
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85efd99c-d039-43f3-925c-ade89132f2cb.roa
File: 85efd99c-d039-43f3-925c-ade89132f2cb.roa (raw, json)
Hash identifier: 55iuQGrPf0RH82Td3TPuKVSIbKGaiJCWL//6TKV9El4=
Subject key identifier: 1A:99:45:97:E7:7E:19:90:B7:5C:58:85:EB:B2:B3:E1:70:C9:95:3D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7A851876132F6CF684BE925BAA45C8A1BBFB3DF5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85efd99c-d039-43f3-925c-ade89132f2cb.roa
Signing time: Wed 13 May 2026 21:06:08 +0000
ROA not before: Wed 13 May 2026 21:06:08 +0000
ROA not after: Tue 11 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f61:e008::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 18 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:85:18:76:13:2f:6c:f6:84:be:92:5b:aa:45:c8:a1:bb:fb:3d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 13 21:06:08 2026 GMT
Not After : Aug 11 23:59:59 2026 GMT
Subject: serialNumber=e63c7e5a85137a5272a9d2c446eead85a68da415ddff0220d884831b4acccaf0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:79:7d:13:ee:2f:4f:b6:df:a2:80:f3:a6:ab:
5c:86:0e:c4:db:c3:2c:fc:18:f7:9f:b7:33:46:c2:
46:d1:79:5a:9d:e1:8c:d2:ca:57:30:14:44:0d:7d:
c0:3b:d7:06:8e:42:fa:58:eb:78:a6:0a:d5:17:47:
19:5a:bf:bb:a1:1e:dc:db:a3:ad:e4:39:f8:c4:35:
fa:f5:30:4b:f6:47:b7:ca:87:b9:2b:6b:df:31:0e:
ec:24:87:78:75:9d:38:83:a6:5a:aa:6d:bf:07:66:
20:c0:49:56:88:14:4a:25:f7:98:07:dc:6e:4f:d1:
3e:92:38:c4:96:0c:24:c7:ca:1a:e7:6c:4d:5c:3c:
83:18:97:11:86:41:d7:44:2f:a9:ab:53:74:f5:96:
2f:57:6a:27:4f:26:fa:25:83:82:fc:c1:e3:bb:db:
62:21:85:d6:56:9d:14:28:50:af:d1:97:dc:6c:cd:
c9:75:6a:4f:45:db:30:80:9a:2b:a5:bb:9f:ea:e0:
64:28:7f:1b:2d:f0:0f:31:96:94:14:29:1f:28:9c:
d9:2a:57:17:be:1a:ef:73:00:06:36:03:bd:94:49:
6a:7c:1a:05:e3:f3:1a:6f:e1:ee:83:51:d3:64:e5:
bb:2a:ab:06:07:79:f3:33:c2:95:bc:a8:41:84:9a:
c6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:99:45:97:E7:7E:19:90:B7:5C:58:85:EB:B2:B3:E1:70:C9:95:3D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/85efd99c-d039-43f3-925c-ade89132f2cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:e008::/46
Signature Algorithm: sha256WithRSAEncryption
69:c9:6d:fe:2d:6f:12:df:65:ce:74:08:1b:ec:a7:90:6e:97:
d0:96:39:f0:f6:f2:8a:a3:7d:28:b7:89:74:b0:87:34:05:18:
10:ac:f6:32:df:77:d8:86:ad:0b:0d:49:20:a7:30:31:c9:79:
09:d4:5e:ea:5a:fe:76:58:75:2f:c7:5f:86:b5:13:8c:7f:ea:
14:b4:36:70:e9:41:29:7c:90:16:11:00:d3:85:78:70:7d:14:
b4:9d:7f:e5:7e:77:d7:35:84:8f:f0:6c:03:db:74:2b:8d:b7:
06:28:bf:e0:1b:12:7e:af:f4:17:0d:02:4b:9b:22:50:2f:ae:
b4:e0:73:ef:b0:7a:c0:ed:30:88:fc:f5:31:60:2b:7d:e8:23:
b0:de:09:cc:e9:87:df:65:21:73:b9:20:05:06:ee:49:a9:2f:
ac:7b:e8:95:e8:ba:cb:15:cd:bc:f9:00:9e:58:0d:6f:3c:d6:
f8:75:6c:a7:05:b6:d9:d0:1f:7a:ea:dc:24:0f:9e:7f:54:2f:
53:20:d1:0d:cd:98:b4:cf:53:ba:63:1b:e3:b6:4d:25:8f:9f:
3d:c9:4c:49:44:28:ab:be:12:d4:e8:b0:ad:fb:4b:3f:8b:c6:
78:5f:54:08:cf:be:67:8b:34:aa:d4:c9:86:cb:1f:e6:a1:ae:
d9:cd:6d:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 17 05:02:25 2026 by rpki-client