
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f87a9816-c748-4bfb-9e42-8d7c00a32f35.roa
File: f87a9816-c748-4bfb-9e42-8d7c00a32f35.roa (raw, json)
Hash identifier: wvIb1Smk3fRW7JyRMPaM1gkl3dKFEI0TkSF3t1EMQhI=
Subject key identifier: 43:B9:78:27:54:B4:9A:D4:12:6D:31:B7:86:5E:F5:80:9F:AE:2E:BF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 779CD6A7CCDB8109A1245B0E05F5A1E52BB32B58
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f87a9816-c748-4bfb-9e42-8d7c00a32f35.roa
Signing time: Wed 05 Aug 2026 00:41:15 +0000
ROA not before: Wed 05 Aug 2026 00:41:15 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.34.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:9c:d6:a7:cc:db:81:09:a1:24:5b:0e:05:f5:a1:e5:2b:b3:2b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 5 00:41:15 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=d4e4bc468430328696c02798a61a6c800b1c7113828e864f7736e2a6271b59f7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:99:99:69:3f:65:d6:aa:a4:a7:55:35:c7:
b7:3d:da:81:6b:5d:72:62:52:60:36:fe:07:9b:b5:
b3:e9:bd:0e:51:d3:bc:c4:0b:0f:38:c4:47:9f:f7:
a0:a7:12:12:42:31:73:ea:13:18:7e:11:02:1f:bc:
74:1c:4b:f3:12:b0:79:81:f8:30:18:c4:1a:21:d2:
ef:9d:dd:95:97:05:66:3a:c1:1b:92:fc:fe:0a:3f:
4c:87:73:ef:3c:a4:1f:31:b5:c4:c8:ec:4e:bd:3b:
b7:19:c5:31:c3:c5:27:6f:72:b1:c9:38:65:c2:e7:
7b:e6:f1:67:96:c8:01:45:ed:7e:ec:08:48:3e:b0:
e8:7a:7a:0f:5b:e1:a2:c0:f3:e2:91:01:ee:f1:fe:
3b:24:d8:58:78:53:27:90:30:d0:89:52:fc:b1:dd:
ed:b5:98:25:3a:9d:94:1d:90:a1:8d:2a:b7:22:fa:
94:87:e1:19:a9:4c:51:ec:f1:42:b6:82:83:ce:e6:
d5:57:98:ce:f5:48:d1:a7:a9:30:8a:f7:bb:a0:2e:
5d:cf:ff:7a:7e:6f:1d:ae:f8:01:18:a9:1b:e0:e7:
af:eb:01:ba:f0:77:0e:b1:50:67:fc:53:47:e1:36:
59:8f:cd:66:b6:c6:4c:98:c1:aa:9f:c4:fa:83:19:
37:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B9:78:27:54:B4:9A:D4:12:6D:31:B7:86:5E:F5:80:9F:AE:2E:BF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f87a9816-c748-4bfb-9e42-8d7c00a32f35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.34.96.0/19
Signature Algorithm: sha256WithRSAEncryption
ae:5d:8f:5b:e8:90:59:47:57:91:2b:64:5e:2d:07:db:69:97:
47:15:83:85:98:a1:07:49:27:1f:40:9f:b0:ee:7c:91:66:c2:
3f:53:06:03:d4:33:2b:89:bf:d6:3b:75:d7:ea:d5:68:e9:45:
51:1d:6b:99:75:d0:62:fb:b8:a3:a7:26:95:2c:fd:82:b7:9d:
ac:b8:6a:84:67:68:af:38:56:07:11:bc:10:41:36:1b:1a:c3:
d0:b4:42:c5:03:19:aa:6c:9f:1a:c6:11:3e:21:64:31:f7:27:
52:35:3f:b4:5c:de:19:9b:d1:80:1a:e4:29:04:c6:e3:26:fb:
f8:a1:f0:1c:c1:80:a2:d7:f0:e2:56:0e:48:db:90:1f:b1:4f:
c0:bf:ea:ee:ec:73:6e:f2:a6:41:0e:59:48:e3:9a:82:7f:6e:
2f:7f:66:bd:3c:20:3e:82:41:1d:7c:c1:39:03:be:07:3c:64:
bc:ae:86:53:03:27:e5:ea:29:e5:33:38:95:d1:23:c0:fa:9f:
ef:ec:5a:82:d4:46:31:b2:d7:e6:d6:35:e7:86:b4:52:3c:35:
db:c7:c0:f4:ae:be:df:59:4d:dc:c4:04:ca:6c:37:f2:0d:4b:
39:3f:1b:29:3f:1a:bb:07:2d:f9:ec:4e:ae:ad:28:e2:d0:dc:
21:04:ae:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 12:44:42 2026 by rpki-client