
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa
File: fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa (raw, json)
Hash identifier: bZfOY8AMq4H25P1KKEHn2iewZamYRHM293yQ689D4IA=
Subject key identifier: 41:08:CE:7F:DA:EA:81:BB:A3:8E:DD:EE:72:C7:B6:B7:90:4E:0F:98
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4B843418EAA05C12DA7EB695797597E9780A05EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa
Signing time: Wed 05 Aug 2026 01:00:13 +0000
ROA not before: Wed 05 Aug 2026 01:00:13 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 170.221.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:84:34:18:ea:a0:5c:12:da:7e:b6:95:79:75:97:e9:78:0a:05:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 5 01:00:13 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=cd1fe2178dd538a64bde5aa415439b6976a5ff02daf9e24cd968fd571bd2acac, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:15:18:ce:bf:85:a3:4e:a6:69:85:c7:1d:
69:47:63:93:9d:fd:c5:75:d1:40:a0:07:49:f9:03:
0d:21:e5:8d:23:76:40:92:5c:bd:a8:bd:0f:ba:48:
38:3a:e5:10:9b:81:7c:8d:5e:9b:85:c0:ae:dd:12:
2c:85:45:d6:1c:77:61:b7:04:33:77:58:d9:99:70:
47:b5:5d:0f:39:46:58:35:64:05:98:8e:18:d6:a3:
2e:f6:6c:72:18:4f:23:03:06:87:21:76:aa:0a:a9:
69:c6:da:c9:49:bb:8d:cd:9b:c5:da:34:f0:48:d9:
e2:dd:f1:69:5c:19:ae:c2:f5:5b:ea:f1:ad:07:6f:
4d:ae:98:8c:8e:72:14:cf:36:0f:d1:c2:44:d4:b1:
ab:c7:7d:84:40:de:f6:0f:34:8b:d0:08:52:e7:10:
12:22:4b:0b:d6:58:54:93:0e:29:e6:12:95:94:78:
5b:da:06:23:12:38:7f:f7:2b:65:fe:7c:3b:f7:da:
2e:45:6d:4d:f0:40:0f:1b:a4:1b:94:4a:84:31:5a:
3e:63:61:c8:48:25:c6:bc:89:f6:f9:17:94:87:16:
a3:4f:c3:09:8d:eb:fb:d0:2d:35:af:42:a9:30:1a:
b4:e0:7c:ef:38:f7:34:77:6e:17:86:b0:43:77:54:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:08:CE:7F:DA:EA:81:BB:A3:8E:DD:EE:72:C7:B6:B7:90:4E:0F:98
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb0b7d83-ba63-418d-9ba0-0081273c74ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.221.0.0/16
Signature Algorithm: sha256WithRSAEncryption
90:dc:c2:22:36:28:08:cc:d9:f6:ba:51:a6:e7:c5:18:20:30:
d5:2c:30:98:b6:62:d5:ad:f2:a3:be:5a:b4:c9:55:c9:f1:88:
1e:14:88:71:1d:4f:d1:e0:32:96:55:51:d5:9b:04:fe:42:21:
01:74:61:43:32:8c:f8:5d:0d:c3:84:f2:d9:ef:4f:a2:69:7a:
25:eb:14:c7:9c:c0:3e:9f:5e:8e:b7:95:c4:01:b8:ec:e1:28:
1b:fb:8c:ca:51:f1:bc:6a:07:14:78:34:e4:39:cd:5c:d2:ce:
bc:3b:e1:f7:c3:d1:99:b3:c2:58:94:c6:7d:33:f7:43:46:12:
47:59:c5:e4:c7:a4:e2:a1:82:d3:3b:b7:bb:74:7e:c5:23:da:
54:d6:5c:99:f4:f9:12:83:f1:40:bb:a0:4c:7d:f2:22:d3:32:
e0:01:ef:5f:b4:0f:0b:3c:9a:55:58:f8:ef:a7:42:3c:d8:e5:
e0:07:1e:33:8e:3b:a1:42:54:95:85:0c:60:c1:04:e3:a0:7a:
27:ec:d2:99:64:71:e6:cb:d9:5b:0e:3b:93:21:6a:91:54:bd:
6a:79:de:ed:62:5b:92:2f:e2:68:c2:91:b9:9d:d5:79:db:8d:
23:b4:b6:93:82:e3:8d:1f:f0:26:8a:90:8c:0c:ee:22:bb:5b:
55:34:72:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 12:10:43 2026 by rpki-client