21:5e:09:61:d5:1a:8b:85:
8c:90:e6:78:0f:ad:12:f3:fb:dc:c8:4b:37:f3:77:
3a:fe:9b:43:1e:8b:ff:db:99:e2:1f:94:45:a6:88:
1f:34:f3:de:4e:09:6b:5e:a0:b3:5d:7f:48:38:4d:
dc:4c:2a:cc:0c:c9:e1:63:28:a6:e5:05:f7:78:e2:
01:c1:b9:ef:93:87:8e:99:36:49:e8:95:96:6d:2e:
99:fb:c4:6e:5f:92:6a:ca:e4:b9:a7:c0:94:db:4c:
c2:3b:77:f2:82:58:be:b2:47:39:61:77:16:6f:21:
77:9f:f5:b4:97:4b:6c:02:ce:c3:87:09:ef:e9:da:
59:6d:a7:c9:58:f0:9c:b0:1f:fb:23:d5:2c:7a:26:
dc:18:74:60:50:3a:7d:5f:30:ec:9f:ce:d8:36:71:
c6:41:a6:50:77:c2:10:c9:d2:32:37:67:fb:56:9a:
bd:09:28:eb:24:c7:37:1e:98:fd:2e:c8:69:88:bf:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:86:E7:EB:74:5F:18:A9:CE:EC:AF:E3:21:32:F0:59:FD:AC:C8:81
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bdb19a32-70e9-4c69-9856-b4ebce3d5a0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
75.2.112.0/20
Signature Algorithm: sha256WithRSAEncryption
71:c2:94:6f:08:ee:77:a8:28:0c:c9:81:7c:77:93:c9:18:a2:
0f:6f:c9:98:b7:86:88:71:84:c4:54:54:0c:94:c5:c3:47:ad:
48:2d:d3:ed:45:6c:df:cc:70:29:d7:69:9a:d4:aa:21:1b:89:
dc:a6:a7:39:89:2b:3b:b6:36:6c:10:69:e9:a5:e2:f9:e8:9c:
4b:e0:ce:24:84:80:15:55:d2:81:ec:e7:a0:d0:3d:62:d8:ce:
e5:f4:c7:4b:a9:fe:e1:35:ac:2a:f2:24:50:bb:04:7e:bf:d9:
ec:73:bd:82:85:3c:5b:44:61:b5:30:f4:48:33:5d:b9:19:36:
c2:9a:69:23:70:2b:73:9e:93:e9:d8:d8:5d:3d:d8:f7:65:53:
42:f4:75:2c:74:0f:63:f5:ca:a6:83:c5:01:a7:82:ab:bb:c0:
47:49:b0:28:d9:72:ed:0d:f7:ec:b3:48:86:85:ba:0b:71:bb:
f8:ec:76:89:e7:99:60:ff:ce:ea:e9:d3:30:37:ac:ab:68:4b:
10:62:a4:62:d4:69:24:7e:b3:29:a3:6e:61:55:06:69:45:c7:
ac:3f:df:1f:65:07:18:41:b4:dd:ea:6e:c7:5a:73:0f:82:05:
ba:06:ca:ee:bf:18:ec:22:46:14:f8:e4:4c:c3:22:0d:b9:30:
20:32:6e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 21:12:16 2026 by rpki-client