
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30b2f28c-86cf-492f-8dfc-8cacff8f8955.roa
File: 30b2f28c-86cf-492f-8dfc-8cacff8f8955.roa (raw, json)
Hash identifier: 4KzeLXM7WNf8Olsh3X2Kl3lWRl/HCu3bth+cVKIxZd8=
Subject key identifier: E9:EC:6A:80:62:25:2B:11:D6:94:49:58:D3:F5:CC:4A:32:4D:74:72
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 193A55D9A541994E2E5A4FD35EB02F91A7C9753E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30b2f28c-86cf-492f-8dfc-8cacff8f8955.roa
Signing time: Mon 19 Oct 2026 00:30:48 +0000
ROA not before: Mon 19 Oct 2026 00:30:48 +0000
ROA not after: Sun 17 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffb:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3a:55:d9:a5:41:99:4e:2e:5a:4f:d3:5e:b0:2f:91:a7:c9:75:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:30:48 2026 GMT
Not After : Jan 17 23:59:59 2027 GMT
Subject: serialNumber=434a47fe9465bb31dc0226f94af6008bac4c3916866b6406b032266130eca608, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:9b:d7:27:9e:3d:6c:95:48:46:49:c9:8c:
9c:3c:68:97:ce:00:6f:b0:d8:0e:45:6f:99:e8:40:
6a:12:74:84:ee:a4:51:56:82:1c:56:61:a5:1e:b5:
f0:2d:7c:2b:51:c0:7c:a3:61:f4:2b:87:c6:3b:c0:
b2:b0:82:37:43:6e:b6:06:1b:cc:67:e2:63:ad:21:
fd:36:b3:8f:c3:14:ca:ee:14:a9:66:5f:8b:61:fb:
1e:63:91:43:1f:d0:ef:09:e7:61:5c:06:1e:13:19:
47:a2:c8:b7:29:e8:63:53:82:84:86:08:0c:c3:0f:
b3:71:0a:ba:5a:32:a8:68:9d:b0:cc:11:ae:b7:cc:
f8:3d:5f:ac:73:c2:66:b7:3f:c4:2b:e3:3b:1a:a5:
03:e9:f4:7f:aa:73:b7:1e:f4:f8:8f:9a:be:f5:72:
c9:aa:9e:64:a0:96:4a:6f:a5:b3:a3:4e:2e:cc:68:
43:49:21:be:b1:3d:ce:24:0c:93:e7:86:41:aa:1c:
3d:74:d7:64:32:22:9e:94:93:55:4c:e3:04:c9:71:
88:79:4b:6f:30:2f:22:63:04:b4:2f:15:14:1e:72:
52:98:77:5a:7b:ca:fc:06:40:3e:23:10:e5:c7:ab:
08:62:77:6f:56:fe:f5:dd:c6:c4:b5:0a:6c:cc:11:
79:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EC:6A:80:62:25:2B:11:D6:94:49:58:D3:F5:CC:4A:32:4D:74:72
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30b2f28c-86cf-492f-8dfc-8cacff8f8955.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:6000::/40
Signature Algorithm: sha256WithRSAEncryption
87:7c:4f:3e:cf:c6:08:69:3a:a5:e0:c8:b0:40:d2:95:41:43:
59:3d:9c:f1:9f:a0:7a:7c:93:98:40:a9:3d:78:10:97:a4:a2:
b2:2d:b5:26:21:19:a6:36:9e:90:fd:14:77:7b:3b:b8:c5:9b:
b8:c0:a9:5e:3f:b2:bd:0c:8e:33:8a:fc:28:6d:3c:cb:d9:9f:
49:b7:72:52:f9:86:2c:25:a8:af:a3:6b:94:60:49:0e:2e:fd:
7f:ba:9f:21:7d:0e:f4:36:37:d0:2b:02:9f:e4:30:32:fa:43:
b1:4d:2e:13:11:3f:98:d9:26:46:32:88:4d:25:5a:4b:86:4f:
ab:3d:77:7f:74:4f:2b:63:1f:35:5d:3a:e5:92:0f:e1:8e:de:
93:80:72:fe:1b:28:06:70:85:9b:59:77:82:d1:4e:28:e5:90:
86:a0:a1:b1:b6:47:78:13:52:2f:32:2f:72:dd:89:68:28:34:
3e:73:ad:82:d7:7d:3e:87:b5:a5:d0:c6:16:c0:9f:aa:79:2c:
35:9c:20:cf:9a:53:a8:6e:76:c5:d5:08:af:b6:73:78:21:1d:
4d:41:a9:56:27:1b:4f:4b:c9:66:a5:b4:35:db:a7:2c:39:65:
7d:aa:1b:19:f8:55:57:f9:16:42:01:8d:33:5c:c9:35:de:52:
5c:34:02:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Nov 3 19:20:09 2026 by rpki-client