
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efa02ad7-03c9-45df-9c45-80b0cac72268.roa
File: efa02ad7-03c9-45df-9c45-80b0cac72268.roa (raw, json)
Hash identifier: 7Npn5hRYwQKCIxqpTqmEVu5CRXuUqITBehPc2uEF2H8=
Subject key identifier: 60:98:97:64:FB:8C:C7:2A:BE:05:8C:9D:53:A3:93:16:A2:B6:90:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6C131503B15B228283BCD4554F1B7B7766A12CBD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efa02ad7-03c9-45df-9c45-80b0cac72268.roa
Signing time: Fri 09 Oct 2026 01:10:15 +0000
ROA not before: Fri 09 Oct 2026 01:10:15 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 136.18.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:13:15:03:b1:5b:22:82:83:bc:d4:55:4f:1b:7b:77:66:a1:2c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 9 01:10:15 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=13c04105033f6ce8ef0a9c2405c113235e72504cf9fa826281f4a18ba319e473, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:4c:8d:e4:34:26:44:88:47:1b:0d:f6:96:
c4:88:3a:39:2d:97:91:16:de:3a:40:3a:20:16:bd:
27:b4:42:e3:55:2f:a4:9c:ba:ce:d4:72:fd:5e:3a:
16:03:12:ed:a2:ad:ad:26:e8:6e:1f:da:de:9b:c1:
c9:78:76:79:72:31:67:40:67:8d:ec:ac:fd:7d:05:
b8:33:5f:95:c5:11:7a:9d:43:3f:ed:34:3b:2a:e4:
05:9b:f5:b8:2a:fd:41:7a:25:96:44:b3:09:c5:68:
df:a0:5f:93:37:df:f0:53:f4:bf:d0:72:82:99:d3:
43:bc:72:d1:33:82:fd:c0:0e:2d:a4:95:7e:b0:a5:
96:ac:c0:39:9d:f5:22:95:46:df:e7:38:51:f9:c2:
c5:a8:74:c3:45:b0:e8:21:26:0f:5f:6d:65:bb:88:
27:21:4f:13:c4:de:1f:0f:c2:d0:9d:b3:fe:5f:90:
ab:46:7f:91:66:40:5f:3a:91:21:1d:0b:1b:9c:a1:
05:4b:fe:1c:7c:e3:8f:0a:4c:42:66:ab:01:d0:ed:
c3:8f:07:d0:d1:66:44:2a:05:a4:e7:62:0d:3d:de:
00:04:8c:ef:71:11:4a:16:9f:a4:8d:35:e5:5c:ed:
68:f0:1f:d1:a3:ea:d0:03:1f:cc:1f:4d:a5:4c:03:
fa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:98:97:64:FB:8C:C7:2A:BE:05:8C:9D:53:A3:93:16:A2:B6:90:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efa02ad7-03c9-45df-9c45-80b0cac72268.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.18.130.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:be:df:bc:92:01:5a:49:bb:a5:b3:ca:97:f8:7d:1c:d3:f2:
51:b2:96:6f:68:3b:c8:ef:d9:b6:7c:a6:35:bf:04:ec:6c:59:
4f:e6:51:e5:67:39:17:0f:ac:1c:27:f8:0e:dd:04:34:50:69:
d4:fe:d8:72:df:1f:bb:53:34:4e:4f:e8:d7:37:d8:2a:4b:7e:
de:6b:35:56:1a:5d:09:9d:9f:76:22:50:db:2d:27:34:a3:bc:
89:58:96:d6:1b:65:00:b6:b5:51:36:da:d2:6a:11:0e:d1:5d:
7b:43:91:58:ec:04:d0:d6:e0:f8:c6:5e:29:95:06:12:91:2a:
0b:e0:2a:ff:83:0d:e8:cf:3a:43:17:04:5f:10:7f:a4:b8:cd:
10:88:d8:5c:54:42:3b:d4:35:71:f8:3e:c6:64:b0:c3:88:30:
b6:7a:8c:5c:c0:23:b6:59:b3:7c:96:b9:25:bc:a7:3b:d8:f5:
86:9c:13:78:9b:a9:3a:1f:ba:3c:91:da:22:b0:61:48:b9:cc:
86:94:b7:ca:4e:ea:09:c5:8c:9c:60:01:59:3c:0f:be:9f:22:
4d:f9:26:6e:87:00:bb:70:1e:40:3d:b5:ba:1b:2c:d0:0a:9e:
1b:26:68:d4:56:ab:21:1c:ff:5d:38:a9:74:44:4f:fe:54:8c:
5a:32:0d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:51:06 2026 by rpki-client