
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235c0063-092b-429b-a092-b2a72e7b993f.roa
File: 235c0063-092b-429b-a092-b2a72e7b993f.roa (raw, json)
Hash identifier: laLRHkoHQdS/w9ZhYvHVx7U5nJ1280DP6WuClkhl5ss=
Subject key identifier: 5D:37:19:5B:FE:7F:87:CF:73:05:26:43:B5:7B:43:41:CB:8C:A4:1D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5E157F12716C2B28BE63E74195F56ABB0C45087B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235c0063-092b-429b-a092-b2a72e7b993f.roa
Signing time: Wed 20 May 2026 00:21:16 +0000
ROA not before: Wed 20 May 2026 00:21:16 +0000
ROA not after: Tue 18 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 203.86.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:15:7f:12:71:6c:2b:28:be:63:e7:41:95:f5:6a:bb:0c:45:08:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 20 00:21:16 2026 GMT
Not After : Aug 18 23:59:59 2026 GMT
Subject: serialNumber=fe762732f92be85e050b1792f1835faa685a65a7a71487fb7f967254815b5b4b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1a:1b:a9:bf:4e:a1:41:66:32:67:a2:86:37:
cd:6b:a4:50:68:e3:f3:2c:33:81:36:0f:fc:39:29:
e9:9f:20:d7:19:f1:5d:42:dc:f5:99:3d:28:9a:d1:
e9:d3:95:0c:21:6b:7c:2f:bc:9a:79:6d:8a:ff:97:
5c:24:c6:a0:52:ae:cd:9c:05:eb:3a:3d:89:ff:87:
17:e3:78:05:43:c6:86:8a:05:fc:93:64:d2:49:db:
c5:cd:3c:72:72:f6:01:4d:d4:3e:cb:7f:d3:4a:ab:
b0:80:d5:ee:b1:52:80:ab:8a:81:4b:c1:64:9c:80:
2a:83:11:a6:83:38:1f:b5:cb:50:d5:5b:60:a2:fa:
93:a2:b0:2c:b0:83:ec:d3:de:f6:d5:d2:e3:32:44:
d1:d7:d7:9b:b1:07:14:b6:54:93:63:3b:f2:f3:9e:
24:8f:60:36:f9:7a:2e:99:ab:b3:3c:cd:87:a2:05:
0c:1d:ea:1c:87:6f:75:3e:14:48:4a:a7:b0:62:67:
9d:7a:da:c0:cf:4a:5b:13:d2:59:b5:83:97:09:c0:
80:99:12:16:7c:17:c6:d3:00:f9:12:62:87:dd:44:
ab:f9:0c:65:00:29:50:70:d8:ac:5d:a8:a2:f6:60:
b6:f7:fb:8c:ae:a2:82:1d:52:c8:98:f1:07:85:eb:
ad:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:37:19:5B:FE:7F:87:CF:73:05:26:43:B5:7B:43:41:CB:8C:A4:1D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235c0063-092b-429b-a092-b2a72e7b993f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.86.216.0/23
Signature Algorithm: sha256WithRSAEncryption
34:76:66:2b:b1:88:1a:cf:4b:44:74:ca:04:09:43:3e:92:a0:
89:a4:85:ce:3a:ce:a3:41:0e:56:a3:29:87:5c:be:a7:14:71:
b9:f6:de:f1:87:03:46:d7:4b:85:7b:62:f4:56:d4:a8:6a:bc:
0f:5d:67:a2:ab:64:b3:d2:06:d9:25:a4:c2:5c:53:39:0a:ba:
c3:2c:c3:e1:d8:d8:9a:db:d1:35:5f:87:1c:08:4c:76:3c:28:
fc:e3:5e:ec:58:fb:d8:11:8f:67:13:e3:7d:46:78:1a:59:73:
44:47:ed:a4:24:12:db:a0:df:5f:43:7f:05:2e:08:ea:9e:f4:
dd:e8:18:d4:7f:0c:b2:cc:ec:15:d8:25:81:98:5d:6c:ee:66:
f8:80:4d:cb:b2:31:eb:3f:42:b1:26:db:75:7e:69:80:1a:d6:
4b:2b:b0:f4:9d:e5:38:b4:65:6a:e2:b4:87:ea:93:20:14:40:
06:51:24:3d:82:56:4a:7b:eb:0c:78:bc:31:79:14:af:fd:2b:
53:cf:e9:1d:e9:0e:3b:d1:9f:aa:04:a7:b0:83:0f:aa:87:59:
84:b3:d4:fe:10:a1:a7:28:ca:8e:ba:62:f9:22:85:c5:0a:48:
16:1f:af:af:0d:6e:ab:f8:6b:d6:68:42:f2:3a:15:c4:3a:88:
73:b5:92:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:51:03 2026 by rpki-client