
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b6d433e-ba0e-4da5-a7f4-2226623999ff.roa
File: 0b6d433e-ba0e-4da5-a7f4-2226623999ff.roa (raw, json)
Hash identifier: 5LSFFnN1hQQpp8bAauSvvbnvoVb+DazPcwGHMFM5g3Q=
Subject key identifier: 7A:4A:80:84:73:DB:B5:9D:CA:7C:95:7E:52:6F:8B:CF:F0:65:7B:3F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 774E5DC26F18ABADE1268A1494D8BFD6AF420904
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b6d433e-ba0e-4da5-a7f4-2226623999ff.roa
Signing time: Thu 15 Oct 2026 00:07:08 +0000
ROA not before: Thu 15 Oct 2026 00:07:08 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f19:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:4e:5d:c2:6f:18:ab:ad:e1:26:8a:14:94:d8:bf:d6:af:42:09:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 15 00:07:08 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=365ba974d828555ec14bf0de173ed51587ebcbf5bfbcfccc9dfec4854f3c2a0f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:a4:ed:2e:30:a2:98:d0:72:cf:d6:ab:a0:
cc:d3:05:ae:e0:75:01:11:ab:99:4c:66:37:a7:43:
c6:27:e1:ce:7c:2f:13:db:7b:8d:83:78:19:0b:12:
5b:22:e2:a6:35:fa:06:d7:1e:e2:a3:23:13:a9:34:
4b:bc:9d:51:29:31:ab:4f:f2:4a:3a:a0:ae:13:9e:
a2:cc:e9:0c:8c:44:c4:45:9b:61:a1:bc:c5:71:07:
c7:b7:aa:79:f0:d8:b2:08:a6:85:12:39:f2:0b:a6:
97:36:dc:c7:6b:c3:0a:ab:d6:64:74:ca:90:97:45:
d0:a6:42:9a:f3:44:ff:24:79:bd:7b:c6:ff:66:4d:
ea:60:df:22:db:e4:db:bb:a2:ea:22:c1:22:f4:ed:
74:81:c9:dc:82:e1:f4:fc:98:18:e5:5a:84:19:f6:
1c:c1:1d:a8:63:42:8c:ca:0a:80:89:18:4b:6f:f3:
f4:c7:bf:22:42:f4:1b:93:eb:af:ff:4b:0e:34:93:
1d:32:d4:30:36:03:b2:ed:f0:1d:ed:50:ca:0d:99:
9c:27:ef:26:7d:f8:ed:8e:44:00:a3:6d:1e:98:03:
44:13:4e:b4:73:48:31:a7:5c:e7:c5:4e:02:78:fe:
0a:58:a4:0e:fa:1b:13:28:bb:8b:99:29:bc:5a:a6:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4A:80:84:73:DB:B5:9D:CA:7C:95:7E:52:6F:8B:CF:F0:65:7B:3F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b6d433e-ba0e-4da5-a7f4-2226623999ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f19:c000::/36
Signature Algorithm: sha256WithRSAEncryption
d4:2d:75:02:44:3e:f2:fc:53:db:94:25:28:e6:90:c8:19:d4:
3c:0f:2b:f3:1e:6d:a6:a9:c2:2f:df:05:84:e3:26:e8:34:63:
ad:1a:41:34:cb:a9:13:a7:99:59:89:dd:b9:15:85:40:6c:68:
2f:01:ba:00:88:db:eb:07:06:a8:aa:b7:d3:22:1d:fa:b8:b6:
d0:eb:45:97:84:23:38:d7:75:69:d6:da:2f:26:fd:49:38:fc:
a6:fb:cd:79:7f:e2:4a:e4:e6:22:a7:0b:7a:1b:fa:07:41:96:
16:b6:fd:0b:cd:46:a6:76:30:df:d5:2a:e5:4f:c2:a7:b3:37:
a4:a0:ce:37:0c:de:24:1b:a7:11:c0:a8:f4:cc:dd:ab:ae:59:
dd:be:a0:48:b9:13:5b:dd:e2:f0:7a:cb:fd:4c:99:70:23:a5:
9c:92:c3:20:c4:0c:a1:cb:dd:25:ac:7c:3f:43:e7:e2:6b:a1:
00:d4:b7:e7:67:6e:02:4e:c6:02:09:a9:12:23:f4:40:fc:2d:
75:84:7e:b0:9a:6c:cb:b3:f7:8f:25:a9:8c:b8:6d:88:66:d3:
54:4d:77:c2:2c:00:77:73:2e:f8:14:3f:6a:0a:92:43:66:63:
28:e5:e8:71:f0:c8:76:0f:a7:e5:38:7c:07:58:a0:15:8c:a5:
54:e4:b4:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 3 19:20:53 2026 by rpki-client