
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6377683-9da9-4498-815a-701505447ebe.roa
File: f6377683-9da9-4498-815a-701505447ebe.roa (raw, json)
Hash identifier: F2c2GWK37d5qja6J/rDTRYPRhCEhBD2JbQzjYEhgkcA=
Subject key identifier: CA:CF:E0:03:68:CE:95:83:4A:DB:B2:6F:1B:20:69:30:4C:97:2B:5A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 68DFD0ADB9B6D866578075F906374AD702992AB9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6377683-9da9-4498-815a-701505447ebe.roa
Signing time: Sat 25 Jul 2026 00:21:14 +0000
ROA not before: Sat 25 Jul 2026 00:21:14 +0000
ROA not after: Fri 23 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 216.99.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:df:d0:ad:b9:b6:d8:66:57:80:75:f9:06:37:4a:d7:02:99:2a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 25 00:21:14 2026 GMT
Not After : Oct 23 23:59:59 2026 GMT
Subject: serialNumber=553245b2dac543a6170c66ae6b4bb2813b05cf1f9f9f13e2d89a3b55904f0597, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:ec:8b:2e:10:6a:22:42:49:01:4f:1a:07:
58:1d:5d:ad:3c:89:f9:b8:46:13:d3:ee:ab:ff:d8:
cb:75:67:ef:1c:f4:3b:7f:23:d7:3d:ab:76:97:38:
5c:fb:a2:4a:20:67:d0:44:cd:ed:90:c9:bc:93:8c:
fa:d9:2c:fb:43:ea:6a:98:4f:4a:de:8e:39:9a:98:
45:1f:fc:a6:e4:c4:ef:a0:14:7e:71:b8:5f:86:9b:
f7:c5:ab:6c:ba:7e:a6:18:b9:a8:a0:a6:62:51:53:
19:f6:dc:74:25:48:68:d1:58:5d:36:dd:62:6a:d4:
f7:10:32:fe:78:6b:8d:7c:1b:6e:24:71:c7:ad:1c:
ec:bd:5d:d1:29:81:e4:88:43:61:95:3d:3a:70:9b:
63:63:c9:cc:02:fc:c9:99:10:3a:0b:47:8f:82:b7:
bb:14:87:1a:e2:65:ae:92:0e:d7:98:57:2a:f1:fe:
5d:63:99:34:18:16:f3:26:3f:ca:e7:c9:5a:ed:23:
35:2d:89:36:60:bb:1f:db:cb:e6:1d:21:5c:e6:02:
5d:ca:fa:fc:a7:af:30:b9:a3:ee:5d:3e:b4:27:7a:
ef:0b:eb:e8:55:c0:d0:de:b2:03:24:80:32:77:dd:
6e:cd:a9:e4:94:f2:88:5d:a6:b6:53:14:a2:71:25:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CF:E0:03:68:CE:95:83:4A:DB:B2:6F:1B:20:69:30:4C:97:2B:5A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6377683-9da9-4498-815a-701505447ebe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.99.144.0/20
Signature Algorithm: sha256WithRSAEncryption
69:7d:ea:3d:e7:66:01:9d:7f:d5:16:89:1a:1f:d4:86:d8:a1:
df:64:ac:5a:85:38:8d:3f:b0:e0:62:ac:ef:8a:93:c4:99:94:
55:fe:da:26:e6:35:70:f5:2e:81:ea:e8:00:a8:f5:76:a4:08:
89:44:7a:49:a5:fb:cf:a0:1c:d7:92:6b:66:ed:1a:55:1f:3d:
e3:be:e5:87:f7:e1:0c:92:6e:a7:01:da:a5:62:84:73:56:4d:
e6:c4:df:da:57:60:d3:25:21:36:d6:57:83:35:4e:43:f4:c3:
9e:85:1c:96:02:6e:83:00:b3:b3:13:5c:75:9e:33:c3:f0:40:
2f:58:28:5e:ff:c6:5a:b0:85:b0:68:c4:6c:bc:2b:f9:75:00:
bd:44:d0:95:ed:75:74:37:77:73:e3:77:d2:75:8c:3d:63:e7:
2b:cb:4f:1a:bf:fe:b9:40:f3:19:b9:53:b4:06:c2:05:73:47:
65:41:b8:e8:5d:80:88:e1:34:d2:bd:63:82:09:af:87:6e:bc:
02:2b:14:72:3e:73:ce:8f:17:b6:49:64:bf:41:0e:1f:4a:58:
a4:fd:9c:7d:aa:61:b1:2f:2a:a5:06:09:ed:92:c3:f4:82:69:
7b:c1:e1:5b:2f:30:c1:33:37:75:7b:8a:f8:32:bd:48:11:83:
3b:d9:2d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:26:42 2026 by rpki-client