
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16fc8308-928f-43ed-85ad-9af18255d1cb.roa
File: 16fc8308-928f-43ed-85ad-9af18255d1cb.roa (raw, json)
Hash identifier: ur9mRDBCaO8rkEtb1XnYcn9MOZXq0vrI3FTRwNk8HRM=
Subject key identifier: 4F:E1:9C:47:92:4A:39:00:4D:D1:30:1F:2A:48:5E:99:FC:FB:7A:6B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5F0974AA2C6F6CAB8D1C127E7FEC8FCE804B3686
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16fc8308-928f-43ed-85ad-9af18255d1cb.roa
Signing time: Wed 19 Aug 2026 00:50:10 +0000
ROA not before: Wed 19 Aug 2026 00:50:10 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fba:a400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:09:74:aa:2c:6f:6c:ab:8d:1c:12:7e:7f:ec:8f:ce:80:4b:36:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 19 00:50:10 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=3e82acf790eec0e4ae9011dd23fa290a613bd7b74278b9fa8956c1250c52c197, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:20:6a:f9:27:c4:04:84:2c:79:54:26:18:e3:
67:b6:63:75:c5:8d:fa:07:48:e0:bd:ed:50:c2:9f:
ad:59:a7:0e:03:fd:b9:75:9d:92:62:95:7d:ed:93:
15:30:d1:90:7d:a7:e6:e7:c1:fb:f6:f9:7f:86:94:
55:82:72:6e:c6:c8:73:60:26:18:84:e8:86:01:22:
16:f2:bc:ca:c0:fb:aa:bd:78:cd:ea:c5:7f:bc:30:
bb:53:08:4e:cb:b8:32:ef:e2:23:ca:cc:b6:cb:13:
4f:1a:d8:98:3a:a7:33:a2:6c:f3:97:d2:47:f9:9c:
80:50:0e:52:e9:5e:bb:bd:9a:c2:3f:18:3b:ec:99:
a8:91:e8:53:20:dd:5e:72:ab:17:6f:79:a9:bb:99:
a1:db:01:12:33:33:a4:b3:3f:d0:06:79:19:5f:34:
a9:e9:bb:17:a3:ca:cc:3f:02:f9:cf:d1:b7:0b:25:
04:2d:99:80:ab:54:c9:96:eb:24:b0:95:ac:64:bc:
93:bb:fc:d7:ad:5e:5c:c0:06:c9:ea:c0:b2:e4:40:
dd:9e:ce:d7:ed:fa:5c:96:29:fa:f9:75:60:61:d1:
b3:fb:a0:f2:0b:9e:13:33:ab:fc:56:d8:0e:96:c0:
d4:6c:28:d4:ca:93:2b:22:3e:7e:f6:13:72:02:bf:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E1:9C:47:92:4A:39:00:4D:D1:30:1F:2A:48:5E:99:FC:FB:7A:6B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16fc8308-928f-43ed-85ad-9af18255d1cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fba:a400::/40
Signature Algorithm: sha256WithRSAEncryption
67:39:d6:b6:fe:e1:95:35:ea:63:83:01:8c:32:25:77:4f:5f:
a9:2a:21:c4:d4:c3:cf:40:5c:b5:f5:fa:54:70:b5:3b:e8:30:
86:da:a2:2e:c0:6f:31:18:91:dc:94:64:c5:79:30:2c:4f:de:
55:13:76:43:b4:49:50:17:f7:41:b6:51:c6:4a:fe:61:45:a3:
97:48:27:bf:d1:3a:95:f4:30:c9:8a:07:6b:e3:78:64:30:05:
6b:60:47:b2:6b:0d:0f:6e:17:f9:db:dd:7f:e8:56:c9:a4:a0:
e3:a3:be:39:36:fe:1f:34:74:c8:ab:50:b5:2a:6c:95:39:db:
da:68:48:f1:c2:39:89:bd:45:50:ac:3c:24:27:14:a5:49:0f:
a6:1c:d4:6b:cd:42:d1:9b:dd:7b:ed:d5:d2:96:3e:e2:83:a0:
46:2d:4b:85:bd:d6:2e:7a:41:f5:0e:72:e7:24:1e:44:2e:4a:
45:7c:a3:67:b9:e5:5f:16:29:ef:ab:c0:d1:ca:20:eb:8e:d5:
d9:4c:57:6b:70:ac:4f:0d:52:21:70:67:b7:9c:a3:48:0f:be:
4b:55:21:3a:71:ca:bd:49:c8:bf:76:2f:f1:5f:92:b1:bc:e3:
14:cd:08:86:9e:96:30:f3:ff:2c:98:f6:11:c8:1e:98:99:a1:
8d:87:df:9e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:20:56 2026 by rpki-client