
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40224638-a28e-4f61-9972-f1bcb7774c46.roa
File: 40224638-a28e-4f61-9972-f1bcb7774c46.roa (raw, json)
Hash identifier: pemCbQNjGD266sKobW6TRNkxrwk+1Mq3xNgOglq/USE=
Subject key identifier: 79:94:57:04:6B:C1:E8:8C:91:81:07:0A:BA:8E:C7:3E:88:22:CB:8A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 39571A0DC6A67523A2A10F5F41FC69F7D2AEA7A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40224638-a28e-4f61-9972-f1bcb7774c46.roa
Signing time: Fri 31 Jul 2026 00:50:58 +0000
ROA not before: Fri 31 Jul 2026 00:50:58 +0000
ROA not after: Thu 29 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fa0:2c00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:57:1a:0d:c6:a6:75:23:a2:a1:0f:5f:41:fc:69:f7:d2:ae:a7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 31 00:50:58 2026 GMT
Not After : Oct 29 23:59:59 2026 GMT
Subject: serialNumber=f79cd03ae660d9416d76d41bcc2f518fe8f2812a0b4bd6212abaac2335706de5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:79:e3:dc:44:53:ad:4f:c4:06:17:65:62:
2b:26:11:29:e3:eb:03:ee:7b:24:8a:4c:75:ff:f2:
b3:81:ce:89:63:a5:88:5c:f2:87:0a:60:54:80:05:
ae:c1:64:07:78:d0:4d:f6:73:c8:33:fa:84:ea:7f:
b0:6a:06:8c:a1:ae:c5:c3:02:0c:bd:63:a2:60:bf:
85:35:11:b6:68:d1:b5:6f:df:51:a8:a3:a7:e0:db:
99:ff:d2:0c:a9:aa:5d:45:0e:31:ca:7f:d4:13:2c:
b4:cb:d8:e0:9b:52:bb:5d:d2:65:55:d5:81:8f:7b:
f1:c1:50:fd:51:d8:46:00:25:eb:f2:04:ff:37:f5:
7d:e2:c9:86:fa:36:1b:a5:6f:13:0f:83:c5:5c:7a:
13:71:76:6d:66:6d:2c:c9:66:b9:00:c0:df:59:e0:
08:5f:78:24:6a:56:f0:29:97:ca:5c:ab:2c:57:4b:
fb:02:2a:1e:8c:c9:78:3c:d7:50:64:da:78:bd:f5:
59:53:1f:c0:77:16:9f:f8:74:62:99:7f:06:11:25:
ae:50:f6:d9:77:1b:d2:65:cf:35:ae:34:bf:c1:91:
25:65:cc:e4:61:1c:58:1e:12:10:ce:c2:49:08:6b:
50:75:4a:eb:80:4e:d6:fd:23:73:89:71:0d:bf:2b:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:94:57:04:6B:C1:E8:8C:91:81:07:0A:BA:8E:C7:3E:88:22:CB:8A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/40224638-a28e-4f61-9972-f1bcb7774c46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fa0:2c00::/40
Signature Algorithm: sha256WithRSAEncryption
be:ac:6d:6d:1b:55:71:b3:e3:c0:61:d4:f1:ae:1c:f7:34:ec:
81:b2:16:d7:5a:6c:6d:1f:3c:81:cc:d6:ce:33:44:aa:97:26:
64:7d:91:eb:ed:22:ac:95:4c:4b:37:b0:fc:5d:55:b8:66:b8:
f7:6e:98:36:24:5e:60:e4:0b:97:70:8e:e3:e4:9a:0c:dc:37:
35:bf:83:2e:86:9c:26:77:e1:34:78:3b:05:5a:c6:5b:1e:3f:
88:de:58:04:ce:9e:06:19:b0:c6:5c:b1:d8:f1:38:f1:62:35:
82:97:48:35:b7:61:39:38:dd:01:7b:45:3e:d0:59:50:af:8f:
64:63:80:cd:81:05:a4:20:96:f8:bf:90:59:e0:dc:6a:d5:79:
c8:ab:0a:5e:94:57:34:01:6d:0e:3b:68:e7:09:70:b5:b4:28:
f3:aa:d6:b6:54:98:17:cb:03:89:80:6c:f9:76:df:8f:2b:2b:
a2:60:6c:a1:49:5a:44:8c:5a:68:8b:0c:c9:44:05:16:1b:44:
7e:b6:a2:1a:cc:d1:c6:50:79:1f:14:7d:46:7b:cf:75:52:3e:
74:79:62:74:1f:0f:1c:5e:38:38:62:7c:84:34:78:76:8f:78:
aa:70:08:31:8e:d0:d7:40:93:76:8f:1b:3d:01:c0:bf:1e:0c:
79:b2:1a:86
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:47:38 2026 by rpki-client