
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cc58e44-390c-409c-956a-31b9dc974d53.roa
File: 3cc58e44-390c-409c-956a-31b9dc974d53.roa (raw, json)
Hash identifier: 1IqSJAIsGSR+s9ejxCiP3HzQjVd1p37Lv7ufsrXZJ40=
Subject key identifier: 54:34:6B:E2:00:00:36:66:D2:5E:BA:4B:9B:3B:93:01:76:99:52:39
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 092CBADB96E88975234239F18FFB10C3DDD0FFCC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cc58e44-390c-409c-956a-31b9dc974d53.roa
Signing time: Wed 19 Aug 2026 00:20:37 +0000
ROA not before: Wed 19 Aug 2026 00:20:37 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe9:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:2c:ba:db:96:e8:89:75:23:42:39:f1:8f:fb:10:c3:dd:d0:ff:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 19 00:20:37 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=0e00a544e1ed03bb69209c28b46a7a0669fbbe7f063677b7bc0af35380084fb8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a5:74:88:df:2b:0a:3c:e4:3e:72:4b:0a:03:
3e:ab:f5:8a:ac:04:2d:15:72:60:3f:07:0b:4f:8d:
2c:85:4f:99:9f:84:d5:da:55:f9:9a:58:d1:0d:2f:
45:5c:3f:d7:2d:aa:59:3e:69:7f:db:85:e1:95:b0:
87:08:a3:12:fe:f2:bc:98:52:f7:3c:8b:9a:10:5a:
8f:16:ef:ca:d5:c6:f7:8d:41:b6:f4:37:a8:5d:9d:
3d:51:83:af:d0:a2:c1:8f:27:20:a8:ac:80:75:8d:
51:d9:1a:ba:52:a1:35:c0:d0:f2:c2:d9:4b:85:d5:
de:e5:0b:31:1e:45:2e:88:92:77:4a:82:fb:fe:6a:
b4:7a:d3:b2:9c:cc:ee:88:0d:71:c8:a6:35:1d:55:
a6:e0:92:33:fd:b1:83:c8:67:ec:00:64:f0:59:43:
bd:b3:85:e3:af:27:f4:ab:c0:b0:75:25:0b:75:aa:
48:e2:6b:fa:84:9f:58:eb:8b:b9:08:5d:6e:b7:53:
42:a7:1a:ff:80:07:b4:a2:fb:bd:ac:4e:0c:12:87:
25:84:b9:7b:82:ba:8b:5d:06:87:11:ce:2f:b3:b8:
97:e9:67:31:84:f2:a7:3b:2d:5c:57:c9:31:87:13:
fc:cb:93:cc:fd:29:96:e5:7e:8c:25:45:3f:95:5d:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:34:6B:E2:00:00:36:66:D2:5E:BA:4B:9B:3B:93:01:76:99:52:39
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3cc58e44-390c-409c-956a-31b9dc974d53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe9:6000::/40
Signature Algorithm: sha256WithRSAEncryption
95:fb:2e:9c:66:5b:3f:fe:d1:82:5f:89:22:41:2c:f4:df:b1:
4c:5c:8b:08:68:34:19:c9:43:e8:e1:6a:95:ff:49:5d:e6:5d:
89:d2:0a:1e:ed:f0:04:bc:4b:e8:48:d5:3a:4f:74:76:e8:9f:
8b:b5:32:f1:c4:ed:9b:44:56:bc:6b:66:53:3a:47:f9:f6:a5:
cb:73:6c:48:83:70:b5:d7:c8:d5:4c:7e:a7:19:b2:83:ef:59:
f5:a5:42:1b:f7:a1:db:7e:fd:ec:30:4f:dd:80:9f:fe:85:5c:
64:97:d9:af:90:fa:c5:ca:65:98:49:ac:d8:11:8d:0b:68:77:
5f:19:30:87:72:58:ed:60:18:eb:13:36:b0:77:a2:0a:ed:53:
c2:a8:cc:a5:3b:c7:d5:f3:18:ae:b8:35:c2:a7:35:6d:8e:d3:
81:56:7e:c1:8e:30:0e:91:64:7d:0e:93:e7:cb:dc:ac:d8:89:
8e:6d:2d:8a:3e:6c:ef:4c:5f:43:fc:fd:32:1f:18:97:b7:46:
93:6b:fc:e7:67:97:db:7f:a6:8e:79:11:0c:81:4e:be:17:0a:
2c:aa:db:55:41:5e:26:bd:ee:70:2d:7d:6f:93:f6:6d:e2:ee:
49:8f:42:be:06:dc:b9:6e:3f:3b:0a:35:b4:04:ba:12:8a:d1:
ca:d2:59:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:09:15 2026 by rpki-client