
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa
File: 98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa (raw, json)
Hash identifier: OHHOZUkiFdIZJNqnACqmqPVECA4+9C0Iu7xOe6MA36A=
Subject key identifier: B7:51:8B:D0:24:10:AE:E0:16:11:E3:47:99:48:7A:55:97:F8:90:BB
Certificate issuer: /CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Certificate serial: 6BA1ACFD9A25B55A46B26795AA4001DBD69BF441
Authority key identifier: CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa
Signing time: Tue 04 Aug 2026 00:10:08 +0000
ROA not before: Tue 04 Aug 2026 00:10:08 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 198.41.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:a1:ac:fd:9a:25:b5:5a:46:b2:67:95:aa:40:01:db:d6:9b:f4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173
Validity
Not Before: Aug 4 00:10:08 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=55821b62503d7865694cafba8d0a82eb16cbdc336f4beeee22c19267a9a81dbd, CN=88af7b95-2ef7-49fc-a37d-1b8f0547180d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:08:fd:00:4d:a1:93:7b:59:1a:ee:6e:cd:
83:1c:b7:16:ce:72:fa:58:0b:54:70:c5:7f:94:14:
e3:d2:2e:1c:cb:f5:36:25:54:b0:16:f1:3c:d1:e9:
0d:d2:20:ae:c7:28:2c:f0:87:ea:71:b0:8a:90:ec:
42:59:6c:03:c8:10:03:f3:45:62:0a:96:50:0f:22:
67:40:51:c2:ed:3d:7e:dc:16:69:18:6f:8a:a5:1c:
ef:d4:c8:c9:53:d7:52:1f:23:42:28:1b:4c:32:90:
53:87:ab:45:79:33:ce:de:1f:9e:8b:44:ab:bf:4a:
eb:68:4f:88:cd:eb:c7:8d:7d:c3:fc:ad:61:2f:e0:
b7:8a:33:e5:d8:f2:bd:72:ed:f3:96:72:de:dd:17:
02:a8:4f:ad:71:bc:55:ed:2e:c2:83:65:0c:5f:52:
d2:2b:4a:c6:df:81:ce:54:e8:ff:0f:47:f0:05:df:
8f:3b:5b:88:1a:a4:54:24:02:7f:67:9c:35:7e:55:
61:05:53:8f:c7:4a:f7:ca:3a:ec:bb:dd:c0:b8:32:
34:26:8f:26:d3:36:53:14:dc:d8:e6:dc:cf:4c:0e:
4c:4e:10:b1:23:94:a0:6d:05:a9:72:4f:50:03:6b:
7b:5c:72:2c:c5:3c:d1:4c:4e:e1:60:ef:97:54:bc:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:51:8B:D0:24:10:AE:E0:16:11:E3:47:99:48:7A:55:97:F8:90:BB
X509v3 Authority Key Identifier:
keyid:CC:10:61:27:3F:FF:76:3F:76:D2:DE:E2:85:83:E8:BA:3B:05:C4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/c319424e039f86d6ad9fc4e7223df841d20ae6d0ff12428173.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/98c3f9f8-9ee3-4909-8d41-7ac2181f6379.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2df51cd2-e6af-493a-a88a-3221d01f7d90/n4bWrZ_E5yI9-EHSCubQ_xJCgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.41.97.0/24
Signature Algorithm: sha256WithRSAEncryption
31:18:9a:52:bb:90:23:f7:cc:2a:e2:51:5b:5b:ef:78:5d:a8:
64:93:dd:8c:45:f2:37:19:6c:9b:a7:1a:55:8e:a6:f4:cf:05:
ba:ff:c2:13:65:e2:46:14:5a:a6:4c:3b:4a:40:a8:21:b9:a9:
69:5b:bd:1e:d1:92:a5:57:34:cf:fa:4a:15:bf:d4:c4:ad:f2:
5a:6c:5a:43:23:ec:02:63:eb:1b:ee:15:86:0a:b5:c4:27:87:
39:52:9b:f6:3d:b0:ce:76:df:1a:86:5f:02:88:34:72:f7:69:
e9:25:9b:7b:79:f7:e5:7d:70:a9:99:8e:f5:e6:4c:28:bf:a4:
08:7d:6d:55:64:6e:f9:03:32:cc:c4:e3:60:34:e2:d6:a9:08:
cd:bc:1a:97:2e:f3:82:be:1b:b7:17:8e:6e:d9:f7:3d:41:2b:
12:93:29:0e:30:d7:4c:1f:d2:65:5d:df:e5:15:59:ad:0f:82:
78:d4:e1:6f:24:8a:25:52:92:d9:73:b8:a6:b7:59:52:db:e1:
18:d8:38:a5:01:c8:83:13:ac:09:01:92:00:45:b8:f0:19:66:
d6:3f:10:6b:6a:37:f2:9b:19:e3:49:16:36:e9:8c:82:7a:5a:
5d:45:d8:35:5a:1f:00:5e:62:86:4c:71:22:04:db:bf:e4:64:
19:06:a5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:39 2026 by rpki-client