
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa
File: 4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa (raw, json)
Hash identifier: 22pp8rkiTxPziOXP0GPqA661/gJRpuvNOPqYVCw+YBY=
Subject key identifier: 40:D8:A2:F1:62:1B:D5:CF:ED:A9:60:A3:1D:40:74:D4:75:2C:BC:18
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7D15AE4247413F354995AE887F4C63CC720AF718
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa
Signing time: Sun 01 Mar 2026 00:20:05 +0000
ROA not before: Sun 01 Mar 2026 00:20:05 +0000
ROA not after: Sat 30 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 203.110.206.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:15:ae:42:47:41:3f:35:49:95:ae:88:7f:4c:63:cc:72:0a:f7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 1 00:20:05 2026 GMT
Not After : May 30 23:59:59 2026 GMT
Subject: serialNumber=abc58d38aca00796f60bca6da117cd7be06ee97c370da83c3dcbff3f260a3c18, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7c:26:5f:92:76:79:93:83:41:ff:89:dc:4c:
3b:4a:67:2d:3b:b8:b1:b7:c6:d5:13:c2:41:0d:00:
95:18:d4:6e:8d:3f:ef:38:7c:95:e6:5b:ab:9b:1a:
4a:90:b3:f3:28:b4:8a:a1:90:a0:c0:61:a3:6e:88:
4f:93:15:6e:94:6a:7d:4c:78:ec:58:af:ee:b9:bc:
97:ec:6b:14:5b:0e:62:03:b5:08:c0:3a:15:30:a5:
38:0d:3d:0c:e2:87:7b:f6:d9:14:31:a1:8f:2d:ca:
ce:63:8e:fb:d6:6b:95:70:65:60:3b:58:19:a9:82:
30:24:3f:20:f7:c4:47:75:99:dc:18:0c:0d:d6:e5:
50:5e:6f:03:eb:5e:29:3b:84:3a:22:f0:6b:a7:ab:
00:fb:2a:80:6c:65:ee:02:77:22:4a:22:d2:0c:ae:
fe:0a:87:71:f0:51:36:1b:c2:5d:1b:1c:a1:bf:36:
91:7e:1b:72:f3:07:d8:5a:a9:3f:c6:81:32:42:f2:
d3:ae:e2:c9:eb:d0:07:75:d8:39:1f:a7:72:94:f5:
e1:05:66:14:ce:f9:63:ff:8e:d0:99:c7:07:c5:b3:
83:a7:c6:42:ff:e5:85:74:e7:53:b8:cc:d7:5c:ad:
b4:71:36:45:30:94:42:c5:39:9f:76:b1:d6:50:a3:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D8:A2:F1:62:1B:D5:CF:ED:A9:60:A3:1D:40:74:D4:75:2C:BC:18
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d8d34da-0c10-4364-9d0f-e5c44c8e9a07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.110.206.0/23
Signature Algorithm: sha256WithRSAEncryption
85:df:56:f7:d4:93:58:1c:3b:a0:bb:40:82:28:8a:30:03:bd:
31:f2:0e:09:68:0a:33:95:0e:53:f3:7c:5e:e5:30:21:6f:8c:
d6:70:10:da:7a:d5:a8:af:ea:75:cc:ef:fd:2c:24:75:37:04:
02:7d:7e:6e:81:ff:5b:25:e3:e4:57:7d:25:55:85:41:73:f4:
fb:69:23:46:f5:41:51:f0:c5:41:76:45:13:10:c2:89:02:5d:
c8:e9:21:e8:85:c0:b8:71:b1:a6:5a:f8:00:ed:b1:74:c9:aa:
9a:40:7d:d6:9c:ab:aa:04:2f:df:da:aa:ce:c8:95:ef:d9:0c:
3d:e9:ae:90:4c:2a:d8:67:5e:97:13:73:25:6c:3a:5d:f9:1d:
d6:44:fe:64:a6:f6:b9:ff:d5:f6:53:af:20:db:31:dd:87:79:
37:ef:18:61:b8:f7:f2:5c:27:ed:ed:8b:95:e7:5d:20:d0:a4:
80:1d:0f:3e:eb:de:81:55:6d:19:f9:d3:cc:fd:b0:c0:76:91:
b4:9b:86:c2:a5:27:74:66:f2:15:c8:de:31:5e:18:fd:b2:94:
9b:66:0a:32:9b:0b:f9:4f:c2:90:3b:45:47:69:4a:b8:d6:4c:
1f:13:52:07:57:6b:a7:53:4c:a7:85:20:fb:3c:9a:0b:c6:ce:
41:f7:d8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:48:43 2026 by rpki-client