
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa
File: 402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa (raw, json)
Hash identifier: wRFiZu77Z3Udmd8bLatLKYDhDodSiFqi0tXj0ZOA6qo=
Subject key identifier: DF:5D:3B:FA:93:DE:AA:BF:24:D0:A0:14:FA:F1:2B:E6:05:9F:2E:ED
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 613D0BE0497299C13671AC7564E6ADF933981D5D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa
Signing time: Fri 23 Oct 2026 00:31:21 +0000
ROA not before: Fri 23 Oct 2026 00:31:21 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:7400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:3d:0b:e0:49:72:99:c1:36:71:ac:75:64:e6:ad:f9:33:98:1d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 23 00:31:21 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=5c50bd4c72159772a2e5783e89fd41d88cca006b7dc3ba0390849820d0d25ab0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:68:ae:37:a9:69:9d:c6:c9:38:7d:6e:62:
57:98:9f:b3:09:b7:2c:56:0d:e9:40:83:7f:63:7f:
b3:45:ce:51:f2:ed:1d:d9:cc:59:07:7a:96:ff:91:
95:47:17:f7:c7:e9:e7:db:6d:8e:c8:90:5a:63:a8:
f3:f8:ad:1a:75:f7:37:8c:65:4a:e2:26:0f:7b:23:
59:dc:35:d8:e8:94:e8:4d:88:76:51:a8:3f:1a:88:
55:1f:51:98:0b:81:82:11:da:61:a3:f0:07:99:53:
42:22:c4:e7:0d:c8:30:84:01:8e:f2:de:11:57:97:
d5:0c:b9:ce:b2:8c:33:3f:f4:c8:63:37:0e:4e:6f:
9b:4e:04:44:2d:ee:24:6d:10:c9:98:13:50:4b:57:
bb:ef:d7:26:8b:2f:0e:e0:e3:6d:09:83:d0:90:08:
5a:0f:c3:70:bf:0a:b3:3b:7a:b9:70:2f:c9:2d:fc:
21:c1:c6:9f:db:91:01:21:50:5c:d9:a9:87:90:e2:
ef:d4:6e:d0:65:33:59:f4:63:36:b9:d2:65:3d:fb:
30:06:35:5f:35:00:8c:5d:3e:51:7f:d5:1b:58:a8:
e6:a1:8b:75:95:b1:57:87:00:9a:1a:30:78:7a:0b:
23:61:92:d9:47:f9:82:ec:e1:ed:b9:8a:d5:ba:b5:
4b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5D:3B:FA:93:DE:AA:BF:24:D0:A0:14:FA:F1:2B:E6:05:9F:2E:ED
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:7400::/40
Signature Algorithm: sha256WithRSAEncryption
c5:47:a1:cf:1d:6b:87:a1:28:ab:7f:04:6b:e9:12:d0:4b:cb:
7c:d4:cf:02:58:46:b4:9b:be:52:76:5e:77:ea:8c:8c:60:2e:
35:fa:09:b6:6b:3f:6b:0d:b3:4a:6b:18:53:dd:d2:23:f9:66:
73:da:dc:b7:e1:d1:20:26:53:e1:08:85:54:7f:22:d3:5c:f7:
d8:85:54:b3:55:40:d8:87:27:0c:d9:73:60:64:50:71:0f:27:
c8:be:17:29:82:85:aa:69:a3:f0:70:35:5a:2d:9c:28:35:aa:
cb:4a:ad:7e:21:e6:cf:6d:df:ab:86:d1:21:57:da:8e:ab:d9:
22:af:95:4b:ac:6f:25:e6:c2:f6:33:2b:6a:3c:31:35:eb:6e:
2e:98:c3:15:cc:ab:b5:f4:fa:da:64:c4:5c:95:3c:90:88:9e:
5c:dc:9f:0d:f3:97:af:5f:c7:2b:20:59:6c:5c:2a:ad:75:e3:
3e:16:ab:75:95:fb:6b:dd:5f:37:a8:d6:7b:7f:e8:d1:16:41:
03:8b:dc:62:38:b3:17:8e:63:db:ab:a8:f0:be:21:29:db:a9:
d3:dc:2b:3c:c8:3e:52:0e:ee:92:4d:b5:c2:c9:08:21:5b:f6:
c5:00:52:73:04:21:de:d1:3e:e1:ad:30:a0:e5:ce:43:95:ec:
da:56:21:c7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:09:09 2026 by rpki-client