
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fdfb9fa5-85eb-4a87-9293-6efcee6e67ae.roa
File: fdfb9fa5-85eb-4a87-9293-6efcee6e67ae.roa (raw, json)
Hash identifier: QuDYr8GaHj/qsl+go/l41lmaaj2Ts4vjxrvEy0zlsiQ=
Subject key identifier: 48:4F:9F:26:F1:78:9A:EE:A3:17:68:93:28:8C:C0:1A:3E:C7:E3:5A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3FB4F10CEA7963F3B51EA522EE18F246B2E8BD13
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fdfb9fa5-85eb-4a87-9293-6efcee6e67ae.roa
Signing time: Fri 17 Jul 2026 00:31:12 +0000
ROA not before: Fri 17 Jul 2026 00:31:12 +0000
ROA not after: Thu 15 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.233.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b4:f1:0c:ea:79:63:f3:b5:1e:a5:22:ee:18:f2:46:b2:e8:bd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 17 00:31:12 2026 GMT
Not After : Oct 15 23:59:59 2026 GMT
Subject: serialNumber=a4c601585b5a0e6d3f8cee0fafd4d1834893ca5d29a358d517676302c727ed68, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:53:65:ce:21:53:34:3e:47:ef:0f:b5:d6:
63:42:4e:a5:fc:84:a5:4b:c0:4c:1b:6e:8b:61:0c:
86:2e:c5:c8:f6:66:7b:e8:89:ae:d9:1b:59:7a:81:
af:b4:af:ba:64:ea:b7:68:8a:d9:e6:1b:11:14:ed:
42:c6:90:11:4c:34:9f:f2:9e:d2:7b:0c:42:54:ee:
e7:85:c4:a8:d0:e7:59:53:02:b3:93:4e:7c:8a:e3:
87:53:69:1a:a7:c3:99:74:ae:05:94:16:6a:76:06:
bd:42:63:8e:9e:b9:1e:37:54:22:ed:77:fc:a1:2c:
74:2e:f6:d7:71:f8:34:63:ef:54:c3:e8:2f:9e:69:
87:39:44:cf:28:fd:50:36:75:db:f4:44:58:d2:7d:
d8:40:d3:d1:60:53:64:60:8e:8b:31:ef:5a:bf:91:
e7:6d:e0:fd:ef:a6:80:00:97:1b:a8:d1:6a:48:7f:
04:f6:b6:e3:e4:c0:2b:98:58:bf:ae:d0:19:a8:1e:
52:8e:e9:e5:89:5c:c5:5b:52:f9:2a:83:66:2c:a3:
69:1b:cb:ab:e7:12:f9:bf:00:8a:f1:c4:db:03:dc:
3f:b1:de:2a:bb:6d:06:ed:bc:24:1d:39:8a:cf:97:
c4:25:ac:4a:de:d4:4c:73:08:cc:85:58:84:7d:9a:
31:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:9F:26:F1:78:9A:EE:A3:17:68:93:28:8C:C0:1A:3E:C7:E3:5A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fdfb9fa5-85eb-4a87-9293-6efcee6e67ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.233.128.0/17
Signature Algorithm: sha256WithRSAEncryption
c2:04:4e:e5:01:bf:c3:5f:a4:b6:92:52:39:e1:73:06:97:56:
5f:35:95:43:ff:3e:c1:9f:3a:3c:48:ba:3a:a8:94:48:01:5a:
3c:ec:43:d3:18:cf:82:75:71:32:7e:f8:01:b4:e0:99:46:e6:
34:da:bf:12:12:0e:83:be:2e:96:f2:92:5a:b6:f4:4e:ff:ce:
be:b7:f3:09:69:12:6f:c9:9c:35:34:b1:d4:32:fc:16:45:28:
17:e1:18:eb:79:52:4b:cf:07:8d:9c:41:20:d9:32:61:f6:e9:
d8:63:3a:55:8b:c4:1f:5b:41:67:f4:ff:1c:70:e1:f5:89:95:
f0:f6:26:07:c7:37:7b:9b:a6:3c:2e:db:99:12:7c:4b:9b:c1:
c2:0a:f5:7c:e0:95:5d:cc:4c:e2:b8:87:37:43:f9:24:00:ca:
73:4e:dd:b3:67:ba:31:8f:85:7d:db:5f:b4:4d:3f:29:94:e2:
f0:52:91:39:00:c4:51:ad:a3:26:43:2c:af:66:e3:74:d0:53:
9c:99:e8:ad:27:d4:8d:19:48:21:47:a6:00:33:e4:9c:62:de:
09:a4:9d:33:f5:9d:ec:73:02:fb:ed:7c:b6:8e:25:69:19:cb:
bc:a7:04:a8:49:ae:54:6a:d9:21:57:c3:2e:d9:7f:c5:4d:c2:
9b:6e:f9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 11:37:43 2026 by rpki-client