
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e1b50e-d51f-45fc-ba3f-0668bc34f436.roa
File: 42e1b50e-d51f-45fc-ba3f-0668bc34f436.roa (raw, json)
Hash identifier: A6lb0bee5mEJvIuuyt1ZJgwfiRDE02ch+Zvbdn6jCYE=
Subject key identifier: 02:AE:F7:A8:09:D5:6E:E7:C3:2D:36:CB:13:0A:6D:37:6A:A2:CE:37
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 599B3CF5E37EC44F6C367B1F316FDBA72948548D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e1b50e-d51f-45fc-ba3f-0668bc34f436.roa
Signing time: Sat 24 Oct 2026 00:03:33 +0000
ROA not before: Sat 24 Oct 2026 00:03:33 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fed:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9b:3c:f5:e3:7e:c4:4f:6c:36:7b:1f:31:6f:db:a7:29:48:54:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 24 00:03:33 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=d1c5b26e4c009b2453a6f07ef0fa46edd7e5b27248d57cce5c691af1bad0dac3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:48:cf:48:37:ec:5c:cc:5c:6d:3d:ed:77:
c9:4a:a2:8e:4c:13:1c:bf:c3:24:66:65:28:64:73:
aa:38:46:a8:d8:74:2a:49:dd:08:16:38:79:51:66:
03:7a:f0:42:bf:cb:8f:c0:86:4b:10:4e:cc:03:bc:
dd:45:e4:88:45:43:fd:08:7a:9f:86:04:74:fd:d5:
75:84:18:30:9b:6b:f7:40:aa:fa:92:2b:9c:58:31:
f4:a8:0b:c2:67:af:82:3e:de:8d:f9:b3:75:2e:5f:
25:06:ea:74:0b:77:d3:0c:b4:4e:cc:58:e5:e7:68:
42:1b:f1:b4:3b:c8:d0:03:49:e9:bf:85:ae:d4:2c:
44:ca:c3:fc:bd:42:4a:4a:7d:f1:52:1c:8f:5e:33:
d4:53:67:f9:08:a0:1e:7c:9f:37:cb:8a:69:3c:08:
4f:68:1c:27:ce:f1:10:0f:6e:c8:37:21:2e:50:dd:
aa:61:67:2f:fa:ec:a2:0b:4f:6b:55:04:ec:6f:8c:
98:a2:31:cb:2c:c0:e9:3b:06:0a:fe:c8:db:84:1a:
eb:29:9a:14:48:b6:60:87:b1:27:5d:98:7f:03:78:
48:a4:ff:c0:9e:da:68:35:5e:3b:92:dc:60:a6:1d:
f7:7b:17:69:f2:ea:11:5d:f4:51:ea:b9:df:52:13:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AE:F7:A8:09:D5:6E:E7:C3:2D:36:CB:13:0A:6D:37:6A:A2:CE:37
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e1b50e-d51f-45fc-ba3f-0668bc34f436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fed:5000::/40
Signature Algorithm: sha256WithRSAEncryption
bb:49:b0:7e:3f:16:9d:0b:fe:b1:90:c9:9c:fd:0f:81:03:ae:
73:c4:be:b1:ea:93:2f:fe:3a:a2:c8:e9:65:5d:cd:42:73:5f:
2b:57:ca:ee:65:5c:ec:05:0a:be:10:e7:bf:8c:cd:b1:16:d1:
90:1f:4a:a0:48:40:3e:02:8b:d1:da:6f:46:15:33:3f:2a:43:
7b:ff:54:65:73:b2:95:c7:fa:12:b6:65:b1:cd:c2:87:db:da:
16:e9:80:98:e1:85:8b:e3:b1:b6:89:67:21:0e:ba:de:a7:fd:
02:65:e8:c8:96:fb:2b:71:1b:c2:c3:bc:c6:1f:cd:67:85:f9:
a1:2d:a5:5e:d1:3a:5e:54:ca:0b:85:5a:ca:39:e7:bf:57:c8:
f6:d0:42:a4:4d:56:73:c8:f9:56:ab:f4:0d:e3:3f:ec:ca:40:
56:40:97:97:7a:65:5b:5c:71:d1:ca:55:88:81:ae:b2:e0:85:
e4:e1:5a:b7:ed:25:00:a1:a2:2f:3a:d8:c6:a4:06:6e:be:38:
a3:17:b3:86:00:59:6e:90:5a:56:60:da:62:77:03:02:0d:de:
32:2a:c7:62:8b:da:17:3a:31:76:e9:0f:e5:a9:90:a1:78:67:
11:42:cf:64:36:e2:48:1f:3a:0c:45:91:5a:a4:6b:d3:02:cb:
7b:34:da:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 4 18:50:57 2026 by rpki-client