
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20bc2686-ecbe-4028-a625-050eb5987b44.roa
File: 20bc2686-ecbe-4028-a625-050eb5987b44.roa (raw, json)
Hash identifier: WEWuuM71VCy4hFfqclC0CywV7iTo7HXLVa0zTwDf1SI=
Subject key identifier: BF:40:29:0A:99:E1:EF:B6:55:A0:80:15:DC:65:51:02:01:8D:AB:D1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06E900497516B0B23589964B2A83B81D47AA8946
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20bc2686-ecbe-4028-a625-050eb5987b44.roa
Signing time: Thu 22 Oct 2026 02:11:45 +0000
ROA not before: Thu 22 Oct 2026 02:11:45 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:e9:00:49:75:16:b0:b2:35:89:96:4b:2a:83:b8:1d:47:aa:89:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 02:11:45 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=6f055294ff2db013948499a4e2d77c87b89b5f40c256df17e2cc331e055a09c5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:ef:f0:33:46:52:0a:24:bf:1e:0f:52:ba:
04:7e:99:ea:e0:46:c5:06:c2:bd:e1:e3:89:e3:b6:
2e:b9:db:6b:91:95:69:b3:b8:86:fe:b6:d7:bd:6f:
fc:29:e2:2f:6a:2e:f8:b2:2b:e1:a3:ea:a0:2f:26:
2d:41:bc:89:1a:2f:51:4e:63:ea:95:62:23:aa:6a:
08:d8:90:1f:96:41:4a:e7:e9:f0:48:8e:b7:fa:05:
e4:de:83:22:62:9c:ce:4b:a8:4d:49:03:fb:54:c5:
08:62:52:95:02:db:20:55:79:41:1f:8d:2f:c3:45:
61:bf:61:d2:30:ad:f1:c4:f7:8a:f9:c6:b9:1f:6f:
69:ee:aa:4e:66:ce:54:ec:d0:3e:ec:cf:76:7b:d8:
20:c1:e7:b6:4b:be:7f:55:91:5d:28:19:78:15:36:
2a:65:88:bc:44:62:7b:0e:c3:fe:41:94:8e:29:93:
4f:5c:4a:6e:ba:fc:b3:ab:d7:9f:42:9c:f7:58:8b:
dc:26:c8:b7:9d:75:00:aa:42:dc:f0:64:c8:3e:3c:
ac:19:69:bd:3c:f3:52:fc:fc:d6:8c:3f:30:9f:48:
f4:7e:3b:f9:e2:26:e4:41:d3:86:b9:6b:76:91:64:
36:17:ac:62:36:cc:19:8b:c9:74:6e:2f:72:7b:12:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:40:29:0A:99:E1:EF:B6:55:A0:80:15:DC:65:51:02:01:8D:AB:D1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/20bc2686-ecbe-4028-a625-050eb5987b44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:6040::/48
Signature Algorithm: sha256WithRSAEncryption
ba:fa:09:5a:3a:73:8e:37:2f:be:4e:bb:f3:fe:5a:32:bc:28:
13:57:d5:2a:15:5d:b7:c1:96:5b:46:8f:e9:e4:59:e9:a2:2c:
9a:37:e4:fe:f7:28:d6:6f:63:cf:8a:95:3e:fd:fc:ef:0e:f9:
dc:de:cf:d4:c2:a2:d6:e5:45:5c:a2:e6:50:87:98:b5:83:74:
e4:23:ae:e2:02:e7:3f:98:92:06:e5:09:b1:a2:0e:f0:ee:82:
76:6b:d3:62:12:19:c4:84:90:7c:be:ba:ac:32:82:32:3b:9a:
44:4f:60:8c:7a:f7:90:d3:79:fc:89:a8:03:ab:44:5d:97:8c:
28:bc:a9:3d:92:c2:d3:96:01:c3:f7:5b:6f:1e:e0:e2:d2:31:
73:6a:59:ff:6a:0e:11:66:2a:92:b1:46:94:80:d5:1c:47:83:
2a:eb:f1:64:a7:c5:38:45:7d:f4:2e:a7:fc:31:42:d6:b2:9a:
7f:99:79:fc:48:a6:59:6e:56:26:52:c6:76:c5:f8:87:bc:aa:
64:84:d7:8d:eb:b4:50:b3:db:88:89:47:e7:17:1b:bc:0a:cc:
69:e7:3a:ba:ab:9c:c4:61:32:d4:91:6f:42:a1:74:cd:9f:bb:
d5:31:a7:a2:77:63:b8:2a:1c:01:c4:51:51:5d:fe:4f:e8:c7:
9c:18:6e:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:07:25 2026 by rpki-client