
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa
File: c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa (raw, json)
Hash identifier: LvxC5GaacPMWaXfa9OpLCDroySjujO3W02F0JXow1OE=
Subject key identifier: C0:14:71:F4:26:7B:9B:98:1F:ED:2F:C6:5F:D4:EB:DA:6A:0A:39:55
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 361B9D0765E69606B2F20983170AEF53EB612348
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa
Signing time: Mon 05 Oct 2026 00:11:01 +0000
ROA not before: Mon 05 Oct 2026 00:11:01 +0000
ROA not after: Sun 03 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 16.165.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:1b:9d:07:65:e6:96:06:b2:f2:09:83:17:0a:ef:53:eb:61:23:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 5 00:11:01 2026 GMT
Not After : Jan 3 23:59:59 2027 GMT
Subject: serialNumber=f5b117f7b020fb7f38e814a130796fcb997c21d7b80757072099a66fdc398c7a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:ea:82:76:9f:f3:74:87:1d:4e:0e:78:66:
4b:b3:2e:7b:1b:99:4e:92:ae:0d:05:fa:1d:e9:dc:
8f:cc:d6:bb:60:db:be:71:25:52:cd:c5:b6:49:c4:
d5:e1:59:a9:04:0e:c0:f7:d4:3c:10:0e:90:57:53:
8b:4c:13:fd:97:4d:6e:cd:13:03:6a:06:3e:54:57:
a4:ae:e2:4b:3b:3d:21:1d:08:df:26:fb:96:22:d6:
70:f9:8e:18:5c:08:bb:c3:35:22:47:6c:35:cc:dd:
bd:48:87:dd:bf:93:ab:f1:4b:97:c3:ab:d5:f0:e3:
ef:88:00:d7:79:48:86:75:a9:cc:4a:81:7f:6b:d2:
26:56:66:ab:d2:3b:c9:9c:8a:31:16:0f:c5:1f:9e:
0a:c8:37:9c:45:0d:9d:ea:fa:81:72:73:f5:87:05:
9d:74:03:fc:6d:f6:d0:92:dd:bd:27:49:8d:c7:54:
7a:33:87:f4:ba:e4:6b:b2:8c:10:ea:d4:99:48:68:
d6:58:06:4b:95:99:b2:08:8e:d2:3c:be:b3:a2:8a:
a2:1a:84:42:5f:68:c7:a2:a4:75:c9:10:f5:e2:54:
74:68:65:5e:6c:72:5b:cc:47:94:3e:4d:aa:5b:2f:
56:8e:93:65:ce:16:d2:7a:3b:99:24:31:9e:d0:4c:
06:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:14:71:F4:26:7B:9B:98:1F:ED:2F:C6:5F:D4:EB:DA:6A:0A:39:55
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c86ee3df-61f3-4ab1-828b-9e897f5e27bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.165.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b7:9d:db:40:be:7f:29:21:9c:cd:37:db:cb:ff:0d:f3:d7:c4:
9f:3a:23:06:5e:d4:f3:3f:ec:e8:cc:50:6c:91:0e:b3:da:e5:
07:b4:98:12:39:45:a0:d9:3f:dc:91:33:cc:ab:00:a2:17:c7:
94:93:94:82:d3:02:3d:13:74:c6:7e:5c:da:60:0f:6f:30:14:
f8:5f:d9:4c:74:32:e0:98:66:42:8b:bd:62:30:ea:9b:f0:ac:
78:a5:b8:5e:fe:75:29:5c:01:1c:f4:52:68:f1:0f:e4:04:4f:
e1:fa:7e:2a:bd:83:69:17:c3:47:b4:b1:b8:db:18:f6:34:ba:
47:09:fc:6b:bd:d4:51:6b:07:26:d2:72:5f:be:fa:60:a8:3c:
7d:23:ac:07:62:7d:a0:d3:fc:b5:7c:a4:65:e4:96:21:bd:91:
63:53:18:b6:1a:57:fc:99:28:3d:f6:28:ba:bb:67:ae:6d:70:
b9:f4:c1:fc:5a:c9:a2:db:7d:c6:7e:63:bd:f9:18:cc:ad:ad:
61:f4:8d:d2:ed:f3:00:94:f5:bd:97:9d:38:0e:b1:a0:99:ee:
aa:c7:19:51:41:0f:67:f0:c0:c3:13:0e:12:d6:c1:d3:6d:f4:
a2:73:9e:ef:61:e5:c1:2d:ef:15:22:16:3e:e6:c2:4b:67:42:
0c:91:da:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 16:13:31 2026 by rpki-client