
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa
File: 36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa (raw, json)
Hash identifier: RI+2DdyyzN95rWd348fwdSVqMZKOq+U1FrWaSMrNuI8=
Subject key identifier: F9:9C:4A:71:B8:CB:15:42:0D:93:75:BF:D9:E0:80:37:6C:31:50:4B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 408775B637C037EE8121D474F73F81393437E72C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa
Signing time: Sat 02 May 2026 00:51:20 +0000
ROA not before: Sat 02 May 2026 00:51:20 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff3:10c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:87:75:b6:37:c0:37:ee:81:21:d4:74:f7:3f:81:39:34:37:e7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 2 00:51:20 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=4686466889f8ef66767fecc3b18cee4b524767f3c63f34298e795b749e95f2ad, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ba:16:d6:a9:c6:eb:59:9a:6f:1f:97:84:f6:
0c:5e:62:d0:48:34:ba:b9:e0:94:99:0e:d3:fe:d6:
b0:d8:6e:a7:e0:13:4c:66:ae:09:12:fa:1c:04:45:
30:e8:bb:dd:f5:38:a1:f8:5f:45:df:cb:cb:6e:3c:
47:f2:ec:5b:68:5c:71:76:e1:b1:c1:84:f7:38:24:
33:bd:b9:8e:97:e9:21:c5:08:29:95:d5:3b:99:e3:
31:68:98:7c:01:cc:bb:46:78:2d:b4:4d:59:3c:29:
a0:41:e8:4c:dc:7e:52:00:36:e0:de:b6:46:e6:6d:
ee:d6:94:e8:61:a5:48:6a:f3:a3:7d:78:b4:77:d3:
99:42:9b:7a:bf:ef:d9:96:a1:14:da:67:d7:fa:15:
c7:6d:45:46:52:2a:da:39:6e:d2:1a:71:c2:8b:9a:
2b:6f:0b:0d:43:30:63:8f:68:f1:e4:af:fa:d6:2c:
6a:99:e8:b5:26:ad:b6:7f:75:f3:34:08:95:2d:aa:
b3:9d:97:18:7c:d7:3b:75:2a:5b:f2:49:f6:2e:a1:
2a:3c:6c:50:5e:df:83:58:92:f5:f5:a2:5b:0b:6b:
be:e4:f9:ee:85:1b:99:99:dd:03:98:cb:6b:9b:a9:
16:94:6e:be:24:40:77:65:a0:1b:83:80:11:75:bd:
a3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9C:4A:71:B8:CB:15:42:0D:93:75:BF:D9:E0:80:37:6C:31:50:4B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36fcc0e3-3bcf-4c84-8a81-72aebbe36fc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:10c0::/46
Signature Algorithm: sha256WithRSAEncryption
ad:67:7d:81:68:e8:3f:fd:db:3a:c8:89:cd:7d:15:13:89:36:
08:31:79:62:21:89:13:d8:0f:8b:c1:6d:74:4f:c7:8c:26:af:
42:f1:70:26:00:dc:02:f3:4e:76:e5:95:fb:ee:0e:dc:4d:91:
1d:9b:43:6b:07:f5:68:c6:5b:85:c1:28:94:03:ad:e3:01:9e:
55:ce:b9:fa:a7:a4:10:1c:56:f4:75:78:5d:b9:a8:e6:66:e7:
9e:48:b7:fb:c3:7e:7d:e0:a5:83:d3:28:e9:58:d4:cb:12:cb:
92:f3:89:ea:7a:70:c9:71:8a:b1:b5:25:83:dc:79:7d:37:ed:
e7:9e:31:84:8c:63:06:3f:61:26:67:0f:85:9b:7a:b2:5b:96:
7d:9d:c4:08:63:33:46:c8:d3:43:43:23:ae:f9:69:87:a8:3f:
04:b7:8d:92:5a:99:97:dd:54:b2:41:23:4f:bf:d9:5d:cf:92:
2a:d8:71:de:22:26:a0:b2:ed:d7:7c:d5:34:c7:29:75:57:0c:
ab:6e:38:2b:a2:94:c8:21:4e:ad:63:fc:8c:fb:7a:44:a0:8e:
7d:1a:c9:19:48:e7:89:b4:c3:38:22:8c:69:62:62:ba:f7:0e:
54:98:b1:a5:2d:f8:7e:9e:4d:18:60:1f:d0:61:6a:13:cd:08:
b9:58:4b:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 4 21:37:37 2026 by rpki-client