
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9efa147a-8234-4801-a8dd-96fc19dc752f.roa
File: 9efa147a-8234-4801-a8dd-96fc19dc752f.roa (raw, json)
Hash identifier: FTp9p7kauVQXFypy06H9Kl/KHLabVFKo61LgrBIIF88=
Subject key identifier: FD:43:33:56:52:1D:F4:B3:49:AD:51:D1:83:9A:AF:74:FB:2C:A5:4A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E1FABEE9F5CD8500D53FB488233DB990F505E88
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9efa147a-8234-4801-a8dd-96fc19dc752f.roa
Signing time: Sat 16 May 2026 02:21:13 +0000
ROA not before: Sat 16 May 2026 02:21:13 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 119.13.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:1f:ab:ee:9f:5c:d8:50:0d:53:fb:48:82:33:db:99:0f:50:5e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 02:21:13 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=80815513b6ea6f31207646d769e9fba3e50054112e5be1d5b6795a1832c018a6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8e:76:eb:79:fa:b6:2c:4d:c5:26:c4:f3:d8:
2e:3b:73:32:23:db:c4:71:0b:f9:6c:62:6f:63:86:
b9:34:dd:6a:a7:85:52:ae:11:d2:41:17:bb:05:b8:
88:72:92:32:09:e7:ff:29:ef:59:44:39:b4:bc:82:
fd:a2:07:35:54:76:d1:a7:25:e7:f1:77:2a:7f:43:
4d:e4:d3:6b:38:28:01:c0:2b:57:58:f1:b6:4f:6b:
0a:02:1b:d2:ee:a2:d9:dc:bd:64:ff:7b:24:dc:00:
de:0f:85:c0:21:81:70:44:f2:26:2c:55:b4:0c:73:
54:57:5f:fa:2f:e6:19:96:60:0a:38:45:16:57:90:
9d:35:c8:5a:3d:8c:39:69:24:e5:37:2f:e2:db:83:
ef:fe:0f:81:19:d4:24:15:b0:af:25:a8:19:a7:5d:
bf:b6:1d:01:17:d9:ec:27:f3:e3:d8:eb:8b:e1:dd:
4b:73:45:23:27:77:b2:16:32:57:80:be:f5:67:62:
72:b3:84:6b:c8:23:d2:b8:ca:5f:d6:9e:eb:0c:a7:
58:ab:f3:ab:9e:70:e8:67:a4:1e:55:4c:e1:e4:6e:
cc:c1:f9:55:bb:ec:6c:0c:da:ed:26:ff:bd:44:91:
05:dc:b1:02:91:de:2f:7e:c0:72:1c:62:34:fd:56:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:43:33:56:52:1D:F4:B3:49:AD:51:D1:83:9A:AF:74:FB:2C:A5:4A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9efa147a-8234-4801-a8dd-96fc19dc752f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.13.11.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e1:d5:97:53:5d:2a:76:09:65:e1:49:19:55:9b:16:31:b6:
68:8e:4d:40:c0:89:ad:53:6b:7d:f0:78:90:8f:f6:50:ce:0c:
d9:5e:be:a7:a7:31:b2:8a:7d:0f:a2:04:8d:10:3b:a1:b3:44:
f2:99:47:59:88:54:15:58:3f:cc:ed:69:83:f0:36:de:cf:c7:
46:c4:9e:94:55:d3:60:1b:b4:b1:d3:98:51:f4:23:ad:20:1e:
8f:08:f7:87:53:94:75:2f:fd:de:54:c2:05:d6:78:8c:d1:c0:
1a:9e:46:f9:98:6b:76:31:79:e5:1c:ff:cb:d4:12:01:48:42:
a0:e5:24:01:5d:a3:f3:75:31:69:58:9e:42:2a:93:a8:9b:bf:
3e:63:b2:c7:1b:01:1d:4f:94:cd:8d:6c:b4:36:1f:f3:10:6c:
39:47:70:2d:26:35:02:bf:09:73:5c:12:59:24:4a:36:12:56:
fc:8b:da:6b:dc:ce:22:bf:2a:53:48:ef:45:9d:eb:e3:7a:87:
a4:a8:e6:af:13:ee:11:b3:e4:93:c8:51:43:c7:a5:3c:46:9f:
5b:6c:f7:57:ea:ba:79:15:32:44:9b:9b:e6:49:28:bd:8c:d3:
5d:f5:cf:a7:30:1d:e5:21:27:43:81:3d:d3:0e:19:83:b7:a7:
51:aa:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:51:14 2026 by rpki-client