
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3283a168-489e-49fe-839c-d518cd5c1699.roa
File: 3283a168-489e-49fe-839c-d518cd5c1699.roa (raw, json)
Hash identifier: /lHmJ6XXzNjuuByioQ+kbWvYI6fQdAx9fXSvVtCSfCI=
Subject key identifier: 86:50:62:48:B7:95:43:39:AC:77:16:1D:5E:2E:7F:D2:4A:1F:F5:A1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4C75FCF55A1E04138539D3A97A7DC21F8EB8D35A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3283a168-489e-49fe-839c-d518cd5c1699.roa
Signing time: Thu 22 Oct 2026 00:51:01 +0000
ROA not before: Thu 22 Oct 2026 00:51:01 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:80b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:75:fc:f5:5a:1e:04:13:85:39:d3:a9:7a:7d:c2:1f:8e:b8:d3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:51:01 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=42aa04b51a6003d22803528442b699a6eaa6d377446d422da71c83ec3464e50e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9e:05:8b:0c:ba:97:38:7f:16:9f:95:53:7a:
e3:b4:0e:b1:8d:8f:e9:c0:72:b3:23:2b:0f:dc:dd:
ff:67:44:dd:c3:d5:84:69:ce:52:ac:1f:6d:13:41:
c9:31:d6:44:61:dd:79:c3:e4:fe:96:57:f9:97:36:
f3:a0:aa:a5:d1:8f:9e:4b:bb:f1:d7:94:6d:28:28:
82:8e:7e:8e:27:74:88:38:f3:56:ae:66:af:66:7e:
66:71:7c:5a:ba:d3:0c:65:58:16:b8:0c:28:40:a0:
4e:e3:14:72:31:92:94:f8:3f:df:b8:28:60:0d:21:
11:45:15:b1:60:be:50:8e:16:82:fc:8c:83:88:1b:
5d:25:d4:1b:49:0b:5d:9f:b4:6a:ec:ec:c3:cc:a8:
42:86:bd:43:aa:55:2d:e2:d1:d6:1e:f8:0d:4b:63:
ee:ea:b7:ba:d4:67:6e:0f:a3:a9:0d:46:ed:5c:0d:
15:75:18:fd:c8:e4:af:0c:a3:cb:4c:d0:33:0d:bf:
cd:1f:b5:38:d6:ed:50:ec:ea:db:98:ab:95:33:2b:
c7:b6:3e:da:3e:b5:fc:79:2a:d2:cd:98:4b:73:40:
37:fd:20:68:68:c2:88:ad:45:ec:e6:23:84:e2:b5:
37:9e:fd:c2:35:0e:97:da:d8:a8:b3:15:b0:fb:92:
a2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:50:62:48:B7:95:43:39:AC:77:16:1D:5E:2E:7F:D2:4A:1F:F5:A1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3283a168-489e-49fe-839c-d518cd5c1699.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:80b0::/48
Signature Algorithm: sha256WithRSAEncryption
cf:60:d9:25:54:56:e7:b4:a8:3c:84:7f:2d:2b:92:6d:a8:22:
fe:48:6c:bb:fa:42:a5:f2:80:8b:b3:3c:d9:d4:6a:b3:bf:66:
5b:33:70:0c:d0:e0:28:1d:28:ab:a3:21:a0:54:1b:b4:2a:42:
f6:f6:b8:10:c1:ca:28:ec:9f:98:d5:86:25:61:3e:80:6e:e8:
e0:f4:bb:c7:14:a6:aa:5e:aa:e5:a3:ed:83:c6:69:4e:1b:f4:
0f:fd:ac:44:55:d4:6c:42:6f:1c:7f:f2:51:8a:4f:ac:92:2a:
5f:b0:0e:b6:81:01:5c:be:a4:0c:88:1e:4d:ee:e1:d3:6f:3c:
28:ee:b4:95:95:6d:37:8a:11:0e:74:fa:8a:27:4f:05:ff:cf:
2d:2d:9d:a7:03:57:6f:0d:f3:62:77:24:41:44:7c:40:96:4c:
df:fa:b4:a9:f9:f8:85:2a:a0:09:63:60:8e:40:c8:16:84:a5:
25:0c:92:91:20:4c:6b:68:2c:89:33:54:83:9e:ac:35:3b:05:
06:08:cf:e2:a6:75:d0:74:5a:b8:4b:55:c7:9f:bb:9e:b3:36:
21:08:2a:4c:8c:f5:f4:30:cc:be:29:9b:08:1f:c2:f1:6d:28:
48:89:e1:82:02:e0:c7:b7:2f:05:d9:ec:68:1c:19:fc:80:73:
d9:b4:17:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:07:19 2026 by rpki-client