
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a04ec450-ea34-47bb-8591-c3db8cfa73f5.roa
File: a04ec450-ea34-47bb-8591-c3db8cfa73f5.roa (raw, json)
Hash identifier: zCmF67G56OffMVfdVCAIcV9u1VErVPhiOxiAAx3xtew=
Subject key identifier: BF:9A:39:2F:FA:90:B8:22:3F:1D:15:E9:1F:29:56:9C:28:27:E8:A6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3558048DE95575C2DC44DA33CC54E9EFB748517E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a04ec450-ea34-47bb-8591-c3db8cfa73f5.roa
Signing time: Sat 16 May 2026 00:31:26 +0000
ROA not before: Sat 16 May 2026 00:31:26 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 110.239.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:58:04:8d:e9:55:75:c2:dc:44:da:33:cc:54:e9:ef:b7:48:51:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 00:31:26 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=f2c939904270b54297357ea2350d3d5d68f5cefad7d6143051048734af490e5d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:01:7c:33:a8:72:58:e3:42:fd:80:6c:cc:
89:a7:d1:9a:4c:1c:75:56:ba:3b:66:fb:1e:49:b3:
a8:01:e5:50:c5:71:5b:d0:d6:81:d9:5d:18:40:0c:
c9:54:d8:ea:49:b5:da:2b:65:18:2f:19:a9:61:a0:
3c:12:e2:28:ee:2d:5e:82:ef:41:84:e8:b1:30:9f:
75:c5:81:0f:09:3a:cb:52:44:b6:2c:74:62:0e:44:
7f:56:e4:8d:d5:17:dd:4a:53:ff:e9:10:e8:10:11:
a6:ab:dd:dd:f1:5f:5a:06:43:c2:ca:f2:67:4f:fc:
07:47:20:61:0e:6c:5d:e7:39:4f:b6:b3:bd:30:df:
b6:5e:cd:a2:1d:3e:04:1e:a7:70:93:ad:f1:c9:59:
78:01:4a:ef:57:c4:f1:1d:28:1c:82:ba:f9:5a:d2:
41:83:cc:c8:16:bd:15:6c:7e:90:5d:45:1b:e8:ef:
87:9c:92:c0:30:56:19:73:56:e1:4e:b6:48:5d:52:
a7:aa:64:84:c1:4a:18:6b:6e:07:f4:ed:66:5f:1f:
48:bf:74:71:71:48:90:93:f8:e4:97:aa:ac:17:1e:
fd:e1:f7:be:a8:9f:12:04:2c:b1:b0:bf:88:1d:2a:
cf:d2:d6:69:f3:38:67:51:86:33:66:a3:50:44:ec:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:9A:39:2F:FA:90:B8:22:3F:1D:15:E9:1F:29:56:9C:28:27:E8:A6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a04ec450-ea34-47bb-8591-c3db8cfa73f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.239.14.0/24
Signature Algorithm: sha256WithRSAEncryption
90:54:ec:52:16:97:1e:d7:fc:0d:cf:59:ac:f7:f7:fb:ea:f2:
d4:0c:7f:00:89:9f:db:2f:12:39:14:8b:69:18:e4:6a:89:90:
71:89:a1:f1:1e:23:f0:a5:88:6e:aa:ec:f8:6a:08:d3:b0:48:
e4:43:5e:1c:0b:3a:d0:2b:03:c3:35:74:55:1c:3b:47:f6:a1:
76:d6:b9:86:b4:cf:b3:95:76:59:df:09:3b:b6:97:4c:e2:a6:
f2:68:52:06:d9:63:10:24:79:21:07:cb:48:3e:df:08:7a:f1:
ca:62:49:6e:23:25:28:80:f9:fd:77:9f:82:a3:24:04:4d:de:
e2:82:f5:b0:f5:d9:5b:53:60:4d:a1:b0:a4:82:3f:2e:54:b0:
1d:bd:d4:19:c7:40:ef:d6:0e:9a:6e:ae:50:ec:fc:f3:24:28:
e5:fd:e1:89:d3:eb:c0:12:84:b8:d3:28:fb:e4:ad:7d:8b:4e:
c5:36:43:43:66:c5:e6:e8:a3:25:75:77:1f:73:74:99:5b:ea:
c9:f6:18:2f:61:a2:cd:17:c2:f8:b3:24:0d:96:67:b0:0b:8a:
b1:b3:2f:50:ee:6e:3f:71:cd:fe:f5:bc:ee:fd:35:76:bb:39:
9e:39:6f:e9:3e:a4:ea:62:a4:b5:e1:f9:45:1d:17:d3:4f:2d:
53:49:88:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:48:14 2026 by rpki-client