
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9203741d-f57c-4cc6-ab8e-bbe85f4f794c.roa
File: 9203741d-f57c-4cc6-ab8e-bbe85f4f794c.roa (raw, json)
Hash identifier: SLafT7t9IQlYWyX1v44Py02LXOgR4s8btc/8cP5Rvnk=
Subject key identifier: C6:7E:85:EF:78:21:69:E6:05:65:23:8C:6F:B1:F9:04:86:66:97:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 560EC1E06B3B0B425CF1B1732FB9A06533F0C235
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9203741d-f57c-4cc6-ab8e-bbe85f4f794c.roa
Signing time: Tue 19 May 2026 00:41:00 +0000
ROA not before: Tue 19 May 2026 00:41:00 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 110.232.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:0e:c1:e0:6b:3b:0b:42:5c:f1:b1:73:2f:b9:a0:65:33:f0:c2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 19 00:41:00 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=db9deed0430374d379113eaf92e2904da8d00b7a0885824309e28229689532ea, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2b:2c:ee:c0:ad:10:a7:c6:6f:8b:3d:11:bb:
cf:35:f2:3c:f9:06:34:24:39:09:41:74:41:81:3c:
93:40:78:e5:d1:2c:61:56:60:2a:57:36:d9:40:3c:
1f:dc:a3:da:69:6c:36:47:0f:c6:2a:b9:48:5f:b7:
f3:93:68:1f:44:1b:88:4e:12:a2:b3:64:1e:b3:15:
8c:ad:02:cf:80:7d:36:f8:e2:fd:66:68:94:a5:03:
c5:42:3d:93:da:3f:16:27:23:fe:46:92:77:53:e6:
18:34:e3:61:8b:17:62:e2:26:ff:19:e0:ba:88:3c:
e6:db:55:bb:76:53:ec:69:e1:20:a6:94:99:b6:2f:
1e:dc:41:d8:4f:5f:b9:f9:12:98:1d:28:de:12:e3:
3c:02:b7:80:36:1d:9c:0d:d5:08:74:aa:8b:80:a3:
d4:5c:e3:1e:6c:b4:04:5d:7b:a2:f7:82:f5:eb:15:
20:f5:70:70:b4:de:d2:6e:cb:20:c3:95:0b:d1:dc:
09:63:d2:e1:dd:06:ce:ab:f8:41:2a:c3:15:57:5b:
4a:87:da:c2:66:63:c2:8e:ec:18:c6:0a:92:86:5e:
b0:c0:3d:5b:a9:2d:75:4d:ec:5d:27:00:65:13:d3:
9b:05:60:3a:08:a3:51:8d:7e:7b:d1:62:54:63:2f:
da:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7E:85:EF:78:21:69:E6:05:65:23:8C:6F:B1:F9:04:86:66:97:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9203741d-f57c-4cc6-ab8e-bbe85f4f794c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.232.149.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:fa:c7:e6:11:a6:ee:54:0d:b8:cb:fd:15:df:2c:1c:e9:97:
12:c2:d9:a5:e6:81:bd:07:00:43:b9:44:9a:96:22:6e:a5:d0:
1d:dc:e5:17:81:94:58:2c:78:7d:23:d6:b8:c3:1b:38:02:74:
10:3d:5e:0a:3f:f7:82:8f:6e:9f:84:cd:53:3c:81:57:9c:59:
60:fb:53:2a:f3:d0:ba:9b:03:d6:81:1d:06:75:9a:6f:40:94:
8d:1b:98:72:cd:28:03:9c:71:c8:1f:c6:5a:68:65:42:27:8c:
cd:04:bd:74:e8:29:1c:fa:3a:48:fb:fc:e0:c6:a2:ad:70:f5:
92:f7:12:af:eb:54:d4:c1:26:71:71:47:12:5f:35:a2:7f:ce:
cf:7d:a0:a8:6f:1f:b1:11:36:08:7f:32:bb:76:07:98:f4:90:
0b:66:f7:4b:3b:32:2b:6e:dd:99:a6:96:d8:74:50:26:cd:f9:
a3:26:57:d2:08:96:e6:1f:7f:9f:08:5a:6e:ae:55:29:eb:4a:
f2:b0:bc:44:15:3e:00:b7:dd:d9:10:2b:87:bb:f8:ba:06:5f:
e6:d1:b4:20:28:38:7b:ba:ad:ed:98:dc:29:92:c2:05:65:b9:
9f:bf:a9:0d:b9:2a:1d:f6:8b:97:c7:60:7f:b7:d6:c6:19:9b:
ca:0d:7e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:52:03 2026 by rpki-client