
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe5bf133-3d81-4137-ac73-2c66456c6024.roa
File: fe5bf133-3d81-4137-ac73-2c66456c6024.roa (raw, json)
Hash identifier: T9fhjPB2TRv1gY2EebHnWxnQZuXrepOtHVlo3gWhRdE=
Subject key identifier: C2:15:B4:98:36:1E:79:68:85:9B:D7:3B:2C:39:DA:D3:CB:23:1C:C2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0B1ECFF0630E7D9BDB207A58EB36EDC38CEB9A94
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe5bf133-3d81-4137-ac73-2c66456c6024.roa
Signing time: Tue 06 Oct 2026 00:51:45 +0000
ROA not before: Tue 06 Oct 2026 00:51:45 +0000
ROA not after: Mon 04 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 57.198.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:1e:cf:f0:63:0e:7d:9b:db:20:7a:58:eb:36:ed:c3:8c:eb:9a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 00:51:45 2026 GMT
Not After : Jan 4 23:59:59 2027 GMT
Subject: serialNumber=9b7c06d52cce53f545ae76f9a263e1c414005831b6e7ced6f1d4c9e29ca8ce32, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:6c:cd:9b:af:e3:24:ea:ee:60:d5:78:c5:
5f:80:0b:be:2d:67:90:0d:3c:7c:22:c1:95:e9:ac:
df:5f:20:94:84:63:65:2a:30:34:f2:68:d0:b4:80:
4f:d4:93:37:ba:34:8e:8a:6a:52:94:e3:41:a1:52:
9a:5f:89:63:dd:1c:13:d2:2a:3a:01:90:be:f4:99:
77:e8:b5:15:58:6e:af:e7:ee:38:62:7f:2e:61:f7:
1c:8c:d8:a2:fe:dd:98:55:6f:8f:5a:eb:50:20:ef:
21:0f:e3:6c:dc:55:22:cf:75:a4:f8:4d:00:04:28:
de:04:3b:01:3d:50:66:b2:8c:bf:6a:9c:dc:f3:d7:
ca:92:8b:27:75:18:bb:37:2e:a6:f8:8c:39:f3:0e:
a8:7e:c7:fa:8c:cc:c3:87:42:07:68:83:d6:ad:43:
b4:80:f6:ed:41:c2:78:f4:79:3f:b5:41:43:d9:0b:
6f:ce:a7:ad:29:5f:ac:52:dd:3d:4d:e1:27:f3:c2:
0b:99:6c:73:ea:a1:87:6e:05:b0:92:a7:83:af:61:
e5:9a:77:1b:9a:fb:c1:51:61:c0:2e:c0:94:0d:b2:
2f:62:82:2d:8a:77:f7:65:78:ff:39:ac:ee:40:c1:
c2:bd:ac:cb:4f:72:72:53:2a:b2:64:91:ca:a1:89:
f4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:15:B4:98:36:1E:79:68:85:9B:D7:3B:2C:39:DA:D3:CB:23:1C:C2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fe5bf133-3d81-4137-ac73-2c66456c6024.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.198.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:26:7b:41:36:ea:de:43:d0:e2:53:ab:87:48:67:91:50:1f:
a1:87:f4:68:2c:a9:dd:2d:9a:9f:d9:a4:fb:e8:2c:50:5b:b8:
f3:4f:67:39:15:54:fd:23:53:b2:29:1a:07:e4:42:ac:e7:fb:
d1:ea:e7:08:5b:71:23:9a:72:8b:94:cf:fd:d4:40:3f:72:ee:
7f:8e:2d:7c:b7:ef:60:11:ad:ae:41:37:db:f4:e5:f1:c0:cf:
97:91:71:7b:b9:9e:ba:94:f3:21:2e:15:11:ec:f2:32:9e:96:
92:b7:7b:74:e5:d9:d2:0a:c7:28:3b:c0:ba:ef:bf:f8:52:cd:
ca:d6:94:98:43:1a:1e:b7:cf:df:23:ea:47:e8:2f:e1:0d:35:
5b:b0:fc:ce:16:25:9b:c7:2e:47:dd:64:06:59:79:4f:51:0d:
33:c2:8e:31:9c:99:39:3b:e0:64:bd:04:d7:36:47:f4:27:db:
5c:03:04:bb:81:21:17:35:58:ae:6e:55:46:e0:cf:97:05:56:
71:55:5a:c0:2e:ea:4a:fd:23:96:87:7b:cc:6e:78:6f:61:b2:
31:28:e0:be:9d:d3:b6:b5:f0:f4:d6:c3:f1:26:03:eb:83:85:
67:05:02:e5:8d:5a:a7:cc:30:e2:d5:63:3b:0a:5f:71:4b:a4:
cd:b8:e8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:45:08 2026 by rpki-client