
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23112326-d9b8-4adb-8d4e-0171f8a3c2c5.roa
File: 23112326-d9b8-4adb-8d4e-0171f8a3c2c5.roa (raw, json)
Hash identifier: UDqGp9HLMSDVzZhKlSqCsW2/yWMuy8XGmY8o3qiSmhA=
Subject key identifier: 26:EA:A8:76:04:D7:4C:57:93:3E:F4:84:19:DF:53:2C:E5:6A:A0:75
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 64B04E372F675DEB5966ED39D449D42376D4FFFC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23112326-d9b8-4adb-8d4e-0171f8a3c2c5.roa
Signing time: Fri 23 Oct 2026 02:02:58 +0000
ROA not before: Fri 23 Oct 2026 02:02:58 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:4030::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:b0:4e:37:2f:67:5d:eb:59:66:ed:39:d4:49:d4:23:76:d4:ff:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 23 02:02:58 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=fab0cfa88a40ad965dd7fb06805a76446427b90af2e9cc7d4f4b6a11e93a6a6f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:95:93:44:7a:2a:25:2c:41:1c:cd:f6:59:5a:
6e:b4:6f:7b:89:c8:0e:c7:0c:62:81:9d:64:2e:6a:
97:91:49:5a:08:cb:84:c8:f8:37:6e:6c:14:c5:3c:
8e:66:e9:8c:ce:0e:3f:83:26:14:ca:f7:b6:bf:a9:
2d:5b:75:3f:8c:e7:87:f7:2f:2f:75:12:b0:87:6d:
64:80:e9:a3:eb:79:fd:a3:90:08:65:ca:fa:c1:25:
5b:24:36:96:be:3b:b3:2e:78:ac:a3:66:c4:36:e3:
f8:9c:84:7e:09:35:ad:02:5c:1d:83:3d:f1:d6:39:
68:68:f5:e5:47:27:8b:d3:81:b0:a3:a5:2e:a9:62:
cc:01:06:1b:f0:c7:d0:a4:dc:dd:03:c7:cb:a6:f2:
68:4d:c9:89:0f:13:64:dc:23:05:cb:37:eb:d1:79:
76:da:51:7f:53:5d:e8:9e:da:bd:4e:ea:eb:09:fc:
5d:95:56:66:c3:b5:46:cd:25:c1:35:da:73:99:87:
46:33:e4:5a:fd:e3:6f:59:7f:0e:f2:c1:97:ef:3d:
6d:91:21:19:94:4e:14:89:8a:f8:82:22:54:13:14:
8b:60:48:38:cb:e4:fb:01:34:1e:0a:6a:47:c0:2c:
04:31:e2:57:14:d6:e9:61:7b:81:57:7d:7c:fc:6c:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EA:A8:76:04:D7:4C:57:93:3E:F4:84:19:DF:53:2C:E5:6A:A0:75
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/23112326-d9b8-4adb-8d4e-0171f8a3c2c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:4030::/48
Signature Algorithm: sha256WithRSAEncryption
d6:bd:10:92:43:03:47:0f:4c:52:56:b7:20:29:93:02:c2:e4:
42:c7:6f:ef:48:6b:90:f4:21:c0:90:c0:1d:b7:17:3f:df:a6:
f5:be:4d:74:b5:a4:fb:91:e0:ea:cb:90:0e:8a:01:fd:ed:58:
53:27:3b:35:c4:ae:44:b2:bf:5c:9c:46:72:75:5a:9f:54:27:
15:25:7f:f9:32:0d:4b:c6:c7:17:63:3c:39:b7:4d:68:39:63:
e8:d2:4c:4e:c2:39:1f:b4:fc:13:6f:a9:8d:45:06:4d:ea:1e:
e1:54:1f:30:51:68:ab:6d:5e:0a:77:a0:47:63:98:7f:5f:92:
d9:92:5f:ac:6f:7c:c7:43:e9:95:1f:44:98:b3:31:a8:c1:ac:
ee:dc:c9:0d:1a:9a:e9:f4:01:7e:74:e2:86:db:e3:5b:49:3e:
13:40:23:d9:0a:12:17:ae:15:14:ab:a4:de:a3:4b:ef:a1:6a:
d0:2d:b6:89:63:a2:f0:dc:06:ee:b4:7f:c2:15:d8:24:d2:85:
de:53:bd:4e:6c:1f:4d:fc:b4:79:b2:c2:ca:0c:b6:14:55:93:
a5:6d:34:ae:0f:8e:eb:a0:f4:37:2a:be:8a:d1:56:e3:1d:9a:
a5:a6:c9:a9:fd:ee:da:3c:72:ad:cd:15:7f:2c:c6:ba:bc:3e:
53:cc:e2:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 3 12:35:04 2026 by rpki-client