
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38582e98-cedb-40b3-8c3b-55448dc04e3d.roa
File: 38582e98-cedb-40b3-8c3b-55448dc04e3d.roa (raw, json)
Hash identifier: CNtKQ8epquQ/LZsJtGcsn7zMB84NYD8KW4HlbYUOsx4=
Subject key identifier: 61:A8:98:6E:B4:DD:1B:F3:60:E5:47:EC:A2:E9:DE:49:E5:91:1C:26
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5353576DFDE4D8760AA717C8FC587CE260D0E5D4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38582e98-cedb-40b3-8c3b-55448dc04e3d.roa
Signing time: Tue 04 Aug 2026 01:40:07 +0000
ROA not before: Tue 04 Aug 2026 01:40:07 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f10:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:53:57:6d:fd:e4:d8:76:0a:a7:17:c8:fc:58:7c:e2:60:d0:e5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 4 01:40:07 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=d83d0e6dbc671d93b7eb5c0b3f1d1b2c0510c9bb262d3ccb6be0f5e22c343624, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:72:0e:83:e9:b4:c4:45:04:3c:34:c2:04:
7f:9a:b2:5b:59:d5:7e:04:79:b5:e4:a7:8b:75:0f:
17:b7:1d:d6:af:38:e2:a9:34:c6:07:9b:f1:65:fb:
28:c1:1f:e3:14:0b:a6:95:cb:dc:de:a1:5d:de:10:
ff:f6:08:53:24:c4:46:0e:a5:65:cb:8c:26:ed:6f:
6a:cf:fc:82:a1:a6:ad:7a:fd:0f:d6:22:4a:ee:21:
2b:67:52:a4:24:ed:d4:86:04:45:ec:58:5b:64:8a:
e3:38:99:da:8c:6e:d3:98:49:06:80:b0:61:20:eb:
ad:b0:71:24:4a:9a:ea:95:fe:f4:82:ae:31:d9:b4:
d5:c1:cb:91:c6:c9:4d:75:d4:38:31:9f:8e:43:26:
df:71:87:17:b6:84:d7:6a:b6:b6:b4:a7:c9:f4:89:
d7:fe:19:90:ae:9d:2d:a5:09:98:58:8b:36:40:3e:
9e:54:d2:19:7c:b6:41:67:be:70:de:fd:34:35:91:
00:c6:35:82:bb:42:29:4f:41:56:80:41:84:39:33:
cc:e5:9b:bf:6e:47:21:8b:b4:49:ac:be:bb:1f:fd:
79:cd:d6:a8:13:be:11:0d:0a:03:52:97:cc:59:db:
98:0b:57:b4:b1:5c:86:5e:41:06:83:cc:65:8d:74:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A8:98:6E:B4:DD:1B:F3:60:E5:47:EC:A2:E9:DE:49:E5:91:1C:26
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/38582e98-cedb-40b3-8c3b-55448dc04e3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f10:c000::/36
Signature Algorithm: sha256WithRSAEncryption
12:9d:55:4b:dd:c4:71:a5:06:b6:7e:14:91:15:e0:32:22:6a:
b3:ca:12:08:d3:ff:69:82:5d:bb:ca:4e:68:65:9f:cf:7d:cc:
d2:ed:1c:23:56:30:b2:61:58:50:5e:1e:34:04:c9:96:db:de:
97:b0:2e:39:9e:e8:ee:dd:2a:42:68:04:1a:ea:2a:89:40:fa:
c9:fc:65:14:d6:1f:d4:16:0d:5f:a4:6c:c2:fb:cd:aa:8a:82:
d8:6a:33:d1:20:b2:fb:f9:f8:4c:6e:a2:b9:7d:d3:e8:90:c6:
b6:21:9d:96:7e:24:b5:21:a9:2a:e9:fa:c9:7e:31:9a:21:0d:
ad:8e:22:9c:9b:60:68:98:ce:93:f3:3a:51:33:be:52:37:a0:
11:89:55:29:52:83:7b:4c:cb:75:66:5b:74:4e:b5:ab:44:af:
5b:1f:3a:ee:6e:aa:95:ea:94:20:d8:1f:1f:a9:75:ae:e6:ca:
2a:2d:12:08:3b:11:d4:48:5c:0c:5e:c6:7c:ab:01:9b:02:c0:
09:79:a3:75:f9:85:d1:76:e8:f0:01:43:c7:c6:87:fd:b8:13:
7f:5e:b8:b9:f4:04:88:d6:13:57:aa:9a:af:ac:c1:a9:33:eb:
0d:ad:3a:ad:52:b7:fa:53:92:c6:c9:46:b8:8d:0a:26:92:ea:
11:06:0e:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:54:39 2026 by rpki-client